Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/fgO0Wedq6Z3jIfTFoARfa3YT_zY.roa
File: fgO0Wedq6Z3jIfTFoARfa3YT_zY.roa (raw, json)
Hash identifier: InBeXouiyy3TiQsZAXYTmj/YQ0SUPG856iIXQZG2jxE=
Subject key identifier: 7E:03:B4:59:E7:6A:E9:9D:E3:21:F4:C5:A0:04:5F:6B:76:13:FF:36
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 0192F5EE33420E17A78470A00232EA285FEE
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/fgO0Wedq6Z3jIfTFoARfa3YT_zY.roa
Signing time: Mon 04 Nov 2024 06:48:01 +0000
ROA not before: Mon 04 Nov 2024 06:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215694
IP address blocks: 45.156.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f5:ee:33:42:0e:17:a7:84:70:a0:02:32:ea:28:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Nov 4 06:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e03b459e76ae99de321f4c5a0045f6b7613ff36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:7b:2e:b0:2b:4d:dd:b3:db:d7:5c:51:84:
de:bc:4b:47:4e:ef:da:31:58:3e:58:06:ba:d2:da:
7c:cf:7f:cb:d3:6e:94:dd:d8:e6:8e:d3:05:88:97:
f1:d1:b5:17:7c:26:dd:6b:19:1d:22:37:85:59:d8:
f6:8d:06:6f:cf:d0:30:06:50:fe:62:f4:55:40:fc:
1e:12:6b:d0:db:3d:77:df:98:8f:7e:1e:e5:38:59:
c5:57:ca:44:9c:07:11:a4:55:1a:59:bc:70:ec:3d:
b6:19:36:f5:6a:e3:e7:ca:ec:2d:ff:51:5b:98:90:
c2:4c:08:20:ac:bc:62:84:e0:0c:2f:41:c5:ee:49:
06:62:57:13:80:64:1b:be:f9:cb:53:11:20:81:81:
d6:1b:4c:85:00:12:af:5e:a5:99:ef:43:05:a1:ce:
66:23:a9:f1:64:62:83:ce:d1:05:e8:ae:5f:79:7a:
df:38:a4:a9:f5:cc:e6:8e:ee:ac:a5:6f:41:01:a9:
46:86:22:93:5d:df:92:65:8b:04:d3:78:92:4d:70:
db:bd:5f:4f:6b:d1:f2:80:cd:e9:81:bd:d2:92:e6:
e9:1d:75:5b:23:66:87:54:00:29:6d:b5:ac:dc:83:
8d:df:70:14:ff:e7:65:0c:87:30:d3:3e:37:01:86:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:03:B4:59:E7:6A:E9:9D:E3:21:F4:C5:A0:04:5F:6B:76:13:FF:36
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/fgO0Wedq6Z3jIfTFoARfa3YT_zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.154.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2e:39:6a:f2:90:f4:cc:46:1f:c2:f7:22:84:0e:b4:27:4c:
74:ce:f4:12:92:d6:88:b2:5b:86:dd:55:fe:63:fc:e0:3b:f7:
83:dc:59:0e:f5:b0:ec:86:c4:5e:07:5f:2b:a7:d1:7c:85:80:
3d:ea:de:96:b3:e1:9a:0c:ec:16:9f:0f:06:6a:e2:9c:59:f2:
f4:61:cf:1b:ee:05:f4:5f:c3:56:55:a7:53:30:d3:08:d6:66:
b6:a2:aa:e7:31:ff:40:b1:1c:34:42:b5:8c:3e:3d:a9:66:c3:
46:b4:20:fc:28:02:db:6e:08:f4:ea:55:a3:f9:03:06:62:57:
e5:4d:5b:5c:05:e8:dd:57:c2:0b:90:f4:b9:ed:e4:94:88:49:
9b:39:3c:ee:f8:10:c9:18:c5:58:2b:09:57:1c:10:5a:fb:45:
2c:49:f7:b1:47:63:86:3f:1c:59:2d:79:d3:09:3f:d7:0f:ed:
dd:dc:8d:91:05:61:15:70:a3:93:35:8c:1f:7d:7c:65:35:f1:
ef:cf:35:a3:8c:5d:ed:73:51:e5:a9:c9:09:94:a4:4d:0f:06:
b1:09:00:a6:8b:42:e5:56:d0:19:0e:64:75:af:4f:b8:75:47:
8d:fd:6f:26:33:74:1a:b5:2b:2b:9f:d3:fd:4d:a6:8e:64:b8:
fb:23:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:05 2024 by rpki-client on console-ams.rpki-client.org