Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/49fcvwUOxgDQSb6yIv0QLa2Zpvw.roa
File: 49fcvwUOxgDQSb6yIv0QLa2Zpvw.roa (raw, json)
Hash identifier: JlTFhC1tBOMJy9g55I1RA2Abfr5tvr90WH41SwQtRO4=
Subject key identifier: E3:D7:DC:BF:05:0E:C6:00:D0:49:BE:B2:22:FD:10:2D:AD:99:A6:FC
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018FA077E36F9411EAA0AA541540FA18B45A
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/49fcvwUOxgDQSb6yIv0QLa2Zpvw.roa
Signing time: Wed 22 May 2024 13:22:42 +0000
ROA not before: Wed 22 May 2024 13:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 45.141.54.0/24 maxlen: 24
45.155.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:77:e3:6f:94:11:ea:a0:aa:54:15:40:fa:18:b4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: May 22 13:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3d7dcbf050ec600d049beb222fd102dad99a6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:fd:32:2d:e3:61:89:82:75:64:47:fa:af:
45:61:b7:63:a2:16:35:f9:d9:83:70:1d:48:e2:cb:
36:7c:a2:61:7f:c9:1e:f4:44:fc:d3:3f:dd:8e:0d:
6a:f8:9d:ff:9c:95:46:68:3b:ae:c4:16:61:24:79:
38:22:d5:91:97:f9:6e:f4:fb:84:a6:9d:6d:f7:7b:
aa:c1:24:bc:9e:b8:b7:51:74:48:5d:e0:59:4a:3b:
88:0c:b6:c8:44:b7:fa:c0:79:05:96:57:0a:3f:80:
24:06:3f:6f:61:a2:9d:c6:89:c0:01:ab:63:7a:91:
d3:aa:a1:17:9d:92:0e:de:2a:90:d0:5b:76:5d:78:
d4:e7:08:43:0a:63:e3:d2:72:fd:e2:ec:18:60:11:
f7:8b:1c:8f:45:f3:5f:46:77:76:c0:96:98:6c:1f:
e8:1e:0f:85:96:d6:fa:63:c4:ea:73:3c:27:5f:99:
71:e4:4a:34:1e:7b:64:34:0d:1c:01:f1:c8:bd:49:
3a:52:35:b4:ea:0a:d6:2d:28:f9:6c:80:03:8f:9f:
22:bc:da:81:ff:b6:42:e1:91:95:c8:a9:5f:1f:ee:
8c:45:51:b8:70:a8:11:48:57:32:82:d4:78:0d:dd:
f1:8c:a1:64:f4:14:1d:72:40:1a:49:97:50:ad:ae:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D7:DC:BF:05:0E:C6:00:D0:49:BE:B2:22:FD:10:2D:AD:99:A6:FC
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/49fcvwUOxgDQSb6yIv0QLa2Zpvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.54.0/24
45.155.77.0/24
Signature Algorithm: sha256WithRSAEncryption
55:95:a9:65:da:ca:3d:f2:75:13:ca:03:c2:75:9b:b8:bb:30:
c5:19:ab:02:d5:36:be:3e:27:31:cf:ec:54:27:e3:6c:25:5f:
cd:0f:d1:6a:ab:7e:c9:1f:b1:64:e2:a8:42:6d:c2:23:13:d2:
77:43:65:42:86:4f:f5:fa:a6:d0:19:8d:ca:f1:1d:87:dc:20:
24:8c:b9:01:e4:92:58:12:ef:b2:58:df:25:8f:59:e7:cd:a1:
37:7a:2c:5e:06:a8:45:24:fc:ca:90:23:6f:5e:35:48:97:6d:
12:31:ae:4c:08:94:3b:d1:a3:b5:99:53:40:79:05:9a:37:4e:
7e:ef:2e:63:4e:f1:67:15:a4:f3:c7:87:0f:81:70:6a:5c:c0:
8f:79:d4:a8:bb:2c:9e:02:ce:14:10:11:c6:e3:57:6f:b4:f1:
60:0b:58:ad:9d:24:73:11:96:7d:2c:c7:ce:22:02:48:c7:0e:
b4:2c:5b:fa:c4:06:71:e3:b2:9b:35:9e:94:ab:29:b2:45:fd:
48:aa:be:25:ca:2d:49:5b:d8:dc:a4:f6:9e:5d:3f:0d:67:a7:
06:2c:37:1e:ee:fc:db:37:69:8b:9a:10:4f:e1:fb:da:ad:8f:
7d:bc:ce:f4:55:1e:22:40:03:40:e5:38:e6:5d:98:1e:f6:cd:
6a:b2:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:05:56 2024 by rpki-client on console-ams.rpki-client.org