Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/hbI2iqNQH9Es2vk1jTThXd3GNhI.roa
File: hbI2iqNQH9Es2vk1jTThXd3GNhI.roa (raw, json)
Hash identifier: fVj04Y2h0JDZBH915lgW+FT+rgxxyeIz6YPZQ+4juFw=
Subject key identifier: 85:B2:36:8A:A3:50:1F:D1:2C:DA:F9:35:8D:34:E1:5D:DD:C6:36:12
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 018CC7947D377F231B90910FA896AA4EA639
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/hbI2iqNQH9Es2vk1jTThXd3GNhI.roa
Signing time: Tue 02 Jan 2024 00:30:46 +0000
ROA not before: Tue 02 Jan 2024 00:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48146
IP address blocks: 45.141.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:7d:37:7f:23:1b:90:91:0f:a8:96:aa:4e:a6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Jan 2 00:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85b2368aa3501fd12cdaf9358d34e15dddc63612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:1a:dd:63:8d:a1:70:79:ed:c0:0d:eb:d6:
2f:8c:02:a4:30:17:78:d6:1b:8f:f3:20:3c:5d:8d:
fa:01:c8:89:f9:64:ab:2b:cd:1d:a6:55:0b:81:2b:
a5:04:29:06:b2:d5:2c:18:9d:84:69:80:3e:36:a0:
28:e8:3c:de:78:e9:49:08:43:17:f9:f8:3c:97:88:
3c:35:e1:2a:b5:bc:40:3e:33:e6:93:26:af:19:79:
b0:aa:2f:3d:3c:2b:8b:10:4d:4c:d8:35:4c:d8:4f:
61:89:2e:ca:9b:c3:5e:95:95:22:1d:b2:36:80:3c:
20:b9:db:ef:01:dd:74:cb:fa:55:e3:72:93:de:5a:
29:05:81:62:d2:a6:22:a8:45:f6:c5:5c:2a:01:e9:
11:43:72:a3:29:04:b6:a7:b1:42:c1:6c:54:27:e8:
8d:b1:a5:e4:4c:e5:f6:d2:fb:81:05:9e:70:49:2b:
4b:74:52:fc:b2:15:44:39:2b:a3:31:0e:56:41:e2:
77:be:f2:db:9d:96:e7:31:ae:9b:b8:b5:17:b2:9a:
85:c3:24:7f:c9:0b:94:00:4c:2e:89:98:38:b1:81:
25:d0:d5:1b:29:4e:10:f9:d1:c1:dd:ce:c6:a3:81:
20:99:79:c4:de:ed:6e:0c:1b:40:be:6e:8e:d1:ea:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:36:8A:A3:50:1F:D1:2C:DA:F9:35:8D:34:E1:5D:DD:C6:36:12
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/hbI2iqNQH9Es2vk1jTThXd3GNhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ce:8a:6a:60:8a:1a:8e:ca:f7:5c:4a:6d:24:13:c1:9e:1d:
fe:37:c2:0e:b6:93:2f:57:c6:d4:f6:55:67:25:1d:31:28:8f:
94:ce:16:6d:9f:bb:16:57:75:f9:2a:40:c5:20:56:91:12:5d:
55:cb:86:68:ba:e4:0d:8d:6b:81:73:12:e5:34:05:01:d0:b3:
af:95:83:5d:88:79:ee:dd:54:91:7b:dd:26:e5:34:f9:05:d6:
c3:25:37:e4:52:34:9a:f3:5c:35:7c:38:61:5e:c8:b4:3e:e7:
5b:2d:bc:3d:aa:ac:b5:27:4f:e2:b1:e3:43:df:78:8c:90:cc:
b9:ab:52:5e:aa:bd:32:d8:12:ee:fd:b5:e0:55:15:5c:7b:31:
22:8f:d5:60:2e:a6:6c:b9:9e:d3:91:86:86:02:3b:5b:40:cd:
0f:b3:06:f7:e5:d4:0f:74:15:86:a0:25:fd:a3:87:cf:ae:96:
11:16:e8:f7:b1:8d:41:49:f4:82:ca:77:40:0a:c1:09:bd:ed:
48:eb:5f:e5:7b:81:39:45:10:c0:38:8e:da:44:bb:43:72:90:
82:3f:df:eb:d5:e4:2f:92:f0:35:de:25:03:19:67:75:ce:af:
9d:6d:b7:a1:c5:eb:90:b8:13:ac:a7:30:e6:90:06:b5:1d:22:
8d:e0:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:25:36 2024 by rpki-client on console-ams.rpki-client.org