Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-pI72SYCNPEtASVbvly7M7FekKQ.roa
File: 1-pI72SYCNPEtASVbvly7M7FekKQ.roa (raw, json)
Hash identifier: A30oMdstn2uZgF9dX0dNV1WTGHtLFpH4heXwm7bhFmo=
Subject key identifier: FA:92:3B:D9:26:02:34:F1:2D:01:25:5B:BE:5C:BB:33:B1:5E:90:A4
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018FA09B98A4043194CFE72704D20D2A0D7A
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-pI72SYCNPEtASVbvly7M7FekKQ.roa
Signing time: Wed 22 May 2024 14:01:42 +0000
ROA not before: Wed 22 May 2024 14:01:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 45.155.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:9b:98:a4:04:31:94:cf:e7:27:04:d2:0d:2a:0d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 22 14:01:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa923bd9260234f12d01255bbe5cbb33b15e90a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:a3:c0:5c:fe:90:43:cb:ff:9b:e3:ef:a1:
29:a1:40:35:c4:7e:27:09:44:1f:b6:f8:5a:b2:c0:
36:35:80:d1:36:cc:ab:09:9e:28:0e:25:2c:a0:3c:
b2:d7:68:e5:5e:70:0c:aa:10:0c:a4:5d:4a:b0:82:
bb:57:4b:06:55:82:ae:47:3e:2b:7a:21:46:29:aa:
6c:46:6f:53:61:77:49:bd:32:ac:e7:cc:0b:fd:de:
82:32:96:9c:ce:a6:11:0f:1d:03:1a:8b:ba:5d:46:
a9:82:be:0a:5c:c3:93:10:cd:09:80:be:cc:77:5a:
28:e5:5f:2c:f7:6b:c3:d7:d2:4d:4b:71:48:a0:37:
58:ad:64:ba:19:1a:e0:6a:2d:1b:32:6d:0c:d1:05:
5c:95:ec:0d:c1:4f:e0:5a:27:1c:45:92:d0:a4:ab:
67:13:05:7a:8b:27:e1:59:9d:7e:34:95:59:e5:df:
0b:d0:f9:f4:51:49:f5:bd:ed:e5:56:95:41:63:6d:
9a:b9:af:06:82:a2:34:ae:dd:90:7f:94:85:46:6f:
ea:fe:da:5b:f8:f3:ff:18:b8:76:e6:7a:31:25:66:
51:5f:64:ce:c0:5b:b5:72:f3:63:72:d3:57:9f:d8:
0d:c5:1f:c6:b2:a7:de:62:52:63:2b:46:f7:7d:d4:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:3B:D9:26:02:34:F1:2D:01:25:5B:BE:5C:BB:33:B1:5E:90:A4
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-pI72SYCNPEtASVbvly7M7FekKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8e:ac:c0:0a:28:b9:da:9b:a3:52:53:5f:70:5a:27:e8:9c:
86:ec:07:a4:dc:02:cd:5d:87:09:14:9c:cb:6e:af:89:cb:35:
78:fc:82:a7:88:96:8f:09:f5:7e:1b:5a:b4:80:c2:fe:ea:d6:
27:6e:c5:67:d8:f3:51:af:df:2d:e1:19:9f:c4:fa:b5:54:89:
bb:dc:70:82:a0:09:82:84:a4:7b:7c:3d:71:7f:31:d3:4f:20:
65:e4:2a:94:2f:1f:b4:ed:73:1c:5b:89:e1:b7:bb:55:9b:ea:
46:72:ee:fb:54:d4:10:8b:e1:d0:02:62:3f:60:0d:16:18:98:
87:54:04:60:c6:eb:df:e4:44:5c:cd:3a:ac:5d:58:e5:aa:69:
de:94:22:1b:a1:c4:f8:1f:ca:b3:77:59:30:6a:3f:9d:c2:f9:
fd:da:4c:10:53:9e:da:d2:95:19:3d:77:e6:b7:54:20:33:4a:
56:db:32:25:d9:d0:50:05:cb:c6:07:45:f7:5e:07:b1:bf:8a:
ae:76:dd:4a:1a:46:d6:e8:c1:05:f4:a4:c7:7b:d9:58:4e:63:
28:82:2b:40:e0:e4:dd:2b:26:86:13:78:d1:d8:dd:dc:a8:22:
36:e7:ea:20:83:5d:8f:58:8a:f2:cc:2c:13:dc:36:60:37:1e:
f9:0c:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:51:01 2024 by rpki-client on console-fra.rpki-client.org