Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t-is6kPUEeIuxdOcv-VMVxvnmcQ.roa
File: t-is6kPUEeIuxdOcv-VMVxvnmcQ.roa (raw, json)
Hash identifier: 6L5aC/uTNIX0apNJmen/lBujedH+6JOPHyG0agFz1No=
Subject key identifier: B7:E8:AC:EA:43:D4:11:E2:2E:C5:D3:9C:BF:E5:4C:57:1B:E7:99:C4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01914A5B8E8BCCCB24AC713AE7375F8CBDDA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t-is6kPUEeIuxdOcv-VMVxvnmcQ.roa
Signing time: Tue 13 Aug 2024 06:09:59 +0000
ROA not before: Tue 13 Aug 2024 06:09:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214451
IP address blocks: 45.118.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:5b:8e:8b:cc:cb:24:ac:71:3a:e7:37:5f:8c:bd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 13 06:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7e8acea43d411e22ec5d39cbfe54c571be799c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:10:b8:2e:e1:ce:0f:ef:6a:94:9e:66:37:
3c:df:de:e2:c5:fd:9b:88:f1:07:b4:48:f9:7c:2a:
71:d6:66:95:c3:56:3e:85:2a:1d:4c:83:44:fc:b7:
7e:f8:e1:f5:c1:5d:31:41:bf:29:78:6f:f9:9d:86:
70:f7:fd:f7:91:3c:00:5b:28:db:21:57:f0:80:0e:
36:68:20:88:d3:a3:62:c0:8e:bd:1f:0d:1e:c4:1a:
2e:92:0c:46:9d:7a:7d:b2:ea:b6:d0:e4:2f:81:a3:
76:0e:3e:96:68:34:c6:a3:00:4b:45:4d:2d:5e:ea:
65:21:f6:43:95:96:bd:ed:63:53:a2:01:ba:04:a3:
d7:14:c3:37:c4:95:d1:f5:b9:9b:a3:ec:f7:cb:b1:
e2:a5:6d:07:3c:49:34:f6:fc:31:38:10:9f:bf:e9:
1d:2d:c3:a0:0b:92:67:71:84:2e:19:ff:99:69:02:
ef:5b:0d:67:8f:c1:08:8d:4e:a1:99:97:38:a1:bd:
fc:64:d0:49:23:1c:5b:95:7f:cd:9e:fe:ae:e9:1d:
c0:c5:0d:fc:af:6a:c3:94:bf:af:7d:35:f2:51:47:
6a:fc:5b:58:f4:06:25:9b:e6:e2:b8:01:d6:ce:50:
aa:f0:c5:df:a1:5f:ad:bf:aa:3e:93:ff:bd:b0:41:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:AC:EA:43:D4:11:E2:2E:C5:D3:9C:BF:E5:4C:57:1B:E7:99:C4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t-is6kPUEeIuxdOcv-VMVxvnmcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.248.0/24
Signature Algorithm: sha256WithRSAEncryption
53:15:93:cf:4f:ca:1e:d2:b7:a9:6b:ce:94:76:04:b0:8d:95:
6a:7d:e7:4c:0d:ea:4a:36:1e:2b:e7:24:d7:34:13:b0:f8:3d:
f0:9f:9f:21:6e:c7:3b:3f:47:ef:2c:08:50:2d:aa:5b:1c:98:
65:23:4d:6d:4e:87:8a:97:26:52:ef:57:47:0f:7c:7d:7b:ea:
3c:eb:43:28:c4:6c:94:f1:5b:c2:86:88:1c:bc:70:44:a0:fe:
15:d0:90:20:ad:a0:db:29:ce:35:47:e7:39:c7:1c:5e:7e:5f:
4a:06:97:71:b4:79:fa:26:80:b9:0a:25:04:e5:c4:74:fc:d8:
a9:64:a3:19:3a:c9:b7:eb:9a:08:60:19:c1:8c:ac:f6:68:83:
f9:e1:73:58:a7:16:81:d5:8f:9b:6f:9b:c8:71:19:bc:31:3d:
93:38:a5:41:55:2a:c6:2f:aa:88:b0:55:c8:db:69:a0:4a:0e:
5a:53:24:ab:23:74:2a:aa:f0:ac:f4:ef:a6:00:a9:62:55:1d:
8c:f1:64:08:48:1f:ca:ab:4a:a2:2c:6a:f7:d6:ef:8c:17:b8:
db:ad:57:af:44:9b:df:ae:3f:61:62:48:c4:bf:47:a6:83:f2:
7b:24:d9:fa:ca:7c:36:dc:1e:64:ae:fd:58:e1:48:a3:8d:05:
ed:70:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:45:13 2024 by rpki-client on console-fra.rpki-client.org