Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fPsT-YWF75pO52D98i0rRECTqbg.roa
File: fPsT-YWF75pO52D98i0rRECTqbg.roa (raw, json)
Hash identifier: uDmlzQjo5UkykgsfNloCBab8zQNqBE6sQVaA+j8RbGM=
Subject key identifier: 7C:FB:13:F9:85:85:EF:9A:4E:E7:60:FD:F2:2D:2B:44:40:93:A9:B8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191B36F04837A2E4810D8CBA4BDF18CD1F6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fPsT-YWF75pO52D98i0rRECTqbg.roa
Signing time: Mon 02 Sep 2024 15:51:22 +0000
ROA not before: Mon 02 Sep 2024 15:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215026
IP address blocks: 45.131.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:6f:04:83:7a:2e:48:10:d8:cb:a4:bd:f1:8c:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 2 15:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cfb13f98585ef9a4ee760fdf22d2b444093a9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:b1:73:a9:df:2d:68:83:50:b9:ca:25:02:
32:c4:9e:9b:2c:01:a7:98:fa:64:60:a9:f7:18:00:
41:ee:70:48:2d:bf:3d:e0:a5:4c:9a:3c:22:c7:f9:
92:35:74:28:5d:bf:17:0d:e5:c2:7f:50:01:83:39:
84:e2:4d:a2:7b:93:d0:1d:e0:90:96:d8:3f:72:c5:
a7:d1:64:5c:d8:b8:b1:fb:14:16:38:b8:43:18:6b:
d2:63:9e:fe:2c:03:55:5f:a8:3e:5e:78:fc:d8:da:
0c:90:f9:3f:7b:4d:02:0f:9b:95:b3:46:29:4e:cf:
0b:ba:8e:e5:83:d6:5f:f2:12:39:15:c1:1a:37:bd:
8d:b5:f8:cb:4f:9b:4e:0e:8b:fa:d0:2d:bb:40:e0:
61:ca:0f:72:a6:c3:ae:c8:9a:52:2c:2b:fd:90:38:
3c:6c:4c:4c:61:1d:ad:b5:49:ea:6c:4f:5d:bd:40:
21:f0:01:fe:77:df:51:07:e6:f8:98:03:04:23:88:
70:e4:09:a5:91:f2:d8:f3:e7:70:57:ba:d3:00:f3:
c4:5a:e7:a8:0c:b5:3f:a7:52:2f:62:d7:8b:9d:4d:
c0:f7:8f:ac:a0:1c:b5:66:86:d9:0a:d1:c0:0e:67:
40:d8:60:4b:83:10:cc:4a:f9:76:d7:d9:00:31:eb:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:13:F9:85:85:EF:9A:4E:E7:60:FD:F2:2D:2B:44:40:93:A9:B8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fPsT-YWF75pO52D98i0rRECTqbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.135.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8c:d5:8e:35:8a:fc:df:85:8e:6c:4c:ff:92:1e:4c:a2:95:
6c:6b:d4:83:e0:27:27:00:0f:f5:50:e0:68:40:f2:40:a5:70:
29:a1:43:93:12:f6:0c:c4:aa:4f:35:8b:f6:27:f6:d3:4b:ee:
d2:3e:75:87:9c:51:6f:9f:88:8c:20:fa:81:5c:c8:aa:42:41:
13:c3:13:fa:55:b4:7d:6b:95:f0:9f:01:95:94:62:23:40:d0:
6a:7f:69:97:e8:e7:4f:9d:e5:5c:e7:81:f9:88:ff:1c:81:a1:
d2:c4:d3:0d:a8:25:58:33:0b:da:f0:94:d4:85:cd:71:49:e8:
53:a1:13:9a:4c:c5:46:3b:bf:d2:55:4d:76:bd:34:cf:64:8a:
e9:2c:2c:df:08:6f:0d:81:a7:53:04:88:0f:ce:77:7f:30:b0:
1c:76:b9:06:eb:fc:3c:af:d6:76:84:77:88:43:01:f6:63:a0:
c2:4a:1c:4d:f2:bf:11:90:d8:fe:b4:03:00:c3:16:16:23:72:
86:46:2c:a9:d9:e1:8f:44:9a:c7:bf:75:56:1f:8a:ab:e5:66:
ef:31:02:0b:72:b8:36:d9:77:21:ea:2c:84:40:dc:b7:89:0b:
7a:13:0c:9a:89:b2:0c:7e:c3:90:0f:d6:c0:cc:3f:54:bf:2c:
bd:0e:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:31 2024 by rpki-client on console-ams.rpki-client.org