Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/PfwP2vYiGyUZQP1eqmWh_sKQz-8.roa
File: PfwP2vYiGyUZQP1eqmWh_sKQz-8.roa (raw, json)
Hash identifier: 7uifEdtUhGjbBCe4GxaPPMBWRWkTShjwXrsUDYc3GCk=
Subject key identifier: 3D:FC:0F:DA:F6:22:1B:25:19:40:FD:5E:AA:65:A1:FE:C2:90:CF:EF
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 018CCA4E4D15F7956E42707E6421196BE613
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/PfwP2vYiGyUZQP1eqmWh_sKQz-8.roa
Signing time: Tue 02 Jan 2024 13:12:58 +0000
ROA not before: Tue 02 Jan 2024 13:12:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39402
IP address blocks: 45.129.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:4e:4d:15:f7:95:6e:42:70:7e:64:21:19:6b:e6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Jan 2 13:12:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dfc0fdaf6221b251940fd5eaa65a1fec290cfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:d1:43:45:d7:0e:15:55:62:0e:ef:2c:4c:
29:d9:f8:cf:ff:8b:e3:a6:b6:2a:81:96:c0:53:3a:
2e:bb:7a:2c:a8:6b:4b:7b:a6:dc:b9:1e:5e:c5:07:
9f:9a:e3:ae:11:a5:e2:2f:b9:e5:32:55:56:3c:80:
e9:29:d5:2f:a5:fa:53:b6:8d:8c:c7:98:6b:1e:48:
21:ee:9e:ec:ee:3a:a9:ca:ec:40:bb:59:44:3d:5e:
07:47:33:45:20:e1:86:3d:4e:55:7c:47:8c:a7:4f:
8d:40:54:98:ab:a0:cc:5c:a6:37:32:49:95:22:ac:
50:e7:73:fd:98:b9:f6:70:28:e5:75:1b:35:4a:ab:
6c:67:60:57:f2:64:c4:e9:86:dc:00:e4:45:21:cd:
ee:43:91:e2:ce:5f:ae:59:5a:15:94:21:88:24:84:
e6:4d:62:6b:ce:41:63:80:72:39:ad:bb:8f:09:92:
b1:e0:dc:a4:67:a5:04:e0:55:c4:53:32:b7:9e:67:
47:5b:36:7f:6a:cd:15:e8:0a:29:9a:69:fd:a7:9f:
dc:a4:c7:31:28:04:92:13:db:91:b3:42:b3:c6:0c:
8c:de:17:38:7b:f7:67:ab:16:c7:09:65:5e:41:18:
9d:a3:78:cf:bb:6c:2f:01:6c:c2:e9:7a:21:8e:31:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FC:0F:DA:F6:22:1B:25:19:40:FD:5E:AA:65:A1:FE:C2:90:CF:EF
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/PfwP2vYiGyUZQP1eqmWh_sKQz-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:64:29:87:9e:3f:58:6f:0b:b7:94:2b:99:71:bc:56:88:b8:
2e:27:5f:6b:22:21:ea:8e:c6:65:44:90:f0:72:c6:2b:a3:9e:
66:2c:20:c8:bc:4b:bd:15:da:96:ef:f8:d9:b3:ac:f6:5c:a0:
3a:17:5a:7e:8a:06:bc:c9:11:68:ef:39:d4:8a:19:f3:ad:60:
62:ce:a3:e6:6d:79:96:41:e4:28:7c:6d:f4:e4:ff:2c:89:ef:
e1:38:60:3f:66:92:f8:f1:a9:4c:95:cc:a0:56:ca:7d:a7:4d:
1a:3c:57:2e:28:59:d2:35:17:e3:6c:65:e4:d9:c2:08:63:5c:
86:83:96:5f:43:f1:3a:ac:9e:86:98:16:75:6f:80:69:35:77:
65:d2:30:25:65:79:fc:31:18:c2:37:c7:96:5f:91:af:c7:de:
f2:d4:c2:b3:1d:dc:f2:67:94:4f:34:c5:a0:be:ba:0e:7b:33:
81:4e:c0:a8:d1:32:f4:bf:f5:e0:21:cf:14:48:29:76:3e:2c:
10:21:d1:d7:e9:ca:87:b2:c0:91:65:61:70:a5:4a:f3:ff:c3:
8c:79:18:e7:34:d4:3c:4e:f1:4e:68:00:fd:45:85:48:05:7d:
ec:8c:c3:64:ad:e0:27:cf:03:43:be:1b:d3:ae:24:4c:75:ec:
da:cb:ab:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:58:26 2024 by rpki-client on console-ams.rpki-client.org