Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/L7UQ0XBRExqUpkt_o1T7EolPLgM.roa
File: L7UQ0XBRExqUpkt_o1T7EolPLgM.roa (raw, json)
Hash identifier: OKZasxSZPHUT/rrpXlXsAXqkM9baNltoDcVqkBsV2dE=
Subject key identifier: 2F:B5:10:D1:70:51:13:1A:94:A6:4B:7F:A3:54:FB:12:89:4F:2E:03
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 0192E107DB8BDAB6B7B6963D4DBEBE515FCD
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/L7UQ0XBRExqUpkt_o1T7EolPLgM.roa
Signing time: Thu 31 Oct 2024 05:24:01 +0000
ROA not before: Thu 31 Oct 2024 05:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 45.142.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:07:db:8b:da:b6:b7:b6:96:3d:4d:be:be:51:5f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Oct 31 05:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb510d17051131a94a64b7fa354fb12894f2e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:99:08:c3:6c:1f:8b:47:8e:34:5c:37:dc:
29:b0:02:b4:d9:10:9e:cc:31:53:a2:fb:f0:ac:da:
13:5c:74:94:53:64:1e:d8:4f:3a:db:79:b3:17:cf:
5f:94:a3:c3:0a:73:ae:5b:bf:2a:9d:44:c7:57:80:
0e:c4:ed:50:70:e4:ad:e8:6d:c4:be:5a:31:33:90:
1d:de:66:db:4e:e2:d9:97:f9:12:5e:e6:e5:b2:4f:
e9:21:de:f0:55:e0:8b:cc:f9:35:12:48:01:e2:1c:
a0:4e:45:2c:5e:6a:53:91:04:97:d3:d5:15:99:e4:
93:d3:62:31:a8:27:e5:a0:6a:69:d0:a9:2f:18:d4:
08:06:96:ce:b0:b7:d1:74:37:fc:59:b0:9a:42:d6:
a0:1c:b7:eb:69:f9:60:02:5e:b3:c1:c2:58:15:16:
df:a1:6a:b5:83:f5:c2:4b:1d:51:9f:15:ac:66:57:
bc:7b:f1:6b:54:61:60:72:14:a2:b3:fd:a6:42:f3:
9d:f2:dc:83:f0:b9:b5:b3:c9:ea:b3:aa:f2:b4:b5:
a1:d0:8d:63:39:c1:da:14:bc:4b:6c:e9:09:4c:34:
d7:ff:db:fb:a4:f9:11:2a:d5:95:e3:6d:e2:de:68:
e9:ad:14:99:c6:2e:19:05:80:49:76:25:9f:46:22:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:10:D1:70:51:13:1A:94:A6:4B:7F:A3:54:FB:12:89:4F:2E:03
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/L7UQ0XBRExqUpkt_o1T7EolPLgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.188.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e8:50:1d:7b:ac:68:2e:d0:9e:7d:4e:ed:4c:ac:3d:52:0e:
da:89:05:b6:4f:2c:e4:d1:3b:42:ef:81:a3:0e:10:f1:34:0b:
1a:b9:42:8b:ef:1b:b5:87:2e:2c:77:91:22:85:0f:d3:3b:29:
c3:b8:df:0b:1f:d8:11:0b:cd:57:12:4c:b1:e7:27:42:a7:2a:
b6:43:37:91:19:a2:08:58:8e:76:10:a0:59:ec:c3:29:0a:51:
14:6f:04:62:aa:b6:72:bb:99:c5:3f:b0:88:21:c3:a6:e5:59:
10:97:1e:d6:48:16:48:76:76:9a:75:2b:53:36:31:68:5b:97:
4d:b7:98:67:a1:9f:9b:03:85:b2:f8:5a:e2:62:00:db:5b:84:
89:11:9e:82:c0:07:5f:ca:4c:21:0e:be:21:4a:af:4f:c1:e5:
91:c2:99:2c:2c:43:57:f5:07:69:e0:7b:5a:1c:27:e0:ed:bb:
b6:f5:60:fe:42:56:9e:bf:ac:6e:2e:91:8b:58:dc:f8:46:35:
66:7a:36:54:03:c1:1a:02:6a:0f:fc:71:ea:f5:2c:2b:d2:19:
e9:ca:55:37:fd:56:13:00:d1:e5:37:67:1c:63:2d:8d:d2:7e:
bd:77:43:04:3d:c7:51:f8:e4:f0:fe:db:fb:11:96:1d:81:29:
54:de:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:13:05 2024 by rpki-client on console-ams.rpki-client.org