Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/fnbrHeqp5gw5QHsm-xisqyLc6Ug.roa
File: fnbrHeqp5gw5QHsm-xisqyLc6Ug.roa (raw, json)
Hash identifier: I9AIRp8XvMGHteS/yjMfTMS1vh8yZFChUZHiWGN6iAg=
Subject key identifier: 7E:76:EB:1D:EA:A9:E6:0C:39:40:7B:26:FB:18:AC:AB:22:DC:E9:48
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018FD7461FC167276B01BEC97F37B24DE34B
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/fnbrHeqp5gw5QHsm-xisqyLc6Ug.roa
Signing time: Sun 02 Jun 2024 04:47:27 +0000
ROA not before: Sun 02 Jun 2024 04:47:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 264617
IP address blocks: 45.82.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d7:46:1f:c1:67:27:6b:01:be:c9:7f:37:b2:4d:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jun 2 04:47:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e76eb1deaa9e60c39407b26fb18acab22dce948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:93:6a:aa:74:aa:1d:d4:de:61:6b:f4:5e:
36:0b:9b:72:ec:52:87:e0:6a:0d:b4:c1:b1:30:5d:
84:f3:f5:60:c4:3e:89:5a:6c:ed:31:67:9e:d2:6a:
ae:ca:f0:6d:9a:ff:2d:51:c4:90:3c:8c:5a:bf:2d:
5a:bd:92:b5:8b:a9:1c:f9:75:37:13:57:31:48:36:
d1:ba:a7:f2:9d:21:92:fb:af:c5:31:53:b8:41:f9:
78:4f:f7:9a:29:3c:03:93:7a:eb:61:e6:96:24:6c:
bf:37:81:1c:95:43:74:9f:bc:11:fd:dd:6d:03:f0:
ba:c1:e9:51:76:1a:85:46:31:21:4a:92:67:0d:9c:
b3:9b:26:6f:c5:0c:e4:21:c7:ff:77:5b:94:e9:8d:
51:17:f7:e0:50:4b:6d:7f:86:ae:12:8f:60:19:dd:
db:c1:2c:ca:a0:7f:5e:23:d2:97:ea:a9:84:c6:f0:
33:93:66:4c:7b:bb:0b:c0:67:32:1f:98:ad:4a:b4:
e0:1b:42:da:f6:46:c5:30:a3:0b:66:4e:c6:41:28:
cf:db:a9:6e:74:7a:7e:f1:96:f5:a3:0c:b8:37:2e:
6e:fa:9b:49:56:ad:8f:77:d2:01:0a:7d:b7:67:d4:
3a:c2:90:9d:9b:f0:cd:7a:92:25:bf:eb:9e:5d:05:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:76:EB:1D:EA:A9:E6:0C:39:40:7B:26:FB:18:AC:AB:22:DC:E9:48
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/fnbrHeqp5gw5QHsm-xisqyLc6Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.220.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:39:b7:e4:5b:f1:0a:59:48:3d:3c:95:a1:13:52:9e:04:86:
18:fa:53:d6:fc:ec:15:87:ad:bb:9b:c1:27:65:a5:dd:6b:f3:
f7:83:97:12:5e:a9:5d:c7:f2:e1:d5:bb:ae:ab:22:d7:40:16:
f7:9e:43:b1:63:b3:d8:54:e9:00:c4:60:1e:79:32:f5:5b:f9:
9f:c1:36:a1:7c:76:a8:30:2a:a1:d9:0e:0e:54:8b:9e:5e:ef:
f8:64:28:63:1d:d5:db:6e:c5:f1:64:88:2f:ef:9e:a9:68:47:
ce:ec:83:d7:c7:3f:57:fd:3c:6a:50:25:a1:76:e0:a1:5d:71:
c5:11:0a:2b:b0:b9:aa:05:1c:e2:04:69:75:d4:61:73:a1:4e:
22:dc:60:93:55:79:c0:2f:e7:8e:fd:24:2a:38:41:98:9d:d2:
1c:0a:82:7e:7b:51:1e:8e:3d:54:4c:e0:d0:f1:4e:b2:9f:c6:
67:00:7f:92:ef:89:7d:f2:46:f4:fe:d4:07:69:30:2c:de:8a:
89:23:1f:af:b1:9c:4f:07:fd:63:b2:5c:c1:d6:5e:92:06:6a:
9a:5e:3a:c1:2d:5c:94:1a:19:de:01:50:2d:71:66:a2:c2:f1:
73:40:0d:6c:0c:c2:7c:97:1a:41:43:e6:b0:21:a3:12:23:6b:
46:69:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:50:06 2024 by rpki-client on console-ams.rpki-client.org