Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/FCQInrYCZBB0UfhIfqBj7iYd0E4.roa
File: FCQInrYCZBB0UfhIfqBj7iYd0E4.roa (raw, json)
Hash identifier: 2SuL/XyjlDiwpHc6qw4Z75qNJ1vE2VMpC685QxYKh58=
Subject key identifier: 14:24:08:9E:B6:02:64:10:74:51:F8:48:7E:A0:63:EE:26:1D:D0:4E
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 018CF41BA207BE111C8229BCBBBE5CC369BC
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/FCQInrYCZBB0UfhIfqBj7iYd0E4.roa
Signing time: Wed 10 Jan 2024 16:01:40 +0000
ROA not before: Wed 10 Jan 2024 16:01:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 45.157.150.0/24 maxlen: 24
45.157.151.0/24 maxlen: 24
45.157.148.0/24 maxlen: 24
45.157.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:1b:a2:07:be:11:1c:82:29:bc:bb:be:5c:c3:69:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Jan 10 16:01:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1424089eb60264107451f8487ea063ee261dd04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:59:c3:64:da:d4:cb:21:15:6c:9a:cf:ef:
f7:2e:2c:fa:b7:90:52:64:e0:20:2f:33:8a:eb:34:
34:e4:bd:4c:a2:7f:7a:07:37:f4:18:fe:41:fe:8c:
4c:a7:df:b6:87:6f:39:e4:45:c4:c2:89:40:20:75:
71:56:5d:d7:0e:f9:a5:68:e4:b5:c9:27:d9:77:72:
e9:f5:42:ea:b5:93:72:ca:b6:72:cc:a4:f6:85:69:
e7:7a:b0:f0:6f:60:ee:3d:04:74:91:b8:de:02:c1:
15:e7:95:a9:5c:f8:66:39:e8:52:a7:cd:3f:91:ae:
f2:6e:71:2f:70:3f:f0:7b:4c:42:50:7b:ed:bb:24:
b8:d2:f8:0f:20:5d:dd:e6:28:7b:53:3d:91:c0:c5:
24:1d:df:20:25:17:22:de:d9:ae:52:87:a1:34:ff:
8d:69:3e:a6:6a:ab:46:c2:79:c7:b4:97:68:8d:c2:
11:ac:94:bf:93:bc:34:7d:80:8a:e7:3e:4b:90:15:
b8:78:fd:79:fd:d7:01:a5:96:c0:29:3b:62:f7:7b:
d8:f9:07:92:0b:96:69:c1:c0:04:81:15:ca:3c:26:
2e:83:55:e1:ea:bb:b8:65:c8:95:fd:2c:6c:14:bd:
ff:ab:17:1d:1a:3a:d3:38:b0:27:86:13:b9:3e:df:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:24:08:9E:B6:02:64:10:74:51:F8:48:7E:A0:63:EE:26:1D:D0:4E
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/FCQInrYCZBB0UfhIfqBj7iYd0E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.148.0/22
Signature Algorithm: sha256WithRSAEncryption
43:3e:05:e4:16:65:db:ae:8a:91:82:b0:d3:46:a5:7d:9d:57:
c2:f8:8d:9e:56:fa:e2:55:a5:0a:6e:0a:b7:d8:70:b1:b9:f9:
bb:45:f4:19:14:9b:10:8d:05:47:3d:21:71:ed:96:bb:17:ca:
18:64:82:94:e1:fc:ce:52:e2:af:53:a0:11:3f:bb:03:48:6a:
30:eb:10:c5:85:c9:6b:f6:ba:29:98:f8:35:a3:62:88:93:15:
81:d2:cb:bb:b6:f8:f8:b2:43:df:7c:38:91:71:17:b9:c5:23:
91:91:c7:ed:3e:01:4a:81:37:e5:5a:7b:78:b9:e5:fe:1d:77:
98:b9:7a:b9:6e:64:25:4f:e8:fa:77:57:f8:35:0d:d9:fe:2e:
2a:9c:69:1b:3c:c3:43:e6:7c:f2:d1:a7:19:d3:43:39:1f:62:
84:35:32:e7:78:b7:16:59:d9:24:4f:cf:e4:39:48:ff:53:50:
6f:f8:39:c1:e2:39:52:3d:03:28:94:21:30:01:60:bd:44:ef:
31:77:12:d7:0b:19:9e:ae:38:8a:f8:77:53:ef:be:42:d1:d6:
e1:83:cc:0a:f5:f6:62:d4:c0:19:81:97:11:4f:8e:58:4e:07:
6c:c4:70:f9:c1:6d:1a:81:ca:12:d2:16:06:5b:15:f0:31:a4:
ee:9f:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:22:54 2024 by rpki-client on console-ams.rpki-client.org