Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/7wcmhsTIgnyTWsoTnbDOKd4PIyk.roa
File: 7wcmhsTIgnyTWsoTnbDOKd4PIyk.roa (raw, json)
Hash identifier: 7Y9gMgp6NzxBsS6s9enfyamHBCELb00MqBvS8JgUu18=
Subject key identifier: EF:07:26:86:C4:C8:82:7C:93:5A:CA:13:9D:B0:CE:29:DE:0F:23:29
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 018E51E4AF5020C0D26B2F014C00F45EA413
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/7wcmhsTIgnyTWsoTnbDOKd4PIyk.roa
Signing time: Mon 18 Mar 2024 14:08:45 +0000
ROA not before: Mon 18 Mar 2024 14:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 45.154.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:e4:af:50:20:c0:d2:6b:2f:01:4c:00:f4:5e:a4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Mar 18 14:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef072686c4c8827c935aca139db0ce29de0f2329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:3b:98:1e:1a:2a:54:64:8d:44:77:8e:d4:
ef:66:0c:2c:49:75:f6:f2:87:b2:26:89:72:7b:dd:
86:20:3f:45:5f:41:ab:27:09:e0:41:b8:76:95:18:
3b:1a:93:36:f3:89:24:53:4b:da:c8:79:5f:49:58:
0c:c0:83:b6:1c:69:78:1e:23:02:cd:d1:bc:97:ed:
c2:55:02:7f:5f:87:d1:94:5a:33:31:cc:95:5a:bf:
31:b6:40:21:a7:3f:ef:cc:f1:6d:fd:36:42:b5:41:
9e:c5:49:c6:f6:04:f9:a0:40:1b:ff:66:52:61:83:
23:a0:e5:cd:73:a4:95:64:5c:9b:19:77:f2:70:b1:
47:0b:2d:cd:9f:5c:8f:08:f6:31:35:09:95:d0:e1:
90:c0:34:b5:d3:b2:35:af:8d:f9:58:1a:2c:cf:fb:
eb:80:e7:db:58:3b:8e:71:26:9e:8b:7c:63:8e:02:
45:4a:17:db:be:de:73:5b:41:7a:18:17:4b:38:6c:
b4:76:c7:3f:be:b1:c6:e2:59:df:1e:6d:a5:02:ca:
f3:9f:b9:19:0d:71:c3:26:c0:24:4d:d5:5a:f4:9b:
9f:df:0d:1f:81:51:a5:16:70:c1:e4:4a:1d:03:e4:
6c:d7:9a:cc:dd:63:5e:7a:9b:6d:4e:7c:05:64:36:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:26:86:C4:C8:82:7C:93:5A:CA:13:9D:B0:CE:29:DE:0F:23:29
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/7wcmhsTIgnyTWsoTnbDOKd4PIyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f7:dc:ff:2d:de:3d:81:4e:70:cb:b8:3c:00:87:03:31:29:
91:d8:76:84:b8:cb:9c:61:30:26:1c:04:aa:fd:02:21:11:66:
37:c2:dd:b2:56:e5:df:6c:52:ea:16:83:63:9c:0b:92:7b:d1:
53:e9:64:2d:a6:f9:27:67:15:da:7f:b7:11:77:12:41:54:34:
3e:84:1d:dd:af:0a:6f:89:7f:eb:3f:5e:60:df:45:9a:e3:de:
fb:09:c2:e1:6c:2c:85:35:40:66:a9:fb:7c:01:6b:aa:bc:68:
f8:34:14:5a:b7:6d:b8:03:84:05:a8:51:07:20:15:89:d3:22:
39:58:ea:bb:1a:31:1c:df:f3:a2:41:c7:7f:db:73:32:df:ac:
05:4e:64:55:6d:15:96:bd:5c:0b:fc:28:1c:89:50:17:1a:73:
90:71:98:83:17:66:9d:8d:54:72:33:81:cd:16:e3:49:87:4c:
85:33:d5:13:6a:6d:6a:b1:7a:fa:4f:71:74:bf:36:01:b1:c6:
49:1b:e1:23:ff:04:a5:1b:39:17:3a:a9:c9:4c:8f:b2:6e:c1:
b4:a2:43:4e:1d:db:97:fb:6b:26:3e:23:f5:26:35:13:8e:ae:
eb:32:d2:3a:0a:8d:cd:2e:98:a4:90:9b:ea:18:31:db:79:ed:
88:7f:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:58:27 2024 by rpki-client on console-fra.rpki-client.org