Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/SDIIRj6dJIeOKSXg5YRDFsLj2Ro.roa
File: SDIIRj6dJIeOKSXg5YRDFsLj2Ro.roa (raw, json)
Hash identifier: vxRTDMb3LcJVh6J0sPYAJ57ysOQwYsEnHgjqcvk8jOk=
Subject key identifier: 48:32:08:46:3E:9D:24:87:8E:29:25:E0:E5:84:43:16:C2:E3:D9:1A
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500AF9B2912A382373825EC73132444
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/SDIIRj6dJIeOKSXg5YRDFsLj2Ro.roa
Signing time: Mon 01 Jan 2024 12:30:05 +0000
ROA not before: Mon 01 Jan 2024 12:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 45.147.159.0/24 maxlen: 24
45.147.157.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:af:9b:29:12:a3:82:37:38:25:ec:73:13:24:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=483208463e9d24878e2925e0e5844316c2e3d91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:24:62:56:32:5d:fc:a1:38:28:d4:9e:41:
08:f3:36:c9:cb:a7:31:e0:d0:29:cc:1d:a8:21:7d:
78:ec:eb:ad:5c:2b:32:a5:e3:46:f0:67:b1:c4:0a:
0b:c5:dd:ac:b0:04:e5:d7:c1:01:fd:e8:ed:fe:eb:
bc:62:ff:f9:a5:ec:ea:47:ef:bb:35:f7:98:fb:1d:
69:ab:94:52:52:79:a4:e8:f5:6f:d2:d4:9a:4b:7d:
2c:c7:bd:53:94:c6:e0:a7:59:b5:85:51:19:5c:65:
67:80:9c:27:da:3a:e5:13:dc:3b:c0:80:e1:bd:a5:
aa:90:b4:5a:9f:c3:a2:6a:62:09:f4:c5:15:02:39:
79:7d:71:68:d0:95:bf:23:fd:1b:40:71:48:b8:f6:
4b:ef:9e:5d:e6:36:b3:88:1b:7b:37:c0:b6:03:ab:
b2:0b:a2:e7:c6:44:22:e5:4a:28:39:f8:c8:2e:6a:
b0:03:4b:95:5a:97:21:52:79:28:4d:e9:bb:0a:5a:
95:c1:87:44:0f:ea:5f:7b:cb:b2:dd:10:57:4a:e1:
12:62:36:2e:b5:30:ec:f4:0a:a5:b9:59:e6:52:fb:
33:ee:7a:64:c8:17:dc:de:f1:8c:e6:dc:d3:2a:26:
1d:40:83:10:0f:e2:41:0e:47:f1:0b:af:8f:07:6a:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:08:46:3E:9D:24:87:8E:29:25:E0:E5:84:43:16:C2:E3:D9:1A
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/SDIIRj6dJIeOKSXg5YRDFsLj2Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.157.0/24
45.147.159.0/24
92.61.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:82:f2:16:16:d9:c7:a5:1e:63:5f:ca:63:1d:1a:1b:e7:18:
97:d9:f1:ca:1a:7f:68:be:ea:5e:d1:f3:3d:81:9a:33:3d:c3:
f2:4b:de:a7:da:e8:5b:e3:40:94:3c:7b:08:9d:31:47:03:80:
fe:78:9f:36:d1:06:a0:a5:1e:d0:37:c6:ce:04:ab:67:8b:13:
0f:61:50:56:7c:dd:3c:c4:80:91:95:a3:38:35:3c:c1:7d:96:
6c:de:fa:ee:35:f0:2e:88:ea:84:f6:cf:27:a4:c6:60:38:f7:
fb:c9:7d:6c:f8:74:7b:cc:a7:3f:22:91:ec:30:b0:91:bf:33:
5d:5b:5a:0a:c8:22:50:03:01:22:ac:78:f6:b8:8f:e2:1f:17:
0b:1b:7e:a6:ef:b3:9b:ae:a1:f2:44:66:89:b3:9d:e6:a6:5c:
37:19:c0:74:86:d6:4a:f2:a6:50:d6:4f:d6:65:7e:d1:27:07:
0a:bd:83:3e:5d:43:64:da:df:61:89:b9:7e:8c:88:1a:0a:36:
20:ab:df:6b:33:bb:5b:94:91:80:9e:9c:be:42:cd:60:01:81:
48:f8:c6:45:22:91:d5:a1:0d:31:e8:73:9a:42:5b:7c:b8:4a:
5a:12:09:ca:70:bf:3f:6e:c4:a5:f2:0b:17:2e:ae:20:46:b7:
cc:ef:49:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 11:50:45 2024 by rpki-client on console-fra.rpki-client.org