Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/FytJBBCn_tLTqRhxr6sOKlPUOVg.roa
File: FytJBBCn_tLTqRhxr6sOKlPUOVg.roa (raw, json)
Hash identifier: eD9cTb9WzqGvQRnZdgdJMpqFqR/0KPtWtWQ+Td7gdGQ=
Subject key identifier: 17:2B:49:04:10:A7:FE:D2:D3:A9:18:71:AF:AB:0E:2A:53:D4:39:58
Certificate issuer: /CN=11f5d5e61b0ba4dc7bcc733e5ab2125735356b2f
Certificate serial: 018CC4254FE1F25902C96AD7D92EDBA79F1C
Authority key identifier: 11:F5:D5:E6:1B:0B:A4:DC:7B:CC:73:3E:5A:B2:12:57:35:35:6B:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfXV5hsLpNx7zHM-WrISVzU1ay8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/FytJBBCn_tLTqRhxr6sOKlPUOVg.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51747
IP address blocks: 45.146.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfXV5hsLpNx7zHM-WrISVzU1ay8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4f:e1:f2:59:02:c9:6a:d7:d9:2e:db:a7:9f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f5d5e61b0ba4dc7bcc733e5ab2125735356b2f
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=172b490410a7fed2d3a91871afab0e2a53d43958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:8b:42:c0:71:d1:29:48:96:70:e4:6d:7d:
22:8a:0a:88:cb:cd:d1:1f:5b:1d:b5:bf:b3:3e:de:
9e:3d:ae:76:7d:22:4c:48:1b:f5:fd:27:48:48:ed:
f5:6b:d6:53:7a:d9:6a:2b:36:83:79:fc:5c:a9:39:
76:d7:fc:87:de:0c:37:d4:ee:d9:63:8f:5e:cb:03:
a2:61:30:34:1c:5d:76:87:63:65:f3:74:0b:0c:dc:
d9:b5:ea:b8:42:5a:48:ce:c7:59:ed:81:fd:14:6b:
05:1a:e1:09:bc:6b:2f:2d:7d:9e:c0:3d:85:c3:b5:
40:ca:fd:80:bb:14:a2:15:2b:bb:0f:61:9e:2a:02:
06:41:f7:19:cf:f8:23:e3:ce:31:f8:24:2e:ce:70:
f4:93:9d:34:65:c5:21:2c:c5:db:9f:0b:6f:70:76:
13:c1:db:60:fa:09:bb:7f:b3:5e:7c:f6:d7:c1:60:
1f:2c:0b:1a:04:bc:69:b9:53:85:aa:53:7e:1a:3f:
8b:0f:8d:6d:98:96:bb:c6:09:ab:0e:fa:e0:8b:52:
2f:da:ab:08:b2:35:0e:2c:ea:d4:1c:a4:d0:d5:e8:
b5:9e:72:84:f8:bf:c0:90:d6:b2:d4:7b:fb:64:b1:
87:25:4b:7f:b5:0d:08:cc:6b:23:87:d7:84:75:93:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2B:49:04:10:A7:FE:D2:D3:A9:18:71:AF:AB:0E:2A:53:D4:39:58
X509v3 Authority Key Identifier:
keyid:11:F5:D5:E6:1B:0B:A4:DC:7B:CC:73:3E:5A:B2:12:57:35:35:6B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfXV5hsLpNx7zHM-WrISVzU1ay8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/FytJBBCn_tLTqRhxr6sOKlPUOVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.48.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:c4:9e:0c:2f:ef:75:73:56:71:83:c8:10:48:a3:e3:27:af:
72:a6:4a:d2:54:40:35:85:77:e4:54:98:50:c7:3c:fe:f1:38:
04:60:39:66:ab:43:dd:78:f8:28:0f:9f:51:31:fc:68:bb:11:
29:44:b7:93:33:ad:89:55:48:61:35:3e:81:30:10:2c:e0:a5:
c2:46:e2:a8:c6:c5:17:16:96:6f:c9:0f:ea:fa:24:4e:44:fc:
0d:54:19:9f:43:d2:e4:cc:f4:a0:ca:8f:59:6a:aa:54:1e:ea:
16:91:d8:dd:0e:c6:b3:c8:bc:e1:f5:d9:56:39:71:39:4b:11:
ea:2b:f9:c7:b2:e1:04:3b:c7:76:97:0b:e1:98:8f:8b:a6:15:
53:9c:25:50:b0:4f:a9:ec:c3:61:be:ad:84:ef:33:49:df:97:
0a:95:87:49:44:17:16:12:c6:59:b5:8e:36:01:29:46:42:46:
c5:31:e2:c3:c3:ca:7d:df:d9:be:c9:1a:13:16:d2:89:af:c2:
f6:2c:a0:19:6c:94:26:37:82:ce:11:bf:b1:28:17:f4:00:ab:
79:94:bf:70:f2:68:90:3f:b4:61:e7:b8:a9:3b:c6:83:5d:55:
e2:62:d7:c1:d2:ff:a1:79:2f:b2:bd:0e:a4:be:a6:da:9f:27:
9c:6d:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:07:14 2024 by rpki-client on console-fra.rpki-client.org