Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/H0wOcnnRC9hD4YxJ9vkxet9TrmQ.roa
File: H0wOcnnRC9hD4YxJ9vkxet9TrmQ.roa (raw, json)
Hash identifier: LaqPCqcF3EwmHexW3TUl2zzFnMUsLV/B4H24KnZEUf8=
Subject key identifier: 1F:4C:0E:72:79:D1:0B:D8:43:E1:8C:49:F6:F9:31:7A:DF:53:AE:64
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 018E05E88551D3DAA3EE63F9E5902249A211
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/H0wOcnnRC9hD4YxJ9vkxet9TrmQ.roa
Signing time: Sun 03 Mar 2024 20:01:48 +0000
ROA not before: Sun 03 Mar 2024 20:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13044
IP address blocks: 45.129.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:05:e8:85:51:d3:da:a3:ee:63:f9:e5:90:22:49:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Mar 3 20:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f4c0e7279d10bd843e18c49f6f9317adf53ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:28:7d:0d:af:74:d0:eb:4e:ac:fe:7a:7d:
37:eb:ab:20:7b:ab:e6:d3:4a:a5:b9:61:59:07:92:
00:a5:53:64:6f:9c:cd:09:06:9e:6a:20:bb:d8:7b:
9a:04:f3:ad:e5:a9:94:a9:f2:b6:f5:7f:08:cd:43:
3b:c7:c3:b7:44:02:58:0f:84:98:4c:b3:d5:0d:a7:
7b:3c:5a:2e:f4:f3:a5:c1:46:6f:62:c6:64:71:d4:
0c:59:73:17:37:32:a7:f2:48:58:96:be:fa:82:1b:
33:ac:0f:72:94:a5:1f:35:09:0d:bf:b4:2d:d7:53:
8b:66:5c:62:c0:1d:5d:d0:12:ad:ce:ee:f4:74:50:
06:36:21:cd:a9:d4:ed:85:15:b9:1e:a6:77:0b:f0:
aa:0d:02:61:eb:b6:04:d7:49:43:03:ae:65:25:cb:
f1:8d:2d:9f:f5:f3:3d:f5:d1:b1:ec:24:7a:50:a2:
f1:65:b5:e6:e8:e8:61:7e:77:06:32:e4:0a:ca:53:
f7:db:34:58:11:1b:ac:56:fc:74:b3:07:f5:ee:52:
9b:c0:1c:11:21:05:4c:fb:3d:31:57:47:21:ca:38:
c8:0c:9e:5c:70:f8:b5:50:45:7c:99:17:48:12:ec:
22:90:71:62:53:b5:3e:d1:05:96:36:96:e6:e4:97:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:0E:72:79:D1:0B:D8:43:E1:8C:49:F6:F9:31:7A:DF:53:AE:64
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/H0wOcnnRC9hD4YxJ9vkxet9TrmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:63:6d:80:fa:86:09:f2:40:7e:82:6e:8c:9c:e4:82:26:41:
07:e4:4f:2a:18:48:ae:85:c3:28:4a:f2:b6:29:a2:d8:2f:23:
49:7e:1f:10:e8:3d:ef:02:a1:aa:00:16:64:73:1c:ed:70:1c:
79:cd:70:40:3e:e3:57:bf:cb:c4:3f:cb:24:d6:10:1a:b4:76:
62:1c:03:58:71:b7:44:eb:54:4b:c4:96:69:39:5f:87:50:a2:
4c:86:c6:9f:6f:19:7b:e7:ff:0a:cc:20:3f:c0:5d:c6:f8:cb:
ff:35:63:f6:a3:b6:ad:9a:bf:6c:45:d2:73:96:62:4f:42:33:
4e:af:f1:dd:5d:0e:46:42:d6:8e:4e:45:cf:e7:bb:3d:d5:0b:
44:4f:f5:b1:fe:0a:e4:a6:2b:d5:15:71:b9:b8:07:76:9c:a3:
84:b1:21:4c:d5:19:42:e0:37:ee:b5:d3:fa:5d:29:be:a4:13:
76:2e:71:c2:58:93:30:9a:9f:62:d0:e0:5c:1b:bf:39:78:2e:
36:ff:0d:55:bf:b6:40:9a:62:f2:7c:c5:04:3b:e5:cf:97:d4:
58:50:6c:c8:6d:d4:95:9c:b3:b2:7b:85:a3:15:84:3c:52:ee:
80:7c:09:77:98:b6:1d:1e:cf:36:02:08:4d:63:c3:ba:7c:6b:
a4:be:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 07:41:47 2024 by rpki-client on console-fra.rpki-client.org