Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/D3cnJYgHiz3oATcqythmTADk_HA.roa
File: D3cnJYgHiz3oATcqythmTADk_HA.roa (raw, json)
Hash identifier: nQjAX4n3hja2RivKs/G0pz3cOTzjI4f4JsUnXySukLA=
Subject key identifier: 0F:77:27:25:88:07:8B:3D:E8:01:37:2A:CA:D8:66:4C:00:E4:FC:70
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0190EF042662248C2E690A52A47F12C02CE0
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/D3cnJYgHiz3oATcqythmTADk_HA.roa
Signing time: Fri 26 Jul 2024 12:29:04 +0000
ROA not before: Fri 26 Jul 2024 12:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.140.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:04:26:62:24:8c:2e:69:0a:52:a4:7f:12:c0:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jul 26 12:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f77272588078b3de801372acad8664c00e4fc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:f3:7f:50:ad:6a:65:39:8e:5c:80:d6:e3:
99:30:d2:9e:09:f2:5e:49:59:a3:83:02:d2:6d:75:
63:ec:59:df:05:15:b3:8a:e6:a6:84:78:2d:7d:a4:
1a:b9:a7:ec:13:29:93:43:e5:f0:b8:34:ee:01:49:
28:49:13:16:f2:e9:e7:6b:45:2a:91:27:04:aa:b7:
d0:9c:67:0e:ca:0b:f1:0e:33:43:ce:4f:71:ec:30:
70:03:1f:01:b7:a8:d2:50:8c:7e:d5:18:ad:ab:bf:
db:2c:4e:b5:76:b9:0f:28:51:21:36:70:b8:93:78:
ad:ac:48:96:19:c4:d5:2b:8a:71:ff:91:32:d4:8c:
14:90:ce:50:a2:5c:25:66:ca:79:c0:bb:4a:41:a1:
37:8c:85:11:e1:df:d7:f8:6f:3d:ce:d4:e6:cd:44:
56:7b:2e:09:d8:d9:4e:29:1a:f1:b3:ad:14:d7:c5:
77:ea:45:15:df:66:bc:27:8c:0e:81:e8:42:8b:f4:
87:a9:96:cd:f8:d0:6a:1e:cd:88:80:e1:49:43:2d:
35:ae:29:5b:0f:96:05:1a:53:ee:77:73:e7:9c:85:
7d:e1:04:72:84:6c:1c:ae:fc:a8:5c:89:95:b6:87:
51:5a:cb:58:ee:e9:96:db:9c:98:5c:96:15:f9:e2:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:77:27:25:88:07:8B:3D:E8:01:37:2A:CA:D8:66:4C:00:E4:FC:70
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/D3cnJYgHiz3oATcqythmTADk_HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.58.0/24
Signature Algorithm: sha256WithRSAEncryption
04:be:21:4b:5e:02:34:50:cc:5d:7d:e4:7a:ef:6a:ae:65:1a:
13:99:d5:f2:bb:e7:7b:7a:23:59:cc:33:05:c4:31:a2:68:d6:
7f:8b:92:16:ba:c6:35:02:5c:7d:78:97:d5:76:9f:23:75:99:
69:02:ef:4b:2d:96:2c:2d:5b:1f:18:9b:12:f2:3c:db:2e:63:
75:53:12:32:0b:18:09:1e:8c:ff:35:10:63:4d:ce:93:53:e1:
fb:4f:5a:fd:b0:fb:0d:ab:f2:e2:a1:e0:20:29:3f:4a:4d:99:
03:db:69:5c:f9:3a:83:78:99:a2:01:ef:c6:45:85:c3:26:2f:
48:99:05:6e:19:74:47:8a:fd:45:f8:79:22:a6:22:ed:d7:28:
33:4c:e7:ae:06:6a:22:1e:0d:1e:01:d2:3d:f6:1f:33:a7:cf:
29:fc:18:88:46:c5:4c:cc:49:d7:d0:e2:b9:3a:db:c0:cf:f0:
46:e3:f5:ca:85:4a:28:02:e4:14:33:46:b5:63:42:0c:d6:8b:
ee:f8:cf:80:1a:b6:57:3d:c1:ff:99:f3:96:c7:72:06:31:9c:
a0:31:54:74:9b:f3:88:e2:ed:5c:f4:98:7d:fb:6d:2c:45:b6:
25:01:48:22:6d:e9:ed:02:b9:e3:56:0e:c3:bf:43:cd:a9:d2:
07:20:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 01:18:53 2024 by rpki-client on console-fra.rpki-client.org