Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/7G7P5tUIQlh_pUaER1GOX1p0vYo.roa
File: 7G7P5tUIQlh_pUaER1GOX1p0vYo.roa (raw, json)
Hash identifier: v2YLuMts4v/hp2oKBhGF444o8f6PSGazceCz7PJcdkw=
Subject key identifier: EC:6E:CF:E6:D5:08:42:58:7F:A5:46:84:47:51:8E:5F:5A:74:BD:8A
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 018CC492F6F5D103B76D28D2648CA511721F
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/7G7P5tUIQlh_pUaER1GOX1p0vYo.roa
Signing time: Mon 01 Jan 2024 10:30:14 +0000
ROA not before: Mon 01 Jan 2024 10:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43402
IP address blocks: 45.150.12.0/22 maxlen: 24
2a0f:8a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:f6:f5:d1:03:b7:6d:28:d2:64:8c:a5:11:72:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Jan 1 10:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec6ecfe6d50842587fa5468447518e5f5a74bd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:46:35:f7:18:0a:5e:ef:95:be:b5:56:ea:
77:c6:55:c2:c4:94:61:ab:a5:f2:e3:51:8a:c9:35:
48:52:14:6c:36:60:35:08:12:0b:14:a2:ee:30:8c:
0e:d5:6b:2d:7c:27:2f:14:e4:ba:c7:77:79:6f:f4:
80:68:40:77:3e:68:48:43:b3:39:73:8c:88:06:5c:
b4:d1:c7:65:49:c5:e3:ef:ae:33:01:ba:a7:8c:ce:
08:a8:c2:84:9f:d8:a3:20:14:c7:de:7d:fb:ec:1d:
19:f8:6e:74:fa:8d:59:43:51:33:67:fe:64:63:0b:
e9:c9:c8:56:07:6d:61:1e:e2:0b:f4:1d:dd:02:15:
ec:73:a4:8b:ae:bb:24:95:04:d9:f0:a3:c8:1e:3f:
e4:ad:5e:29:50:5c:96:08:a8:96:10:22:16:94:9e:
0c:5b:7d:f3:c8:31:2b:70:e5:0b:e3:ae:14:bc:11:
f1:9a:60:7b:68:d7:3a:04:4e:12:58:11:d8:d7:ff:
12:f9:d9:5d:3f:73:dd:7a:d5:3a:c4:23:fc:a0:32:
a0:cf:29:c6:ca:ac:3b:4b:68:47:79:d1:13:71:51:
15:6f:ae:9d:cd:67:2a:58:b0:7e:1e:0c:ee:36:d5:
09:cd:c9:79:3a:bc:8f:9d:a0:2e:1a:a4:35:ce:9b:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:CF:E6:D5:08:42:58:7F:A5:46:84:47:51:8E:5F:5A:74:BD:8A
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/7G7P5tUIQlh_pUaER1GOX1p0vYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.12.0/22
IPv6:
2a0f:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
7c:cd:90:ee:55:b2:da:47:d9:5c:d1:8a:a3:59:94:14:bf:85:
9a:5d:85:00:28:c2:ee:1c:5f:8d:b0:1e:0a:7b:76:f9:16:22:
aa:5f:eb:4e:db:de:c5:5b:1e:19:cf:44:04:d5:49:90:36:fa:
bc:6a:6f:cc:a2:bc:3d:b7:a0:3c:df:03:05:64:9e:df:e7:d9:
e8:2b:0c:10:81:c7:55:18:cc:d1:25:bd:31:5c:c8:d7:fa:2a:
02:c0:d3:3c:8b:da:94:be:9b:d1:e6:96:f9:9e:e1:56:f7:4f:
f8:12:29:6f:e7:a4:da:bb:40:c0:96:74:72:4f:1e:6e:6c:49:
69:ca:ac:54:d4:22:f8:9b:a1:f4:ae:58:de:29:6b:f3:17:ff:
c9:59:c8:bc:c4:e9:5c:2c:e7:6f:23:78:f8:01:cf:7f:8a:7c:
a9:9d:03:ca:96:2c:5f:66:c3:2e:27:8e:99:ed:d5:bd:36:c2:
63:11:05:2f:73:19:0d:4f:e9:11:2a:b3:3a:98:67:1a:ba:a4:
b3:9a:49:0f:be:40:48:c1:12:05:eb:32:69:e0:bb:83:dd:0e:
c9:95:02:1e:97:86:c2:ab:82:5d:1d:82:91:55:49:88:a1:5e:
47:01:78:07:66:71:5e:d5:0c:64:24:06:04:e1:60:e3:5a:c4:
fa:15:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:39:12 2024 by rpki-client on console-fra.rpki-client.org