Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/_Z4JnWNrr2dwszlZxA4ydycWsQA.roa
File: _Z4JnWNrr2dwszlZxA4ydycWsQA.roa (raw, json)
Hash identifier: fzY7DwHOVIHeDOd3KtTXMxDGdTSroq2Fi4KnBpkWWOc=
Subject key identifier: FD:9E:09:9D:63:6B:AF:67:70:B3:39:59:C4:0E:32:77:27:16:B1:00
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 018CC9BBF7CFF8BA8C8A5958E1AA886BEB79
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/_Z4JnWNrr2dwszlZxA4ydycWsQA.roa
Signing time: Tue 02 Jan 2024 10:33:08 +0000
ROA not before: Tue 02 Jan 2024 10:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47277
IP address blocks: 45.151.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f7:cf:f8:ba:8c:8a:59:58:e1:aa:88:6b:eb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Jan 2 10:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd9e099d636baf6770b33959c40e32772716b100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:96:07:59:5a:48:1b:87:19:39:f6:81:04:
bd:5c:19:d7:2d:3d:30:60:5b:3c:9b:ca:14:26:72:
a4:b2:3c:d9:3d:fc:be:50:d3:47:a7:fc:b7:d4:76:
36:ff:ed:bc:1f:54:8c:23:08:54:3c:1e:13:cc:77:
db:cc:fc:70:6e:f8:1a:96:4d:a3:db:39:22:8a:50:
bc:df:61:3d:39:67:46:13:33:34:ec:b8:23:46:f8:
d1:a3:a8:2a:1a:62:dd:c5:dc:b5:4b:ee:47:86:e4:
91:8b:6e:e6:50:b9:5c:e7:42:c6:3b:31:38:ec:87:
f3:b0:ec:58:48:dd:02:58:f7:f1:fa:f1:3a:a1:06:
fe:63:3d:83:98:8b:0a:79:76:ef:b2:91:e4:04:03:
86:a2:d7:5a:fe:e1:6f:4f:59:68:ba:33:dc:5b:06:
85:d9:8b:c1:db:8e:29:6f:d3:59:f1:10:24:8b:0f:
a6:f4:48:2a:92:8f:90:f3:7a:0a:c9:41:f0:03:c7:
04:a2:b4:73:a1:4c:f9:d1:40:1a:ec:44:3c:5e:25:
4c:d7:8e:14:78:65:f7:49:5b:e7:3a:df:5b:58:08:
05:c2:46:f2:e1:73:2a:eb:dc:04:d8:97:1f:0b:e5:
1b:01:61:63:e5:4c:23:7a:7d:9f:84:a0:e8:cc:7c:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:09:9D:63:6B:AF:67:70:B3:39:59:C4:0E:32:77:27:16:B1:00
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/_Z4JnWNrr2dwszlZxA4ydycWsQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:52:31:47:00:78:3e:34:fd:07:d6:7a:c2:07:ab:d2:73:b9:
a4:4f:b1:85:0a:a9:0c:6d:3e:d9:02:b9:34:ed:88:6c:2e:e4:
7a:48:2e:72:72:d1:46:b8:1d:4e:b3:af:9e:15:39:f0:8a:b5:
47:aa:79:31:ef:81:2f:eb:f9:22:3f:47:73:68:27:ac:d9:79:
3f:f1:f7:95:d6:4f:62:73:bb:1d:45:ee:fd:d2:f6:cc:c5:11:
f4:fb:93:a3:ef:cf:c0:a3:b0:b4:46:33:30:2a:55:a8:39:0b:
c2:10:a7:f7:34:29:27:31:13:8a:16:52:4f:d6:6c:87:9f:f5:
50:95:b6:60:11:51:68:a6:a2:9b:62:46:17:63:ba:29:ba:46:
04:d5:83:32:f9:0f:33:05:31:66:ad:7e:6e:bb:d0:01:3c:2f:
e7:68:6a:92:77:ba:3a:89:f2:17:6a:d0:98:33:f6:f0:9c:6f:
4e:25:b7:a0:ad:14:61:40:00:6c:f1:46:36:df:51:de:87:c2:
25:3d:8d:66:b5:8e:0d:a0:29:8b:46:32:31:5f:f0:6b:a9:6d:
4c:75:6d:67:8c:d4:27:70:3c:11:54:83:b7:6a:11:ce:49:2c:
c7:cd:13:cd:07:f0:8e:fb:3b:a1:34:91:10:5b:61:4e:3d:39:
b6:6e:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:50:12 2024 by rpki-client on console-fra.rpki-client.org