Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/cZ4tmDEHd9lmJNc399EvlXimVAk.roa
File: cZ4tmDEHd9lmJNc399EvlXimVAk.roa (raw, json)
Hash identifier: KDeIB9RtahYFqxaU9DHGGHMry/VzQFSryqbFeyLlqbw=
Subject key identifier: 71:9E:2D:98:31:07:77:D9:66:24:D7:37:F7:D1:2F:95:78:A6:54:09
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018F90D2CA56854284D626019B51316C7C37
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/cZ4tmDEHd9lmJNc399EvlXimVAk.roa
Signing time: Sun 19 May 2024 12:28:04 +0000
ROA not before: Sun 19 May 2024 12:28:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 45.151.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:d2:ca:56:85:42:84:d6:26:01:9b:51:31:6c:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: May 19 12:28:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=719e2d98310777d96624d737f7d12f9578a65409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:ab:13:b3:22:64:0b:e0:90:6e:dc:94:6d:
7a:92:12:c3:66:99:bd:c5:07:5a:de:0b:df:ba:4f:
a2:d1:eb:9c:4e:40:66:79:fe:22:c6:39:83:83:6a:
37:8e:c8:d7:99:b7:2e:f2:35:2e:37:89:49:5a:11:
1b:89:28:d2:23:19:80:ee:00:4d:b1:23:dc:43:35:
ff:47:e3:0b:c6:d0:dc:74:23:24:bd:17:90:8f:b9:
34:db:73:65:05:19:a3:a6:69:8d:65:09:4c:98:a3:
62:55:54:ce:31:2e:7a:e1:00:7b:c1:7e:42:af:42:
23:50:2d:9b:0d:4a:c5:40:74:c5:73:93:fe:28:8a:
f0:d2:e3:e1:30:f4:f7:90:8b:b7:95:44:63:84:c7:
bc:2c:1b:3c:7d:44:40:97:d3:af:14:08:fd:11:32:
17:5c:ab:7a:c6:ce:d3:2e:38:12:76:f4:3f:f7:f0:
f7:7e:6f:6e:30:17:05:a7:5d:a5:14:b8:85:f8:06:
e2:e5:ed:50:51:e5:1d:c5:6e:29:a7:21:fe:7b:b1:
41:11:2c:76:fe:c0:99:9f:7c:64:e2:6d:34:2a:9f:
7b:7e:32:97:bd:d1:f4:38:7c:d2:fe:27:36:8f:9f:
26:58:36:b3:c5:a3:5b:ab:cc:f1:8e:0c:0b:3c:80:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9E:2D:98:31:07:77:D9:66:24:D7:37:F7:D1:2F:95:78:A6:54:09
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/cZ4tmDEHd9lmJNc399EvlXimVAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0c:a3:14:f4:ec:63:44:11:7b:4f:82:82:52:06:45:72:b6:
3b:46:a4:61:31:dd:af:17:65:e0:2b:86:e3:d1:d2:d4:f2:8a:
b8:c3:91:70:70:8f:52:b7:e6:c1:c0:0a:9b:ae:c6:ff:90:f3:
44:2a:18:1b:ae:b1:06:90:58:af:91:67:81:8e:34:7f:bc:8a:
08:04:c7:d0:41:6d:b6:de:3f:f2:a1:f4:a4:57:5e:31:92:e6:
cf:53:27:3e:a2:68:bf:db:7f:ac:5d:c1:a0:34:e7:38:66:2c:
4a:17:0f:ab:57:d8:54:63:e3:42:7a:a9:4e:0e:4c:8b:51:52:
7d:87:91:ed:df:f5:bd:d3:03:7b:02:b5:1e:11:f8:6c:35:79:
ff:9c:d6:a4:2f:6d:fb:f9:41:24:5a:34:85:67:51:c1:b5:a9:
cf:f6:58:80:44:66:9c:88:ba:f7:d4:f4:53:23:5a:0b:e5:97:
94:4c:e1:12:f9:70:31:52:e5:59:54:70:c9:08:48:d0:a9:c8:
04:29:3a:28:09:59:75:b9:fc:dc:23:55:a4:d7:04:b8:6d:42:
07:be:ee:6a:be:dc:82:8d:fa:ed:dd:c1:87:08:ca:5d:a4:4e:
2e:61:8f:cd:38:d6:7b:88:b5:e2:b1:a6:af:c9:d2:49:33:9c:
17:d5:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:10:41 2024 by rpki-client on console-ams.rpki-client.org