Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/92OsBQ38S_tQ_rULx83ba4fUrgo.roa
File: 92OsBQ38S_tQ_rULx83ba4fUrgo.roa (raw, json)
Hash identifier: 4zRCxf/nO2sRtWmuTTa6KwAXlh4cBgWVS8fuE0g2cek=
Subject key identifier: F7:63:AC:05:0D:FC:4B:FB:50:FE:B5:0B:C7:CD:DB:6B:87:D4:AE:0A
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018F8DD0D523BDE8E19756BDD0403CC64999
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/92OsBQ38S_tQ_rULx83ba4fUrgo.roa
Signing time: Sat 18 May 2024 22:27:04 +0000
ROA not before: Sat 18 May 2024 22:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41000
IP address blocks: 45.132.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:d0:d5:23:bd:e8:e1:97:56:bd:d0:40:3c:c6:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: May 18 22:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f763ac050dfc4bfb50feb50bc7cddb6b87d4ae0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:c3:96:28:ab:26:a2:3e:4c:59:7a:e1:36:
89:bb:9f:bd:b4:df:7b:ff:89:a8:7f:b1:d7:4e:ad:
e2:6c:07:e1:65:94:6f:39:c7:24:86:ad:de:0b:5a:
f9:71:da:af:01:dc:ae:2f:5b:1b:3c:87:fc:c6:3c:
9b:1b:d8:b1:ba:af:cb:f0:ac:ef:11:78:dc:a3:df:
78:36:49:55:26:7a:04:8c:ee:df:96:2c:7f:19:9c:
93:9f:4a:59:e8:76:67:3b:bb:87:32:83:31:b4:77:
21:ab:07:5a:8a:b5:da:f8:fd:bd:c9:44:91:8d:ba:
fd:c7:67:c0:8a:29:a0:ea:9b:0b:57:a0:3e:5f:17:
ac:15:ba:5b:27:e8:3e:08:f9:2d:f9:7d:53:b3:82:
8f:18:d0:ef:60:d0:23:d0:21:df:91:39:49:67:18:
dd:52:e0:36:1d:37:7f:a1:4b:e5:71:5c:79:d4:3e:
37:aa:5e:e3:d0:d8:10:1c:aa:a0:33:7a:f1:61:06:
2f:27:89:0e:2e:6f:ef:3c:58:ee:d9:9e:c9:76:29:
47:d2:af:88:52:a9:dd:d5:2e:a8:17:0a:f2:3f:f9:
48:fb:57:a5:76:91:f0:7f:0d:7a:53:68:95:d7:d6:
65:6a:bf:ee:0a:00:05:12:03:e4:34:7a:64:5d:9b:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:AC:05:0D:FC:4B:FB:50:FE:B5:0B:C7:CD:DB:6B:87:D4:AE:0A
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/92OsBQ38S_tQ_rULx83ba4fUrgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.24.0/24
Signature Algorithm: sha256WithRSAEncryption
78:52:5c:ac:76:64:d4:a5:84:3f:0f:bd:04:95:84:74:d9:4e:
07:b3:de:ba:ee:3d:67:0e:a6:6b:ce:64:c4:40:c6:89:14:b2:
24:48:ef:55:7a:e6:eb:84:c7:5b:3d:41:a2:47:ad:11:dd:7b:
08:68:2b:fe:20:ec:de:c4:67:52:a3:83:4f:39:cb:4c:4d:4c:
ae:2b:0c:03:43:5c:a8:4c:a2:19:b9:d8:a1:d5:96:3c:b8:f0:
da:96:50:f4:b6:88:e8:cc:79:72:ea:1d:07:f9:c8:2a:b2:5c:
b2:ba:55:99:41:da:80:f1:e8:c2:3a:ec:45:80:dd:8d:75:9f:
35:67:f3:6b:d2:a8:42:e6:e8:89:f2:a6:94:03:e9:4f:6c:1c:
e3:41:bf:7c:04:ad:1b:d7:62:4b:00:01:b1:b9:4e:a6:9e:25:
4a:5c:ef:de:81:88:9a:8f:88:8e:39:c6:e2:50:42:09:f2:53:
40:6c:bf:6a:6c:48:10:8e:2f:c1:5f:cd:01:d6:3b:c6:72:9f:
79:8c:96:e1:4e:ab:09:dc:2f:ea:5f:88:07:8c:2e:b1:42:13:
de:9d:d6:4f:93:54:b9:91:94:32:64:8b:44:52:8b:53:45:a1:
be:c4:38:ac:fd:08:ef:58:0d:00:2e:b8:64:d9:d1:7e:39:7f:
83:c7:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:14:56 2024 by rpki-client on console-ams.rpki-client.org