Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-Jq697zJd-eCZhPNcosmOUrfBrM.roa
File: 1-Jq697zJd-eCZhPNcosmOUrfBrM.roa (raw, json)
Hash identifier: kzEUiVE56tlCDpKvqGGscRK8ctKOX7I0IbahC+70bmg=
Subject key identifier: F8:9A:BA:F7:BC:C9:77:E7:82:66:13:CD:72:8B:26:39:4A:DF:06:B3
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01920F32EE04C06D6DB00F1A85B70652EB28
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-Jq697zJd-eCZhPNcosmOUrfBrM.roa
Signing time: Fri 20 Sep 2024 11:30:48 +0000
ROA not before: Fri 20 Sep 2024 11:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:32:ee:04:c0:6d:6d:b0:0f:1a:85:b7:06:52:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Sep 20 11:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f89abaf7bcc977e7826613cd728b26394adf06b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:cf:5c:40:72:56:39:a9:ce:9c:d7:6c:e1:
4f:7f:28:a8:04:bc:83:e8:c8:22:94:8f:11:3c:31:
91:ff:2f:12:94:c8:4a:a2:8f:c5:23:4b:38:a2:09:
fc:78:67:d5:3d:94:c7:3f:7e:54:29:f7:74:83:f1:
4c:d5:27:f3:d1:96:2d:08:20:3a:9a:1a:cf:4f:03:
fc:76:67:55:c3:d6:bf:68:75:04:9e:9a:c9:e6:0e:
c2:21:13:25:12:9d:3f:fa:3d:ba:5f:33:b6:68:42:
77:de:c1:6f:ee:93:11:ee:13:73:6c:8f:51:d7:a6:
7b:c9:a3:6e:96:e5:62:a9:d4:88:37:65:c2:24:e5:
5e:dc:40:b5:a1:35:97:e5:97:44:9c:3f:fa:95:4a:
88:8b:c4:91:84:1d:e3:12:17:2a:c7:c3:c1:ff:33:
1b:05:c3:e9:80:63:f5:50:56:20:c2:38:9d:6e:53:
b3:36:a8:6c:dd:c9:d9:8c:46:0d:18:ee:d1:ba:e2:
09:bc:dc:14:3e:e6:50:3b:25:7c:fa:b4:a2:0c:9e:
f6:72:63:46:7c:61:5d:d6:2c:84:08:71:12:1e:cb:
08:a4:da:c7:6f:84:66:a6:3a:41:0e:88:c0:43:08:
f6:34:6b:8f:02:88:ad:a2:3f:45:6e:13:2c:79:e4:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:BA:F7:BC:C9:77:E7:82:66:13:CD:72:8B:26:39:4A:DF:06:B3
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-Jq697zJd-eCZhPNcosmOUrfBrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bb:75:64:bd:79:6e:32:98:59:67:d9:53:e5:d0:e5:bf:75:
12:0f:6b:98:e9:43:20:e9:12:34:b9:df:52:49:f5:96:2b:48:
9f:8b:28:d9:41:84:8b:a4:46:b3:78:f2:06:e8:b5:79:35:d2:
5b:0d:9b:aa:41:82:a4:8c:b9:18:9b:0e:e2:36:31:b4:36:17:
39:0a:30:97:a3:05:11:d0:57:31:d1:83:b4:8c:e0:85:fb:90:
f1:82:f4:23:3d:8f:d1:5e:92:53:d6:de:e6:15:f3:bf:6c:eb:
5d:5e:e0:60:d3:98:b1:a6:b1:c9:f9:cd:08:e3:a4:a8:e8:d9:
f7:0a:3c:cb:b4:93:ee:57:4a:03:cd:3c:36:c1:08:40:d3:a8:
c8:a0:ff:2b:78:e3:b8:3b:f8:5c:e3:5b:fa:c8:f3:45:c7:3d:
39:db:f5:08:b7:f5:26:55:b0:7d:e6:ca:87:77:79:7e:fb:98:
6c:e8:91:a8:de:3e:f1:35:ac:cd:c5:30:ff:21:36:84:fb:03:
78:b1:8a:00:57:4e:4e:5a:87:03:89:5d:be:54:de:cd:36:ef:
8f:60:5c:61:44:8d:d2:b9:9e:6d:38:98:61:25:bd:bf:51:ad:
54:96:d4:7e:7f:d7:ba:7e:d7:65:41:f0:43:11:f0:f4:67:b5:
f0:c2:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:33:37 2024 by rpki-client on console-ams.rpki-client.org