Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1vcYuhDutVueicV5QxY3IPHbaYc.roa
File: 1vcYuhDutVueicV5QxY3IPHbaYc.roa (raw, json)
Hash identifier: +3y9vtXG1Ru5ULTxB/yGR4nTeyZwm4+I6OjYnHmYes8=
Subject key identifier: D6:F7:18:BA:10:EE:B5:5B:9E:89:C5:79:43:16:37:20:F1:DB:69:87
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0190A06A3974B1CBCCBB9D436941C3F7A85D
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1vcYuhDutVueicV5QxY3IPHbaYc.roa
Signing time: Thu 11 Jul 2024 06:10:34 +0000
ROA not before: Thu 11 Jul 2024 06:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.155.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:6a:39:74:b1:cb:cc:bb:9d:43:69:41:c3:f7:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 11 06:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6f718ba10eeb55b9e89c57943163720f1db6987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:43:53:6e:e0:f0:98:ae:87:6c:f4:c5:33:
db:8a:d6:de:54:48:6e:78:93:2e:83:b2:04:71:8c:
9b:3a:55:09:87:1e:23:88:98:8b:4d:f4:f4:b0:41:
da:af:01:8f:47:9f:06:31:67:c1:84:6d:b3:72:93:
2b:26:14:55:47:03:b6:ec:fa:7b:d3:3e:e4:93:24:
86:45:73:57:30:f3:cc:78:9d:da:7b:d9:e8:81:eb:
b3:d1:26:66:2a:c2:58:bc:91:6d:f7:f4:be:d0:27:
4f:f6:92:90:85:cd:d6:51:13:2f:7b:61:6f:15:98:
65:07:d9:a6:c9:63:9c:ea:08:bc:48:95:ed:e4:6c:
31:07:56:6f:34:dd:95:ae:d6:8f:40:2b:62:71:31:
98:8c:c8:98:68:5b:99:4b:db:18:7d:04:1f:ae:fb:
de:41:30:f3:53:5e:24:44:cc:d7:b8:73:73:95:33:
eb:b8:17:4a:1e:f8:a6:a3:cc:d5:f4:e0:53:e4:48:
5c:59:94:4c:fa:c7:62:e2:e1:2b:3c:5d:84:43:69:
09:36:54:a8:5a:ea:48:16:3c:40:76:e2:d0:f0:70:
4f:fb:41:58:86:c0:63:39:58:6f:6c:40:74:d2:ed:
cf:6b:32:47:70:2d:14:83:bb:c1:c5:2a:0c:e5:27:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:18:BA:10:EE:B5:5B:9E:89:C5:79:43:16:37:20:F1:DB:69:87
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1vcYuhDutVueicV5QxY3IPHbaYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d8:88:38:db:23:71:db:1f:fb:c0:9e:80:37:cb:58:1e:4c:
57:b9:0e:00:6d:b0:11:c3:a2:38:65:98:06:43:ec:98:84:73:
5f:b0:8c:4e:26:ce:57:79:e0:6b:36:dc:14:63:29:72:5b:c2:
0c:04:fd:08:41:1f:a8:02:5b:77:4a:ad:3f:b9:85:e1:b3:17:
c6:9b:ba:ca:85:ef:d3:9c:a1:fb:58:6f:a3:20:88:08:9f:6f:
eb:94:27:cb:d9:ce:0c:13:1d:3f:c9:e1:14:a3:74:f7:bb:1a:
9b:9a:8b:fa:b6:3a:4f:4e:7e:da:4c:d8:a8:95:74:cd:f2:c4:
a3:e0:39:15:d2:07:c0:df:aa:14:6a:68:47:5a:d3:6f:aa:2a:
13:24:49:88:60:04:a5:30:07:09:de:37:54:3b:4e:63:6f:39:
8a:09:f5:89:8f:ad:9d:74:8c:39:3e:f7:2e:74:c9:37:3e:f6:
b6:75:5e:66:86:f1:64:4a:4b:01:b4:a4:07:40:28:3f:9f:0f:
fd:9d:2a:10:d2:06:81:79:c4:c2:1e:b3:52:28:36:2d:36:e3:
67:fc:82:f2:3d:af:1f:d0:9e:83:a8:df:b2:16:d6:86:d4:7c:
55:b6:2a:79:f3:1b:ec:b7:be:d3:43:cf:e8:e1:3c:3d:ee:ac:
79:a5:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:26:31 2024 by rpki-client on console-ams.rpki-client.org