Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3goX6vWD0-Y7TMPBjZ5PkMxyjKU.roa
File: 3goX6vWD0-Y7TMPBjZ5PkMxyjKU.roa (raw, json)
Hash identifier: noZI1byyOpp5xbClLvHg/u9b22ae/XfBVfdjxeLKYEY=
Subject key identifier: DE:0A:17:EA:F5:83:D3:E6:3B:4C:C3:C1:8D:9E:4F:90:CC:72:8C:A5
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01902C200794FB64FE873FBD556B18654E7E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3goX6vWD0-Y7TMPBjZ5PkMxyjKU.roa
Signing time: Tue 18 Jun 2024 16:13:34 +0000
ROA not before: Tue 18 Jun 2024 16:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202999
IP address blocks: 45.130.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:20:07:94:fb:64:fe:87:3f:bd:55:6b:18:65:4e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 18 16:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de0a17eaf583d3e63b4cc3c18d9e4f90cc728ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:0f:ad:08:33:18:5f:ff:c7:15:da:21:61:
2b:c0:2b:2f:99:0f:81:2c:7d:28:46:be:3e:8c:7d:
a5:e9:96:cb:37:12:c5:ea:26:f8:ee:e7:53:20:34:
f1:c8:f6:39:05:ee:b8:e5:64:f5:de:c7:03:b6:4d:
cc:21:4c:6a:2d:56:3a:39:a7:55:49:e8:c2:ec:35:
1c:ff:7e:55:cf:62:cd:fd:2c:7c:58:38:5e:9d:92:
f9:52:e6:c4:b7:75:94:f0:cb:f2:31:60:35:b7:dc:
10:4b:ad:5f:54:f6:e4:94:a7:5f:3a:d2:d6:38:a9:
72:92:db:bb:1f:92:6d:52:f0:74:60:2d:45:76:a9:
cb:bb:60:09:9b:ab:70:b7:4a:25:2d:83:29:ee:97:
15:c1:fe:5b:ce:aa:50:b1:36:cb:3f:e8:63:90:ac:
06:45:8f:56:42:81:c1:7b:f6:f2:6b:13:d7:41:4b:
90:3a:e8:0d:b4:c2:6f:26:e7:40:82:31:aa:03:e0:
e8:38:4d:6e:81:e9:18:83:fe:05:73:bc:53:52:b5:
3b:3d:d6:8f:cf:ec:0f:46:77:39:42:d0:2a:e9:e8:
47:19:c8:4d:b8:5a:d1:ed:16:89:57:74:10:a7:66:
2f:27:cb:11:0e:ec:36:f5:9d:b3:bf:7f:ec:61:dc:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0A:17:EA:F5:83:D3:E6:3B:4C:C3:C1:8D:9E:4F:90:CC:72:8C:A5
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3goX6vWD0-Y7TMPBjZ5PkMxyjKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.149.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7d:4b:57:dc:e2:8e:11:ee:f1:60:3b:30:dc:0a:f8:77:b7:
27:79:3e:6c:f6:58:e6:d2:6a:c4:3b:b8:e2:44:7a:66:7c:e3:
d6:f7:06:31:f9:e9:56:38:dd:7b:4b:03:c2:59:77:c0:00:79:
32:e6:ce:b6:95:3e:d0:6c:ab:23:03:0b:06:50:b7:d5:58:b7:
e5:80:ae:d3:09:23:ce:f1:aa:a7:89:89:79:e2:b0:f5:af:fa:
cc:97:ed:e6:30:d9:74:e3:6a:98:16:24:94:e1:3b:71:5e:da:
68:21:bf:46:1c:7b:75:ce:2f:5a:8c:1b:a8:28:b9:57:d5:e2:
84:cc:c5:f3:e5:11:6d:f7:d4:78:b4:f5:37:8e:4a:65:22:f7:
6e:92:eb:a2:04:6a:f9:9f:8f:8d:ee:5e:fc:b7:e6:2f:7d:93:
ad:2a:30:75:99:13:90:ea:c6:6b:3d:28:3e:95:6a:ec:b9:3b:
f8:d0:1b:f5:c2:01:e9:70:cb:f8:fb:13:ce:ef:57:52:19:8a:
a6:dd:d7:a9:d4:c3:fe:38:5a:27:77:10:7b:8a:78:54:ca:53:
30:45:29:d9:81:8a:40:78:c2:17:b1:c2:19:5f:c7:27:51:ca:
46:24:ea:0b:1d:a7:29:b0:57:66:50:ae:11:76:da:d3:57:85:
ec:71:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:48:15 2024 by rpki-client on console-ams.rpki-client.org