Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/fLBUbre_tBOKpaBgj8NQayTpAGs.roa
File: fLBUbre_tBOKpaBgj8NQayTpAGs.roa (raw, json)
Hash identifier: QElFa5vh49nT8ewppz4g6LuYyh4105WXU/GmnLryLx8=
Subject key identifier: 7C:B0:54:6E:B7:BF:B4:13:8A:A5:A0:60:8F:C3:50:6B:24:E9:00:6B
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 018E099D6381AD97C87EDDA55E12C88636F9
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/fLBUbre_tBOKpaBgj8NQayTpAGs.roa
Signing time: Mon 04 Mar 2024 13:18:13 +0000
ROA not before: Mon 04 Mar 2024 13:18:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215559
IP address blocks: 45.129.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:9d:63:81:ad:97:c8:7e:dd:a5:5e:12:c8:86:36:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Mar 4 13:18:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cb0546eb7bfb4138aa5a0608fc3506b24e9006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:1c:0a:6d:79:af:9f:13:a4:07:86:d9:c8:
49:78:32:79:7b:94:c1:0e:ae:0b:68:ee:91:f1:82:
ff:9b:27:26:3d:12:a1:14:67:3e:10:e6:51:9e:c7:
9d:6f:1d:dd:79:28:89:08:3d:8f:29:31:85:9e:1f:
6f:5d:ed:61:a8:eb:0e:b5:cd:a1:82:21:07:3b:31:
21:18:7b:aa:72:bf:5f:b2:df:8a:c4:99:cd:53:a5:
2d:4f:69:2c:26:3f:0d:cc:dc:e5:cc:ff:34:bf:48:
a5:81:62:87:dd:7e:df:72:6c:7a:5d:65:c3:37:f5:
59:8f:ff:85:80:d7:e9:56:90:af:f5:15:cd:e9:be:
ec:3d:7a:12:34:93:bf:5f:03:aa:3e:c0:0e:40:9e:
c5:ba:e7:73:51:41:13:05:7a:eb:da:a6:dc:7a:e7:
4d:82:14:96:6d:7e:2a:31:46:ae:2f:91:f4:ff:22:
10:53:8d:17:77:94:8c:f6:10:8e:4b:01:95:79:97:
d9:0e:24:6f:5c:2c:1a:1b:44:d7:12:56:6d:6f:1a:
2e:c1:e7:21:0a:c3:fc:5b:14:67:3c:f1:db:16:f6:
d0:28:22:47:e4:f8:fe:49:da:95:22:14:36:2a:9c:
7b:81:ca:d1:03:9f:ae:41:a6:fb:97:dc:26:77:a7:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B0:54:6E:B7:BF:B4:13:8A:A5:A0:60:8F:C3:50:6B:24:E9:00:6B
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/fLBUbre_tBOKpaBgj8NQayTpAGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bc:2e:6e:bf:aa:05:c7:02:87:00:ed:bd:79:af:6e:61:2f:
a6:1b:0e:cf:31:92:77:9a:a6:af:ab:60:ff:66:64:2d:d5:23:
47:b7:b2:1c:7e:20:76:54:42:d6:90:74:b9:e2:9d:b3:6b:44:
4d:7b:91:74:6a:9a:87:92:d0:1b:8f:d3:fc:3b:f8:fa:e2:b1:
f8:cc:48:d3:bb:58:06:19:b0:41:bc:39:3d:4d:b5:80:12:79:
02:76:00:2d:7f:1d:85:b0:57:23:60:02:4b:e3:ae:7c:68:28:
ba:4a:df:68:b0:f5:84:49:1d:df:82:f1:9f:d3:ed:d8:69:78:
be:28:f3:1e:a0:74:47:cc:9a:1c:98:05:7d:cf:e1:2d:29:3e:
7f:15:02:7a:88:42:18:90:e5:46:1b:36:1a:e8:a8:77:09:89:
d6:21:36:b8:cf:98:6c:e2:d5:0a:a5:19:ed:b4:55:6f:7b:6a:
4f:5c:4e:b4:bb:80:89:83:38:3b:50:98:31:ea:56:3f:e6:27:
59:a7:9f:5c:1b:92:bc:54:5e:2e:9c:f0:09:ca:d3:79:2f:e1:
32:7f:39:d6:5c:48:26:86:89:1a:cd:ec:b1:84:9b:cc:a9:8b:
40:9d:03:a2:07:fc:3d:81:57:d5:d8:97:a4:79:6a:b7:80:66:
98:c4:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:34:30 2024 by rpki-client on console-ams.rpki-client.org