Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LDaCa6CdPx-uY6TqPi5fa1D8Vjk.roa
File: LDaCa6CdPx-uY6TqPi5fa1D8Vjk.roa (raw, json)
Hash identifier: nx5pC2zPNM5Cupu3aW0DKCNjhqocaLL7AJKbLXWjAG0=
Subject key identifier: 2C:36:82:6B:A0:9D:3F:1F:AE:63:A4:EA:3E:2E:5F:6B:50:FC:56:39
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018CC42558646F71ABE834C894A208739E0B
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LDaCa6CdPx-uY6TqPi5fa1D8Vjk.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 812
IP address blocks: 45.43.87.0/24 maxlen: 24
107.181.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:58:64:6f:71:ab:e8:34:c8:94:a2:08:73:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c36826ba09d3f1fae63a4ea3e2e5f6b50fc5639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:3f:a7:dc:62:5a:a9:fd:a1:87:22:db:d5:
d7:e8:09:b1:5b:ac:bb:ff:d7:b6:2b:71:f5:8e:50:
ad:93:34:07:40:c4:ce:de:98:d0:9e:f4:f8:93:50:
28:7c:5a:cb:16:c8:04:83:90:60:49:65:ae:ba:6a:
9b:09:c0:f5:2c:7d:a3:cb:a8:cb:b6:a0:69:41:43:
bb:30:38:e5:99:28:23:f8:05:a9:7b:c8:82:7f:6c:
3a:d4:c6:cc:af:ae:17:34:94:07:e4:a1:09:46:2a:
b8:cb:88:e2:30:29:79:54:fb:66:ec:16:cc:f5:06:
27:d4:c4:2c:7b:de:2d:f7:74:eb:52:f1:8f:2b:6c:
eb:b0:ba:05:9c:22:7a:4b:6b:2a:a0:9f:d8:b8:80:
f4:f1:08:f6:bd:0f:87:32:8d:7d:35:a1:0c:1e:2f:
8b:dc:37:6b:ef:90:d0:4e:b0:3c:b7:4d:3e:ec:b6:
86:af:60:6c:71:cb:dd:6b:b0:a3:c5:30:3b:56:28:
3a:82:70:50:07:e5:ba:a6:f6:2b:c8:2f:c8:f8:4c:
c9:82:1b:1a:db:b2:b4:2a:14:1d:6d:3b:7b:86:5f:
46:d8:a1:01:3c:bc:41:cb:a2:c4:23:c8:5f:1a:15:
0e:a0:a8:fe:3a:f7:0b:5d:4e:28:8f:52:1e:70:56:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:82:6B:A0:9D:3F:1F:AE:63:A4:EA:3E:2E:5F:6B:50:FC:56:39
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/LDaCa6CdPx-uY6TqPi5fa1D8Vjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.87.0/24
107.181.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c8:b9:7e:dc:8a:17:52:16:90:12:d7:29:c6:b1:30:34:c6:
f0:42:52:0c:e1:10:da:b1:4b:52:df:d6:de:c6:e3:ed:50:7a:
59:f9:74:0e:3d:3a:d3:65:eb:27:f0:43:39:99:4a:a9:af:32:
1d:0c:01:90:1f:85:07:00:20:14:47:4f:8f:0d:8c:e9:c1:0d:
5f:99:17:53:11:7a:46:f6:fb:2a:16:f0:56:20:0a:01:27:f9:
f9:49:8e:1e:aa:64:c3:f9:59:c8:aa:76:16:21:13:d6:22:6d:
a2:2b:fa:2e:6d:cc:7f:55:07:4f:27:4d:73:e1:a5:52:d7:26:
12:04:c1:fb:f5:00:69:30:f0:ac:69:68:39:e7:fd:3a:9c:d3:
29:0b:a9:c4:ec:29:4d:1f:be:1c:50:ec:4a:09:01:ec:68:32:
c5:a3:15:a8:6a:c9:c6:10:47:8b:a6:89:b8:89:10:2e:9d:41:
12:e4:d7:9e:d2:69:99:62:77:27:27:4b:f6:b1:89:4e:f6:f9:
17:47:0e:29:32:df:9e:a5:66:8c:5a:fc:58:fb:34:1c:36:0e:
14:fe:3b:60:46:db:a4:58:a0:7d:94:cc:59:50:4d:90:a4:ab:
3a:ef:fc:a6:cc:ca:48:ff:45:fb:25:04:93:40:c3:9d:d4:6f:
3e:a5:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:47 2024 by rpki-client on console-ams.rpki-client.org