Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/p1oPG2R_x0tSkl7GGzxwdEe8ttc.roa
File: p1oPG2R_x0tSkl7GGzxwdEe8ttc.roa (raw, json)
Hash identifier: m2VeBGnjx5sRxe3FFBhIlnjgovGqSzsKC7KSiOexGTk=
Subject key identifier: A7:5A:0F:1B:64:7F:C7:4B:52:92:5E:C6:1B:3C:70:74:47:BC:B6:D7
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 018CC94CDC76800BD4DE725880718F626275
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/p1oPG2R_x0tSkl7GGzxwdEe8ttc.roa
Signing time: Tue 02 Jan 2024 08:31:46 +0000
ROA not before: Tue 02 Jan 2024 08:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24669
IP address blocks: 45.250.26.0/24 maxlen: 24
45.250.25.0/24 maxlen: 24
45.250.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:dc:76:80:0b:d4:de:72:58:80:71:8f:62:62:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 2 08:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a75a0f1b647fc74b52925ec61b3c707447bcb6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:4f:f8:b3:d1:d3:db:16:2b:c4:5d:96:20:
d8:1c:40:32:90:90:be:b1:fb:57:b2:4b:b5:26:8e:
a2:e9:4f:f5:0e:82:f8:13:27:12:d6:4b:81:38:5a:
dc:38:bd:70:d4:de:8c:87:e1:71:6c:0f:6d:10:63:
56:14:b9:be:d8:b0:3c:d6:7f:ad:70:e4:2f:53:3d:
8e:4d:0a:da:5f:99:78:54:37:b5:ea:b5:98:be:e1:
be:9d:a7:58:97:9a:c6:f8:f3:07:a6:f5:38:73:ef:
2e:6b:5c:15:49:5f:26:f0:67:32:d8:dc:8f:a9:f9:
00:ca:1b:97:bd:20:be:44:ac:c9:1e:95:5e:bc:7d:
11:95:7a:49:d8:83:17:dc:df:06:a4:7e:c6:3d:56:
c6:37:59:87:e8:f7:e4:65:b1:81:48:10:f0:57:ae:
c5:27:a3:af:0f:e4:41:43:54:2c:72:21:df:e1:c7:
9f:a5:2f:f1:f9:bf:1f:50:89:63:63:e0:a2:cc:df:
61:6c:b5:57:81:cc:6a:10:0d:9f:06:67:ae:49:2a:
d2:b4:56:c0:d3:6d:d3:ce:4e:e9:7d:ea:a0:3b:c2:
03:16:11:e5:4c:f6:95:c5:d4:52:46:46:18:b9:22:
c8:e1:6b:39:b6:08:10:db:c5:31:12:6b:05:ec:f8:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:0F:1B:64:7F:C7:4B:52:92:5E:C6:1B:3C:70:74:47:BC:B6:D7
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/p1oPG2R_x0tSkl7GGzxwdEe8ttc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.25.0-45.250.27.255
Signature Algorithm: sha256WithRSAEncryption
6d:2e:72:d8:50:58:b2:ea:8a:86:8d:52:68:1a:65:db:92:8d:
b6:9c:e6:62:2c:47:da:a8:fa:85:72:9c:08:38:92:b2:64:c7:
9c:02:a6:a7:4a:67:df:60:95:9d:e6:b2:d3:14:ff:99:f0:02:
ae:3f:a7:a0:65:5d:fc:32:72:58:10:f4:d5:d6:64:a5:21:87:
37:f1:ce:a7:8d:b0:19:e5:88:fd:72:d5:89:c6:57:8a:81:b8:
a2:b1:df:a3:4d:13:77:b2:a0:4f:57:4f:84:96:0e:4d:8f:02:
b7:5f:24:f9:66:f5:bc:48:9b:8e:71:5b:36:dc:cb:b9:7b:65:
66:41:ca:94:b1:54:ac:2e:a9:36:a0:e6:6d:de:14:47:25:54:
22:63:12:ce:61:43:26:21:0a:52:cc:32:aa:1d:8c:f5:25:f7:
9d:c2:b7:02:b3:50:25:aa:00:e1:98:08:96:41:74:d6:4d:9d:
81:65:68:82:04:88:66:86:6c:1d:5a:c5:7a:d0:2f:b5:91:30:
ad:b8:ab:72:3a:4c:fb:aa:9f:1a:2d:81:35:9c:91:cf:08:83:
a1:2a:8a:4d:d2:bb:a8:85:50:ff:78:83:5a:0d:0a:02:3f:c3:
44:c7:68:62:44:61:e7:cb:15:d3:6e:0f:da:57:68:02:2b:e2:
78:df:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:57:47 2024 by rpki-client on console-ams.rpki-client.org