Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fh1TH-drXKASPzi3LMTqLV35EjQ.roa
File: fh1TH-drXKASPzi3LMTqLV35EjQ.roa (raw, json)
Hash identifier: aBsUUReRDHBgvPar3ejAXxRncZ5S9C0cjuyqpxQw/uE=
Subject key identifier: 7E:1D:53:1F:E7:6B:5C:A0:12:3F:38:B7:2C:C4:EA:2D:5D:F9:12:34
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018CC7947D01137181A796D09BF2B0D6067F
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fh1TH-drXKASPzi3LMTqLV35EjQ.roa
Signing time: Tue 02 Jan 2024 00:30:46 +0000
ROA not before: Tue 02 Jan 2024 00:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198100
IP address blocks: 45.145.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:7d:01:13:71:81:a7:96:d0:9b:f2:b0:d6:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 00:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e1d531fe76b5ca0123f38b72cc4ea2d5df91234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:3e:1f:40:16:66:df:39:d0:57:61:74:b7:
15:c8:4d:7c:d6:d8:92:ac:34:b1:b4:b3:96:f7:41:
de:5f:f8:30:a8:2f:89:a1:ab:aa:b5:11:8e:de:da:
91:54:71:f2:95:23:98:f6:3d:1f:67:22:47:2c:c6:
3a:f2:79:7b:7f:e3:a0:51:00:72:53:b5:c2:5a:b1:
cd:4b:13:06:8b:dd:49:92:cf:59:9b:29:23:94:0f:
32:c9:4d:3b:88:af:43:12:98:53:21:80:62:43:db:
8e:7b:d5:4a:0c:13:a5:09:b9:d4:f5:4c:86:e1:33:
f7:5e:b6:b3:24:eb:34:b4:15:35:4b:db:49:73:26:
8e:d1:93:36:26:15:5e:d7:5f:01:31:7a:c2:8d:d4:
f7:07:e8:84:f4:a0:28:30:7b:74:3e:7e:f0:45:99:
d4:bc:a6:ef:b1:d9:d4:29:12:ca:9f:2a:0a:ee:6d:
18:68:3b:30:43:11:8c:03:c0:c4:22:37:d9:a6:5e:
ef:0f:a5:29:a2:c7:74:f0:8c:3d:7c:c7:00:0d:d9:
aa:bc:f8:00:61:8d:db:cc:25:a1:ee:fa:bc:59:62:
05:ab:7a:98:16:77:70:c2:0e:95:4b:ac:5d:ef:36:
53:fa:6a:a7:b5:db:76:72:b0:43:2c:3e:fd:e3:92:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1D:53:1F:E7:6B:5C:A0:12:3F:38:B7:2C:C4:EA:2D:5D:F9:12:34
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fh1TH-drXKASPzi3LMTqLV35EjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4b:a0:23:11:71:11:cd:99:31:86:6c:f2:0e:01:20:7a:a9:
54:37:a0:e5:70:3b:aa:81:8d:39:8d:cf:3f:a3:a8:73:71:b9:
91:fc:7d:cf:89:78:8b:3b:91:1a:8a:78:be:a0:76:5d:04:58:
79:8d:45:2d:a2:c4:54:87:40:3d:79:9e:9d:a2:f9:52:f1:c2:
66:c5:cb:2e:ea:30:e1:5b:38:75:7c:85:67:31:99:05:e3:61:
de:ee:d7:6d:14:d0:40:6c:56:ae:1d:7b:71:fe:46:8a:1e:9a:
39:6c:b3:a2:f5:33:13:63:ba:50:58:47:f0:dc:54:c8:09:48:
80:20:48:68:8c:2e:34:c1:9b:54:92:de:94:20:77:e6:3c:8c:
5f:27:e8:ee:9f:9d:78:e2:bd:25:03:8f:36:91:30:e8:f2:fe:
24:0e:96:df:bc:45:66:c5:13:14:1a:ce:39:21:11:36:0e:e7:
0b:50:10:76:ee:f5:98:f5:09:a4:74:f3:8a:2a:30:90:61:8a:
47:50:fc:13:5f:00:2b:0c:e6:c9:00:80:cb:6f:0a:2c:c4:35:
c7:ae:a1:7f:e8:f7:9f:16:1a:73:6d:a1:f0:bb:04:2a:64:94:
6f:3d:5a:01:93:fd:86:6c:1d:76:f3:4d:8d:11:82:ff:6c:75:
86:a7:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:54:25 2024 by rpki-client on console-fra.rpki-client.org