Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/_Fh1D8oSnm2BMSaERx42b1wB0vA.roa
File: _Fh1D8oSnm2BMSaERx42b1wB0vA.roa (raw, json)
Hash identifier: I/NphGDYA5Vd6pHa6QTu1JtHviFxX0yu0MNXsxDgDvk=
Subject key identifier: FC:58:75:0F:CA:12:9E:6D:81:31:26:84:47:1E:36:6F:5C:01:D2:F0
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 018CC8014ABDC0577AA18E1091C077CF2EAE
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/_Fh1D8oSnm2BMSaERx42b1wB0vA.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201500
IP address blocks: 45.147.130.0/24 maxlen: 24
45.147.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4a:bd:c0:57:7a:a1:8e:10:91:c0:77:cf:2e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc58750fca129e6d81312684471e366f5c01d2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:fc:07:42:56:32:62:b7:2b:b7:d4:1c:6a:
c2:48:38:d8:81:fe:d0:f9:f6:a2:12:3d:79:f8:3a:
6c:5f:5c:f4:2d:d7:b8:74:9d:58:00:8a:05:f8:53:
4d:eb:0a:c5:55:70:a2:2d:10:a9:a2:41:71:3d:b9:
84:9b:21:03:39:74:fb:0c:6b:a5:8e:b8:54:62:78:
05:04:9c:c0:75:e1:75:9a:c2:89:ac:89:f6:2b:aa:
29:5b:f4:00:c2:17:13:83:86:08:e5:77:b5:db:7b:
f7:75:72:4b:e8:24:f1:2e:85:5a:6e:69:85:d5:04:
34:06:ad:79:69:11:0e:5a:f9:92:bf:d0:3a:fe:95:
e3:e9:70:90:63:8f:48:00:6b:ff:39:42:03:1c:7a:
15:ba:f6:fc:68:47:61:6e:82:1d:de:b0:9e:9e:bb:
1c:4a:9a:01:0c:61:1c:2c:b5:f7:d9:a8:7c:52:c7:
28:0e:95:20:24:7e:50:56:2f:a0:25:69:31:69:e9:
22:75:a2:b4:7c:f9:9e:b9:67:e2:71:52:98:41:d1:
81:8e:c3:8a:f2:8e:66:d8:03:46:b0:c6:7a:57:d4:
5f:ff:24:7f:0c:c3:1b:77:20:23:2d:50:03:c5:c9:
70:98:50:9d:1b:e4:a3:8d:39:3b:b4:bf:1f:48:d3:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:75:0F:CA:12:9E:6D:81:31:26:84:47:1E:36:6F:5C:01:D2:F0
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/_Fh1D8oSnm2BMSaERx42b1wB0vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.130.0/23
Signature Algorithm: sha256WithRSAEncryption
90:db:84:d7:d1:a5:23:0e:6f:0d:63:c5:b2:3d:1b:62:58:80:
b0:95:46:3d:46:6f:5a:a8:d4:1b:0e:f2:b2:4c:30:eb:ac:a9:
bb:6b:12:14:67:55:85:6e:24:a8:e4:c1:a9:1d:a7:41:ef:9d:
c3:3e:c9:e1:d4:c9:ae:bf:09:45:ea:99:0c:82:75:9b:c2:8f:
f7:ab:a6:59:c0:d1:3d:d7:a0:4b:d2:f7:66:9c:6a:22:01:ce:
44:59:7f:60:ef:b8:4a:90:33:8d:c8:79:0a:73:48:88:1b:8e:
b9:97:95:5e:c5:36:b5:04:05:1f:ea:c4:5d:07:46:65:09:89:
97:a2:c6:1e:20:5f:49:a6:c4:73:ce:0a:82:bc:37:a9:32:e5:
ed:33:04:94:94:8e:7e:dc:cb:66:a0:50:b4:b2:d6:59:ac:5a:
e9:7e:47:05:49:d3:db:b1:19:73:0f:29:72:c7:8b:23:99:b5:
e8:1b:1d:20:5a:d3:8f:69:5b:79:a9:2a:c6:45:22:14:86:4a:
01:1a:01:75:70:02:3e:f0:22:0a:19:a9:b0:fb:25:49:b1:49:
66:b3:e6:0d:20:24:a0:11:87:6a:d3:3f:88:ea:92:ed:67:7c:
6f:11:05:11:31:f9:8e:ec:49:56:0a:7e:ad:ab:f8:d2:3b:c9:
93:b9:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:29:58 2024 by rpki-client on console-ams.rpki-client.org