Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/felp1jQRPj6HtXiJ258soJ0gX5c.roa
File: felp1jQRPj6HtXiJ258soJ0gX5c.roa (raw, json)
Hash identifier: NZIN2TQGvO7M11Z85iMmyqBXbZ7OqkNATeiVR8R9rgM=
Subject key identifier: 7D:E9:69:D6:34:11:3E:3E:87:B5:78:89:DB:9F:2C:A0:9D:20:5F:97
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 018D41342043C7C5CE9AB8A04FA4751F4E38
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/felp1jQRPj6HtXiJ258soJ0gX5c.roa
Signing time: Thu 25 Jan 2024 15:19:11 +0000
ROA not before: Thu 25 Jan 2024 15:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397630
IP address blocks: 45.149.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:34:20:43:c7:c5:ce:9a:b8:a0:4f:a4:75:1f:4e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jan 25 15:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7de969d634113e3e87b57889db9f2ca09d205f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:cb:ea:32:98:a6:e2:9a:34:c9:f6:a8:cc:
a0:75:83:c4:c4:6a:7d:ed:a1:2d:f9:9d:20:c1:5d:
28:29:a7:5a:3d:28:e0:1c:89:92:bb:bb:83:cf:80:
61:0d:2f:b4:90:ea:39:f5:73:3e:f6:91:92:6e:50:
e4:2d:f9:a8:d5:8c:88:9f:98:b9:01:ed:f3:90:cd:
62:7a:aa:f0:8d:65:c9:30:ef:b8:2a:9f:2b:c7:ff:
9b:7d:aa:f0:a2:f4:1f:19:ab:71:ef:64:97:e7:f2:
59:13:53:e1:5e:db:58:33:f3:a4:ed:48:45:8e:3b:
a7:70:52:b8:f6:08:b9:6d:2e:15:f2:04:3c:7a:0e:
d8:42:3d:b7:8e:b0:f8:20:3d:62:58:a3:ce:c7:ea:
e0:b6:55:7b:7f:82:e4:1b:3f:00:81:e0:d6:00:53:
00:f8:70:a8:47:e0:cb:94:86:d8:77:a5:9d:42:50:
44:f6:0b:61:44:ab:19:bf:64:4e:52:dd:21:da:4e:
f0:f6:07:d0:6d:5a:96:3b:28:ff:4d:8d:15:8d:ff:
f2:7c:9e:35:5c:a9:2e:b1:34:97:49:42:8e:41:ef:
52:c0:06:a3:c2:c5:5a:d1:f2:18:4f:33:68:38:69:
fb:a9:ca:26:1e:79:7b:36:b9:43:09:93:03:18:fa:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:69:D6:34:11:3E:3E:87:B5:78:89:DB:9F:2C:A0:9D:20:5F:97
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/felp1jQRPj6HtXiJ258soJ0gX5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:44:7e:de:26:f5:1d:bf:04:45:d6:66:1f:33:87:d8:f0:36:
dd:65:07:1f:29:6f:9b:de:2c:98:5a:56:39:df:cd:fd:1c:f5:
e2:b3:d7:56:e3:a2:a6:88:75:46:7d:5f:ea:8e:e9:9b:e4:85:
f0:75:da:7b:cd:fc:5b:22:61:a6:64:bb:43:d6:01:45:9a:ac:
ae:3b:0a:87:c6:82:d8:85:3d:f0:1b:92:0c:0c:83:d3:e5:55:
04:c7:aa:02:f8:e2:77:5e:7a:0a:b1:bb:7d:36:c2:ce:73:01:
8b:a0:f1:57:7b:3a:11:57:ba:e5:5d:52:23:b0:63:84:7a:1f:
aa:11:7a:85:38:1a:9c:65:c1:16:69:61:87:91:4b:62:d3:d5:
0b:9a:74:fa:ba:ce:ff:57:62:c1:88:a5:47:09:3a:b5:38:57:
f5:e5:a4:13:03:0d:f8:b0:03:a9:09:7a:ad:36:54:85:42:ad:
8d:99:78:0c:9e:76:f6:d7:6a:eb:dd:15:91:a3:7a:df:73:97:
4e:de:19:b1:2d:5c:13:61:4b:51:d0:d1:c4:52:bb:b6:2f:57:
2f:91:13:9b:ec:5c:c6:2c:48:df:0b:6d:24:ec:12:76:65:3a:
78:94:d7:a7:a7:82:38:d3:37:2c:b6:c1:75:13:47:a4:02:40:
1f:6a:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:41:33 2024 by rpki-client on console-fra.rpki-client.org