Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/fe7WdecBqJJzr6tXEH0va1gh-hA.roa
File: fe7WdecBqJJzr6tXEH0va1gh-hA.roa (raw, json)
Hash identifier: nhESgR9Ej8xDhNm2ksFYUTXvXet3MWXowjKmGBSYH/c=
Subject key identifier: 7D:EE:D6:75:E7:01:A8:92:73:AF:AB:57:10:7D:2F:6B:58:21:FA:10
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 018D07A43D949E4EA0C39560DA2B1D5F149F
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/fe7WdecBqJJzr6tXEH0va1gh-hA.roa
Signing time: Sun 14 Jan 2024 11:03:40 +0000
ROA not before: Sun 14 Jan 2024 11:03:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 45.10.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:07:a4:3d:94:9e:4e:a0:c3:95:60:da:2b:1d:5f:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Jan 14 11:03:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7deed675e701a89273afab57107d2f6b5821fa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:dd:41:92:74:6d:17:52:7c:96:6d:7f:96:
ee:61:45:3b:35:0b:34:7e:75:29:9a:1d:a6:f3:83:
9f:a2:4b:73:65:06:c5:63:c6:c5:67:c6:a2:da:52:
6f:74:56:05:ff:2d:bb:f5:de:f5:25:cc:df:6d:d8:
b4:89:a3:e2:18:4c:61:ae:8f:36:e5:5e:44:7d:8f:
ac:c4:16:2e:1f:73:da:5f:6b:d2:91:b4:81:59:73:
db:cd:54:f1:da:15:6f:3f:4a:7e:6d:4a:84:df:4d:
b4:b1:a7:9d:a3:ca:93:51:38:74:a1:cd:18:13:2e:
95:ee:a6:b4:35:17:7f:44:07:c9:98:2e:98:0c:d1:
2d:df:64:30:d9:9e:e2:31:dd:a8:3d:e0:f0:51:74:
60:9e:a7:1a:eb:16:a3:bb:56:cd:e4:28:8e:7a:65:
fd:8a:c0:1c:fe:1b:5c:85:aa:07:2f:03:01:69:3f:
52:0c:e0:9a:9f:7c:ba:7b:80:dc:0a:75:17:e8:0d:
eb:99:bd:ce:9a:6b:4e:7d:b8:5b:87:10:af:94:be:
55:de:37:7d:10:f9:43:8c:4e:e1:2a:f1:93:e0:d9:
e2:c7:ce:94:88:86:0f:64:56:1c:0a:70:a8:46:08:
bc:17:65:f0:3f:38:b4:3b:92:2a:97:f4:2e:ef:56:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:D6:75:E7:01:A8:92:73:AF:AB:57:10:7D:2F:6B:58:21:FA:10
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/fe7WdecBqJJzr6tXEH0va1gh-hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.200.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a0:bc:75:86:be:6b:b3:6c:61:f3:0d:1b:73:fd:35:b4:ab:
01:2a:b8:37:db:e5:eb:4b:35:f1:f2:73:23:8e:ce:18:22:27:
c6:ca:8f:72:3a:b4:5e:60:ac:84:58:6e:96:14:52:fb:20:cf:
14:99:3c:dd:37:b6:9f:d4:f1:93:3c:6d:d4:a0:bd:1c:4a:79:
ae:1a:5f:88:ed:b8:82:61:7d:eb:24:00:4f:24:52:9c:07:97:
3d:68:e2:bf:fc:46:50:4e:a4:d7:e2:34:cd:bc:c5:23:7e:65:
c6:1c:4c:ff:98:df:86:13:1a:97:dc:c5:5d:0d:58:cc:c1:79:
1b:1f:b3:fe:6d:27:da:aa:2d:c1:7f:92:0c:4c:ed:c3:f7:91:
29:4f:29:44:12:dc:64:98:89:6e:f5:53:1b:30:12:a4:90:08:
c8:6c:66:cf:19:5d:9c:9b:55:5b:3d:80:0b:b2:ac:4d:3a:a0:
c6:1d:e9:25:eb:de:64:c0:a9:0f:d9:ee:64:2a:d2:89:21:8f:
11:4c:0e:5d:73:fe:51:59:e0:8e:f3:d1:22:32:6f:c1:ad:a9:
1a:c8:41:55:b4:1a:b1:d3:68:e0:d8:9e:79:17:2b:41:2d:00:
18:21:7e:2c:a5:1b:99:84:8b:e4:8c:d8:e8:e7:a0:e6:b4:2f:
ef:ef:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:05:22 2024 by rpki-client on console-ams.rpki-client.org