Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7V49Co4QnuYwKlBCpRnBG7jv5UE.roa
File: 7V49Co4QnuYwKlBCpRnBG7jv5UE.roa (raw, json)
Hash identifier: 1q3RoFWXJINNEL6MbqA2dQNpO48a+lSZcwnICSPSZF8=
Subject key identifier: ED:5E:3D:0A:8E:10:9E:E6:30:2A:50:42:A5:19:C1:1B:B8:EF:E5:41
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8026DF30D491980C4F2409B3D8F252F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7V49Co4QnuYwKlBCpRnBG7jv5UE.roa
Signing time: Tue 02 Jan 2024 02:30:51 +0000
ROA not before: Tue 02 Jan 2024 02:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 45.147.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:6d:f3:0d:49:19:80:c4:f2:40:9b:3d:8f:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed5e3d0a8e109ee6302a5042a519c11bb8efe541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cc:7f:bc:ab:d5:63:27:f2:02:ef:5c:66:12:
10:11:7b:4d:6b:a7:1d:fc:e3:1c:13:15:74:2e:b6:
67:8f:92:f7:5e:17:01:c2:85:a3:b9:0b:2c:cb:4d:
07:7d:fb:fc:7b:22:7f:1c:c9:cd:07:a5:a9:1b:0b:
0d:a5:e8:6d:37:22:b2:46:0e:83:32:6b:53:1e:e6:
9d:e2:0d:09:fb:38:ac:36:18:8e:16:34:f5:61:94:
00:1c:e4:e0:68:98:ab:46:05:5e:da:19:58:da:c0:
a6:0f:b6:92:db:d1:f6:19:c1:f6:96:ac:2e:3e:3e:
9f:f4:63:ac:ef:1e:f3:f8:8a:23:1b:91:0e:cf:0f:
35:22:8e:c6:57:77:2c:36:17:70:0e:72:7e:ba:5d:
89:08:ef:c1:e7:a2:3b:3c:4a:5d:76:3e:c7:8d:de:
79:ed:63:fa:86:95:40:34:8f:ad:64:31:42:ad:f8:
09:58:43:a4:64:b0:0e:63:9a:a4:0a:33:ab:8b:d2:
9b:8c:5d:de:fc:67:f3:0e:09:a2:af:9e:1f:df:91:
06:24:83:5e:fc:cb:7f:13:72:62:cd:c6:d6:9d:e7:
24:9d:1b:a9:5e:33:30:c6:3f:c6:2e:a2:18:fd:13:
f9:4f:47:02:6e:b6:28:3c:27:82:b5:cd:a4:9a:f2:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5E:3D:0A:8E:10:9E:E6:30:2A:50:42:A5:19:C1:1B:B8:EF:E5:41
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7V49Co4QnuYwKlBCpRnBG7jv5UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b7:3f:8d:7b:35:b5:02:e3:a0:0d:97:36:88:64:7c:b3:7b:
9a:5f:b4:2c:30:b2:34:99:9b:24:db:60:29:c4:55:88:ed:55:
2c:09:6f:14:f9:52:9a:53:21:13:56:ae:af:17:92:26:d8:2c:
3a:7b:94:44:20:08:4f:8b:61:99:3c:52:ea:dc:f6:37:dc:b4:
2d:9f:24:3a:4a:7a:06:51:b3:be:3a:30:02:8c:85:3b:2c:ce:
ca:27:e1:b9:24:40:3a:77:4a:e2:62:97:12:76:cb:2f:57:b3:
dc:56:94:ab:f2:3c:ab:70:c6:79:0e:8e:b2:ea:98:1f:35:5f:
ef:58:79:7a:9a:8d:5a:10:f0:91:2c:47:4e:ce:2f:ed:c1:84:
cd:f1:3d:a2:4d:51:df:c1:86:35:0b:a6:e9:51:81:6f:a2:f6:
27:17:d6:64:f2:42:4a:89:b1:89:3a:ca:ed:f4:8a:67:c6:eb:
ba:98:af:9e:bc:bc:64:f0:9b:f0:3c:06:cb:b9:87:0f:a6:96:
1f:e9:27:c6:77:5c:d7:fc:d4:94:83:46:09:be:7c:32:21:ba:
89:6e:3e:aa:27:cd:8e:2b:4a:62:94:bd:17:db:d5:4a:71:f8:
13:43:0b:a8:59:e0:ea:d5:55:71:e7:65:61:e8:a5:ba:fe:56:
58:36:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org