Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XNQWJ6ie76AlnkVsZGmSU_sCqXo.roa
File: XNQWJ6ie76AlnkVsZGmSU_sCqXo.roa (raw, json)
Hash identifier: KGZ/zMYD9XsZdgsfsac/p9PAwDGnoV5AcLflIOojliI=
Subject key identifier: 5C:D4:16:27:A8:9E:EF:A0:25:9E:45:6C:64:69:92:53:FB:02:A9:7A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01930B0A8E5E93A2391067F4C4094D0B039E
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XNQWJ6ie76AlnkVsZGmSU_sCqXo.roa
Signing time: Fri 08 Nov 2024 09:11:01 +0000
ROA not before: Fri 08 Nov 2024 09:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 45.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:0a:8e:5e:93:a2:39:10:67:f4:c4:09:4d:0b:03:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Nov 8 09:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cd41627a89eefa0259e456c64699253fb02a97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:cd:f6:52:c0:89:c0:9e:53:1a:ea:1c:11:
c5:0f:1a:70:e9:2f:30:04:df:e7:27:87:e9:bc:43:
b1:8e:a8:74:6d:02:81:aa:96:b5:03:00:ad:21:ab:
6e:51:4d:9c:b0:7c:2d:45:d3:97:e8:53:5a:b7:c4:
99:eb:86:7e:fd:cc:59:9c:ec:ad:33:7b:06:2f:3e:
7f:a5:ff:c9:f2:69:60:3a:d8:34:e0:1b:bf:12:87:
67:fd:b2:f0:72:12:5f:c8:9a:e0:5f:f4:92:15:dc:
6a:61:aa:8c:2c:4d:6b:13:f9:ce:fd:2a:95:b6:dc:
9d:6e:1a:c8:cd:e8:1a:24:bb:81:9c:3a:2e:73:1e:
a1:15:7b:fe:46:95:27:1b:04:10:07:1e:8f:76:e9:
39:44:d8:92:ab:8a:b8:ef:b9:43:97:46:2a:a3:33:
91:f1:75:5c:a8:c1:6d:2e:35:83:d5:1a:6a:a9:2c:
b2:9b:38:d8:d5:fb:6e:14:00:b5:b0:99:d0:f0:90:
7c:ed:df:ca:da:fb:a2:7a:46:f3:96:23:a6:c2:9a:
01:bf:08:06:70:79:02:c8:42:82:b0:e8:99:af:c7:
f9:7b:a7:6a:d0:68:7c:c7:c4:8f:b0:9a:3a:c2:e8:
23:24:a0:52:4e:a5:cf:3d:f1:03:61:fd:cb:1e:a2:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:16:27:A8:9E:EF:A0:25:9E:45:6C:64:69:92:53:FB:02:A9:7A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XNQWJ6ie76AlnkVsZGmSU_sCqXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cd:eb:33:77:2b:91:0c:8d:3f:a4:7e:91:ad:47:5c:c5:da:
99:d2:f3:6e:25:c9:6c:d5:44:26:b3:83:fe:df:93:47:5f:e0:
17:85:b9:f7:7a:3f:29:0c:98:df:2e:53:0f:d6:22:df:36:98:
bb:27:c5:75:fb:d0:d6:af:55:5c:eb:a2:60:44:3e:ed:34:c4:
04:39:b2:7f:ae:b3:af:1f:5a:7e:b9:1e:75:2e:47:42:0d:3e:
4e:d5:34:ba:01:28:5a:d7:a4:f7:cc:41:4b:2f:e2:d2:36:75:
7c:e1:f6:a6:10:96:19:cf:f8:5d:de:5e:68:ba:6d:da:e0:48:
65:d6:3f:e7:ba:1c:2b:36:ba:e6:7b:f8:f9:5d:ea:78:65:3c:
dc:46:bb:15:d6:29:ee:3d:7d:32:02:57:cc:c5:e0:79:0b:07:
7a:54:7b:1d:cc:ca:6f:98:86:4e:b8:a5:78:eb:b2:5d:90:91:
91:30:75:5a:fa:e9:ed:6a:79:67:2d:b5:bf:1d:de:01:09:b2:
13:d1:ea:d6:75:ba:fc:46:ea:b2:b1:b7:bd:14:1f:6b:e3:8f:
e1:b4:52:a9:b3:f2:78:6a:da:04:be:24:e6:17:ea:2a:3e:99:
5d:85:9d:d2:a6:dd:98:00:46:45:9e:46:27:c8:a8:5b:76:e9:
b4:6f:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:43:04 2024 by rpki-client on console-ams.rpki-client.org