Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/w1jTfX8qaAXFZ9WGmVAYm3FBCrI.roa
File: w1jTfX8qaAXFZ9WGmVAYm3FBCrI.roa (raw, json)
Hash identifier: PPfpUCbIexcNt4/pHDR7NTZa7x2c8As02tt0Fa6nCgE=
Subject key identifier: C3:58:D3:7D:7F:2A:68:05:C5:67:D5:86:99:50:18:9B:71:41:0A:B2
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 019395C3FE4441E1441FB0D0D7897607CB24
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/w1jTfX8qaAXFZ9WGmVAYm3FBCrI.roa
Signing time: Thu 05 Dec 2024 07:41:09 +0000
ROA not before: Thu 05 Dec 2024 07:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57137
IP address blocks: 45.129.148.0/24 maxlen: 24
45.129.149.0/24 maxlen: 24
45.129.150.0/24 maxlen: 24
45.129.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:c3:fe:44:41:e1:44:1f:b0:d0:d7:89:76:07:cb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Dec 5 07:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c358d37d7f2a6805c567d5869950189b71410ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:4c:17:81:77:d3:c6:2b:1f:e0:d8:20:03:
a8:2e:8e:d5:82:27:44:f9:19:bc:10:b1:4f:b1:4d:
a1:92:48:e1:f4:c9:75:e1:c9:df:0e:c6:62:5b:bb:
3c:43:9b:49:1c:2c:fa:0d:5e:8f:3d:38:0f:69:50:
bf:e4:f6:23:c8:53:8d:25:26:b9:3f:7b:9d:30:ea:
4f:2b:5b:43:95:98:18:3c:77:e7:ad:bb:c0:ab:cf:
e0:a9:95:0a:96:46:5b:df:76:df:83:cd:50:26:04:
d0:04:a7:f8:e9:86:f9:a2:87:13:af:05:4b:99:53:
9c:4b:28:58:9e:2c:60:77:62:df:42:89:78:f7:36:
83:21:7c:9f:72:ef:c1:97:36:36:1c:48:fe:41:23:
79:07:b1:71:d9:76:e9:77:7a:43:53:fc:cd:70:eb:
b9:56:42:2f:5d:a4:6b:bb:cf:bf:d7:39:40:44:45:
dd:4d:34:32:ee:d4:46:67:c7:ad:fa:81:8a:d3:c7:
da:47:aa:39:f0:ff:d4:83:95:f7:01:fb:6b:66:93:
bf:99:38:64:b2:aa:01:ca:8c:10:5b:97:a0:72:aa:
ba:4a:4d:6e:72:08:07:03:97:4e:1f:6c:ab:4a:eb:
d2:b9:15:e3:dd:95:f0:c4:50:70:25:e2:3c:e1:31:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:D3:7D:7F:2A:68:05:C5:67:D5:86:99:50:18:9B:71:41:0A:B2
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/w1jTfX8qaAXFZ9WGmVAYm3FBCrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.148.0/22
Signature Algorithm: sha256WithRSAEncryption
33:fc:b1:8d:9f:60:8c:82:ce:23:a4:dc:f5:b0:96:ec:17:d6:
7d:23:a0:1a:e2:f7:52:fa:c7:8f:b6:9e:ed:c9:78:0e:cd:c3:
6c:94:5c:0f:33:71:20:e9:7c:02:c6:0a:81:cf:a9:09:e1:83:
aa:52:b0:0d:65:58:af:77:eb:83:ef:a9:21:40:ce:12:6f:f3:
89:3e:a1:db:2a:58:8b:1d:0e:2d:4b:8b:28:b1:c9:15:27:fc:
9a:90:9a:e3:d5:d7:b2:c6:f6:c0:69:9c:f8:93:c2:3f:0d:44:
70:4d:bf:8f:19:c3:f3:d0:fd:77:37:2a:34:7a:31:a8:8f:f5:
a0:0b:5c:de:c6:cd:1c:f8:58:46:c8:34:2e:2e:90:8c:d4:3c:
ca:f0:ef:9d:bc:cb:1c:86:bb:de:17:f2:a4:f0:69:f1:3c:fa:
9e:0d:17:69:fe:48:c1:ba:e8:7d:3b:d9:75:72:6f:b8:38:3e:
ca:be:8c:13:8d:da:91:1f:44:78:60:d8:45:5d:9d:fe:48:a1:
67:e2:06:80:fd:09:6a:5c:06:8a:26:88:16:e3:74:24:ca:62:
c1:21:a9:f1:24:c3:fb:36:b1:9b:6c:c8:82:c1:34:96:8a:e7:
7a:ab:f7:35:47:b9:0d:5d:61:6e:a8:1d:c7:fe:64:25:05:2b:
db:ab:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:21:13 2024 by rpki-client on console-ams.rpki-client.org