Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/a3vApC9D_QznOkY9l-Bx7ynuLm8.roa
File: a3vApC9D_QznOkY9l-Bx7ynuLm8.roa (raw, json)
Hash identifier: 0iCAJsFqBanii8slXw1lR1HrgTGm1+2kQem2xGDrwQk=
Subject key identifier: 6B:7B:C0:A4:2F:43:FD:0C:E7:3A:46:3D:97:E0:71:EF:29:EE:2E:6F
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 0192B056B4E0E0DCA3F2D00C9064AEAAFDAA
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/a3vApC9D_QznOkY9l-Bx7ynuLm8.roa
Signing time: Mon 21 Oct 2024 18:28:45 +0000
ROA not before: Mon 21 Oct 2024 18:28:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16262
IP address blocks: 45.10.174.0/24 maxlen: 24
45.81.33.0/24 maxlen: 24
45.150.238.0/24 maxlen: 24
45.150.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:56:b4:e0:e0:dc:a3:f2:d0:0c:90:64:ae:aa:fd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Oct 21 18:28:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b7bc0a42f43fd0ce73a463d97e071ef29ee2e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:b8:70:4a:d5:48:86:a2:92:3d:06:45:3b:
80:41:49:3f:69:fe:81:43:eb:99:25:c6:df:50:bf:
de:c6:4a:5a:45:0b:43:36:29:69:7c:ec:8f:96:bb:
54:99:3a:88:b1:43:47:e2:45:fc:3a:af:b8:f6:f4:
5c:d9:21:92:0b:08:4a:e5:e4:d3:4b:24:14:5a:95:
c9:29:42:96:ff:59:68:06:f8:a6:66:6d:59:e0:e0:
3b:2b:4b:f8:d2:59:06:b4:03:aa:ec:33:89:42:93:
b7:81:05:c9:ec:fe:42:8d:2c:42:0f:eb:69:ac:e8:
4a:dd:a2:f9:08:3c:92:10:77:01:ce:34:db:c7:1f:
12:38:d6:4e:a3:5b:54:9e:6e:e1:11:03:cb:f1:e7:
02:61:0d:f3:45:6a:f3:0f:49:42:b6:91:96:d9:3c:
be:d2:1d:e5:24:a9:c7:1f:d8:f4:aa:68:d5:85:5e:
fe:e6:1b:9a:5a:ad:6b:c0:e8:3e:0b:8e:84:d6:0b:
dd:91:f1:46:f5:21:a9:df:0d:8f:09:cf:7f:5a:8b:
1e:cf:61:e9:1c:4f:b9:6a:4c:3d:d9:3a:a5:b0:d7:
53:a9:7f:91:9f:e7:7c:16:fc:a5:db:0f:af:e0:e4:
2a:07:35:6a:1f:1b:11:90:44:4b:e0:c4:71:c7:90:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7B:C0:A4:2F:43:FD:0C:E7:3A:46:3D:97:E0:71:EF:29:EE:2E:6F
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/a3vApC9D_QznOkY9l-Bx7ynuLm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.174.0/24
45.81.33.0/24
45.150.238.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:f2:c3:9a:8c:96:06:19:4c:4b:76:14:f2:1a:06:b8:7f:d1:
b6:05:de:23:5f:8c:ed:ec:4b:61:c6:94:01:fa:5c:f3:d8:00:
be:2b:43:89:9a:f9:5b:48:cc:04:06:ab:48:8f:6c:99:8a:fd:
f7:e6:48:6c:b0:71:a5:76:11:f0:66:3d:62:60:65:e5:06:e6:
b1:14:ac:c0:42:7e:af:59:e5:d9:39:f9:ec:ef:05:15:cb:f9:
2e:17:e6:4f:9e:62:81:ff:d7:ae:1f:cb:a6:76:be:ce:7d:89:
70:be:5a:21:b1:71:2b:18:8d:7d:b0:e1:dd:00:6e:8a:a6:b5:
dc:a8:01:0b:5d:97:92:d3:b8:1f:dc:d8:2d:4c:5f:31:e1:a3:
f7:5b:41:32:ac:df:f4:ea:25:7c:fb:17:c1:59:07:23:0f:ea:
94:66:5d:dc:1d:23:3c:5b:aa:4f:36:b1:4e:75:df:b0:53:6f:
c7:79:01:c7:82:54:87:46:8b:10:c4:4e:4a:5b:aa:c2:69:9e:
11:0f:e5:f5:6e:e9:f3:50:2c:e6:34:15:8a:e0:f3:20:91:26:
d3:5d:cc:4b:21:4f:1d:fe:83:40:2b:26:cb:1e:fd:0a:57:ed:
ed:43:e8:64:7b:24:f7:73:54:46:ab:f5:f0:bf:eb:83:e1:9f:
02:60:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:22 2024 by rpki-client on console-fra.rpki-client.org