Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/fdt8u8FkFj8BcRpPldB6FcJ7zEE.roa
File: fdt8u8FkFj8BcRpPldB6FcJ7zEE.roa (raw, json)
Hash identifier: rJCUI1RqJYDW9zz8WCE3IaMa7w9k0I7CdXDeA2LQhiQ=
Subject key identifier: 7D:DB:7C:BB:C1:64:16:3F:01:71:1A:4F:95:D0:7A:15:C2:7B:CC:41
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0190A06A3A03EC1BB4CCFCE890B0072C616F
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/fdt8u8FkFj8BcRpPldB6FcJ7zEE.roa
Signing time: Thu 11 Jul 2024 06:10:34 +0000
ROA not before: Thu 11 Jul 2024 06:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 45.155.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:6a:3a:03:ec:1b:b4:cc:fc:e8:90:b0:07:2c:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 11 06:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ddb7cbbc164163f01711a4f95d07a15c27bcc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:18:c5:ca:e3:f6:c3:85:9c:f0:e4:65:ec:1d:
8a:9c:d6:6d:f5:23:3a:10:41:fd:0d:bb:12:ff:c4:
81:94:f0:78:0f:b7:a1:b0:9b:3d:b7:06:01:8c:99:
10:63:88:d5:b4:58:b3:37:39:38:fa:2a:71:ca:5b:
47:4a:57:f1:b1:cc:b8:0c:e5:3b:ab:d8:1e:c9:cf:
6c:9e:33:24:88:c6:26:ff:16:3c:75:bc:4f:f9:58:
2d:9c:36:da:63:d9:39:5b:ee:1e:1f:2f:9a:fd:1c:
9d:a8:5e:82:b8:28:32:58:32:83:b9:43:af:28:6a:
0e:73:94:57:f8:3f:40:85:9e:44:06:71:98:89:ec:
b0:6e:5d:4e:6b:98:34:de:cf:a3:7d:f0:82:dd:4d:
36:28:b9:10:db:22:9f:7a:b3:a3:03:41:91:65:63:
9d:12:b3:4a:68:e7:53:11:f5:8e:43:6f:31:9a:e7:
c7:8c:e7:46:f6:b7:16:34:8e:81:3a:3e:cf:c5:4c:
be:30:f4:20:21:ab:b8:e1:22:54:bf:1e:d1:0d:f4:
cd:c6:ff:96:5b:27:9d:8d:db:6c:69:77:66:0f:15:
b1:e9:b1:ae:f0:0b:2b:5a:13:0b:fa:cc:05:c7:02:
84:8c:a9:c1:60:c4:2e:94:d3:c4:3e:e8:58:b5:35:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DB:7C:BB:C1:64:16:3F:01:71:1A:4F:95:D0:7A:15:C2:7B:CC:41
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/fdt8u8FkFj8BcRpPldB6FcJ7zEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:da:2e:e1:ae:f1:06:6b:e2:9c:02:e7:bd:db:f8:78:c6:2e:
7c:11:5e:df:60:bb:03:89:7e:85:f3:eb:ad:51:67:f2:5e:81:
aa:18:52:17:df:12:26:cd:87:68:9c:5d:cc:23:84:c6:d8:54:
bd:a5:9a:d7:27:23:bc:be:ea:20:14:7b:1c:45:d3:95:d7:3f:
8d:bd:86:4b:c1:68:46:71:e2:47:d1:0e:fe:92:4d:29:d9:18:
b9:68:81:90:21:cb:39:8d:90:fb:3f:56:9b:fd:07:3c:11:82:
e9:18:8b:bf:a5:f4:40:23:7c:62:5f:5a:6d:f5:d5:af:29:fb:
69:ae:8f:53:17:c2:07:29:b2:75:74:98:a8:42:5b:10:08:56:
0a:0a:cb:e3:bb:f0:2c:bd:f3:9e:48:09:89:3b:81:56:ab:83:
a5:63:19:c3:4b:30:24:81:09:e3:2f:9e:b4:97:a6:9f:74:91:
2f:64:ed:1c:38:5a:ab:2d:98:8a:50:0b:b8:fb:79:b0:0a:7a:
d3:ae:81:b4:39:56:c8:53:2b:06:5b:d9:da:ca:ce:fe:3b:2a:
08:04:28:58:d7:94:50:67:c7:eb:bb:70:05:88:53:fe:62:08:
49:2e:06:f6:29:51:93:ee:10:8e:12:0b:8d:9d:6e:d1:c7:72:
24:0d:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:00:08 2024 by rpki-client on console-fra.rpki-client.org