Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/xXdD-bZ_mHDek1I2do89Um4507E.roa
File: xXdD-bZ_mHDek1I2do89Um4507E.roa (raw, json)
Hash identifier: QSM4rofMj1r07zxf5bWGDGFusQb9ZhuapaBnY63Epv8=
Subject key identifier: C5:77:43:F9:B6:7F:98:70:DE:93:52:36:76:8F:3D:52:6E:39:D3:B1
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 018E2285FD71744DB1B2B62BDFFA9FDBDBDE
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/xXdD-bZ_mHDek1I2do89Um4507E.roa
Signing time: Sat 09 Mar 2024 09:23:10 +0000
ROA not before: Sat 09 Mar 2024 09:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216151
IP address blocks: 45.142.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:22:85:fd:71:74:4d:b1:b2:b6:2b:df:fa:9f:db:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Mar 9 09:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c57743f9b67f9870de935236768f3d526e39d3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:af:ee:9d:09:f5:3f:19:48:2a:31:1b:69:
e7:fe:ba:96:fc:5c:98:dc:f9:3a:ed:fd:17:df:1a:
41:76:a0:f5:dd:02:50:e1:43:64:a8:23:c1:09:82:
bd:7e:36:e0:4e:87:3a:84:b0:d4:59:8c:7b:0b:8e:
c4:c1:65:10:fb:69:2a:47:69:2f:e4:17:90:92:38:
82:ce:cb:27:ff:91:ab:80:18:81:c0:ef:39:55:70:
56:b1:43:ce:7f:4d:ac:38:b5:3c:de:db:ff:10:56:
b9:d2:2b:7b:95:ab:ac:fc:48:0c:c0:3d:d1:e7:c3:
6a:cf:e2:2f:a9:b0:b3:3f:ff:be:ac:37:44:ff:4b:
fa:63:e1:82:5c:7e:0a:f8:f4:ed:71:0d:87:0f:01:
5f:47:12:86:eb:10:a3:a3:3e:78:cc:1b:da:07:a9:
d9:d9:9f:24:45:14:fd:2d:56:a4:20:cc:a6:c3:ac:
4c:86:0d:96:c9:ce:ad:6e:43:a0:3a:40:6b:6a:80:
6d:8e:63:39:19:fd:dc:05:96:a5:2f:60:b7:45:ed:
3b:38:3f:d8:5c:e1:73:e7:e5:d9:8e:69:80:00:b1:
50:93:ea:c3:be:10:a8:f4:04:0d:e9:54:4d:95:c1:
0f:79:8f:8c:53:db:ed:60:dc:26:fb:db:f4:56:22:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:43:F9:B6:7F:98:70:DE:93:52:36:76:8F:3D:52:6E:39:D3:B1
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/xXdD-bZ_mHDek1I2do89Um4507E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:73:19:92:25:cc:af:29:3b:a8:98:d7:07:f5:62:3e:8d:66:
df:c2:d2:77:fb:76:ee:7f:d7:7f:38:09:e5:89:eb:e9:4c:10:
7e:59:0f:49:37:d0:57:36:97:c0:3a:51:0c:cc:2b:c4:4e:74:
e2:ad:5d:8f:23:71:48:06:34:6a:9f:7b:ce:86:c4:6b:d3:5b:
78:9a:d3:f2:23:d5:87:c1:4e:d2:ca:18:6b:62:a1:57:f9:6f:
ad:56:dc:87:67:94:39:07:58:1c:3c:f2:8b:af:4c:11:7a:e1:
b4:bc:b5:ff:79:f6:8d:98:a7:60:b6:1e:27:2e:d2:98:41:bc:
69:ae:ec:7f:40:48:ef:34:24:a3:c7:a0:15:fa:ff:f1:71:90:
94:0f:a7:fe:a8:ff:99:f6:e8:88:34:c0:37:81:87:29:a1:57:
6d:14:b4:e1:de:ae:47:82:31:61:b4:57:0e:f4:8f:08:82:14:
ae:49:c0:a3:1b:d1:43:f7:29:1b:66:54:79:85:f5:1f:df:3c:
f0:ed:d5:7a:85:82:cf:bc:8d:6a:c4:91:60:14:d9:e8:fe:ac:
50:cc:97:71:ae:79:0c:36:27:33:92:c1:1a:68:60:3d:5f:1e:
a1:eb:50:92:44:57:e5:bc:e3:0a:cf:54:9f:79:0d:55:d9:db:
bc:46:20:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:49:27 2024 by rpki-client on console-fra.rpki-client.org