Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/rFIc61Wi8Myn50LNgtmkpSs0fcE.roa
File: rFIc61Wi8Myn50LNgtmkpSs0fcE.roa (raw, json)
Hash identifier: R1wNd4VOV8U6dB6+7CF1z5MdUZyIPKBhlyp2d5md+ls=
Subject key identifier: AC:52:1C:EB:55:A2:F0:CC:A7:E7:42:CD:82:D9:A4:A5:2B:34:7D:C1
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01936910D5711B9E7AF911CD0F26AD92498B
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/rFIc61Wi8Myn50LNgtmkpSs0fcE.roa
Signing time: Tue 26 Nov 2024 15:22:11 +0000
ROA not before: Tue 26 Nov 2024 15:22:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136778
IP address blocks: 45.131.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:10:d5:71:1b:9e:7a:f9:11:cd:0f:26:ad:92:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 15:22:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac521ceb55a2f0cca7e742cd82d9a4a52b347dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:a0:41:2c:51:65:46:53:ba:61:4b:22:81:
69:61:28:04:1a:ed:9b:70:54:6d:1f:02:5e:dd:8b:
b9:57:24:12:40:2d:99:05:ab:f4:23:8f:8a:11:33:
78:c6:c2:bd:02:15:80:e1:04:b4:e4:a9:2d:71:ac:
5f:19:94:33:be:58:55:8a:db:af:f5:c8:43:cf:8f:
a1:af:4a:d9:77:9d:c1:49:80:88:4b:97:a8:8e:22:
47:5e:81:3e:27:51:67:d2:5f:1a:b2:3f:ed:7c:0f:
75:4c:1b:95:54:c8:7d:7f:27:86:35:91:03:89:79:
36:fe:59:2f:f2:0f:96:4a:64:17:2a:92:73:07:c5:
3d:52:c7:59:1c:4a:bb:71:95:48:b6:dc:23:c6:e7:
f2:31:e8:04:15:d3:56:75:7a:92:46:c7:db:d2:0f:
12:36:73:30:e3:e5:3a:c1:30:fd:97:28:f4:95:19:
ff:c9:52:98:a7:00:18:44:11:dd:01:4c:3e:cc:8f:
29:d4:59:3b:61:5a:d8:6d:62:b2:51:6c:b3:ba:60:
dc:9c:3a:a5:43:c9:0d:79:3f:28:c5:e7:47:23:38:
b1:3a:e4:5c:ae:0a:59:9e:79:ec:06:77:71:31:e5:
de:18:42:58:bd:0f:b8:b5:ad:e4:fb:23:ab:d5:44:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:1C:EB:55:A2:F0:CC:A7:E7:42:CD:82:D9:A4:A5:2B:34:7D:C1
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/rFIc61Wi8Myn50LNgtmkpSs0fcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.178.0/24
Signature Algorithm: sha256WithRSAEncryption
99:19:70:4f:e7:9e:7f:6b:8a:ab:a0:b8:87:90:5f:9f:89:f2:
58:09:99:27:8c:73:3f:04:30:0b:99:26:c9:fb:d2:fa:a1:61:
4f:4d:36:d3:04:5f:20:f5:cb:e2:d7:56:67:42:84:e4:6c:1b:
be:88:89:0a:1e:b7:f2:0a:15:bc:1e:97:72:54:c2:2b:6d:3f:
fd:59:50:80:21:cc:11:b5:07:1d:ed:43:fb:44:b2:72:a5:80:
3b:30:a0:95:c0:a0:43:b4:4a:44:33:5f:82:74:2a:5f:c5:f1:
e4:32:e0:8f:7c:00:5e:d6:60:67:12:73:f2:6a:27:2a:13:a6:
94:6f:54:01:19:89:2d:a4:ea:07:85:26:37:02:72:f5:30:9b:
93:d2:5b:49:3e:3d:be:49:d4:37:82:4c:d4:d5:22:6a:93:54:
b6:cb:b6:40:3b:7a:aa:1d:c1:70:fb:12:02:5e:68:96:00:27:
1d:26:72:d3:38:66:7a:e7:cf:d6:9b:6b:fc:3e:9b:28:66:bf:
b3:ad:b7:ee:e3:7f:38:6c:69:12:41:25:b4:cc:29:33:47:c1:
c9:93:6f:ac:19:4f:0c:a5:5c:52:ef:6d:4e:5d:47:91:d8:9a:
ef:02:4d:74:0b:f7:5e:48:d7:62:27:15:97:ac:26:7e:6b:ab:
e8:ff:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 17:53:49 2024 by rpki-client on console-ams.rpki-client.org