Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-oou6Tr4tqEFIGmM8DgS_goAqu8.roa
File: 1-oou6Tr4tqEFIGmM8DgS_goAqu8.roa (raw, json)
Hash identifier: wN2NAWwhQX9gaV5RcpWKyda4IITvSs57I0/QQuxkmiY=
Subject key identifier: FA:8A:2E:E9:3A:F8:B6:A1:05:20:69:8C:F0:38:12:FE:0A:00:AA:EF
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01925D605B20AE30B2077883D8DBBD963F90
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-oou6Tr4tqEFIGmM8DgS_goAqu8.roa
Signing time: Sat 05 Oct 2024 15:50:48 +0000
ROA not before: Sat 05 Oct 2024 15:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 45.112.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5d:60:5b:20:ae:30:b2:07:78:83:d8:db:bd:96:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 5 15:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa8a2ee93af8b6a10520698cf03812fe0a00aaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:85:ac:37:21:a6:69:b7:03:f9:ec:2f:e7:
93:ab:1d:dd:ab:e5:da:f1:5d:dc:b9:be:d0:60:dd:
2f:0c:1d:eb:38:2e:eb:25:0f:04:70:ae:3e:94:97:
3e:1e:67:06:63:2d:b6:2b:04:a9:9c:45:2e:33:92:
40:4c:9b:1e:94:c3:a6:43:e8:24:a4:02:81:9b:c9:
bf:f8:41:39:6e:58:c5:87:4c:04:d4:4e:db:72:69:
6e:74:53:a3:30:46:b7:fb:2f:1e:ad:30:5b:4e:14:
01:16:c7:0a:ee:3f:1b:2d:30:03:7a:6a:b5:ee:41:
7e:75:fc:6f:f7:e4:be:d3:9e:c4:5c:41:48:d9:25:
88:46:6a:12:22:8d:ec:05:29:11:34:99:5e:06:8d:
e3:3e:ca:8d:61:52:37:b8:63:76:22:f6:56:29:30:
8d:aa:25:3a:2e:8a:2b:5b:b1:98:f9:f7:f5:08:f3:
ee:cb:15:42:d5:13:7d:19:b2:52:b1:b1:b4:b6:ec:
ab:0b:e7:f3:5c:b9:10:8e:d5:64:11:7c:cb:7e:38:
cf:80:83:6e:f5:0f:26:b7:9c:bc:2a:85:34:5a:8c:
33:70:46:3a:6a:4c:97:53:f4:e7:89:56:6b:8a:5a:
c7:51:12:de:73:ce:d9:4c:6a:98:ed:03:59:76:7b:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:2E:E9:3A:F8:B6:A1:05:20:69:8C:F0:38:12:FE:0A:00:AA:EF
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-oou6Tr4tqEFIGmM8DgS_goAqu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.192.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:52:96:c2:12:54:73:83:4c:17:eb:30:ca:a0:9c:8e:bb:88:
1c:7a:a9:d9:bd:d6:f9:82:13:4b:b4:cb:50:e4:21:06:98:c3:
ac:66:5d:1c:f4:52:f1:71:8c:4b:85:c8:18:a1:51:63:a2:4f:
df:43:3a:f7:f5:d7:2e:20:59:dd:90:fc:1c:dd:05:78:1f:1e:
11:33:96:a5:f7:09:c1:11:db:9a:a5:a6:4c:14:63:8d:b8:90:
0b:aa:c8:56:2e:3f:da:77:56:4d:d2:46:1f:e7:c4:93:5f:2c:
32:09:7a:5c:ad:36:97:d2:a1:92:b8:26:44:e6:29:01:3a:4b:
2d:4f:8f:b9:08:96:5f:d4:1d:63:97:61:8a:a9:dc:dc:68:30:
a3:6a:a8:16:61:85:0b:31:37:15:52:2d:82:90:46:17:d3:17:
3d:41:30:24:dc:46:83:66:c5:31:b9:a7:f3:06:e1:30:55:a7:
7f:8d:ce:aa:bd:dc:fd:3c:a5:b3:17:86:01:5b:1e:20:26:36:
f5:c6:84:d8:ee:f9:3d:7a:f0:1c:49:12:f9:e7:1e:a3:4c:89:
a6:d6:3b:8f:47:6d:e2:d3:46:72:9a:23:45:cb:a9:6a:ce:aa:
97:38:70:19:cc:55:f9:fc:f1:48:ed:57:9e:fb:63:07:1e:e5:
61:ef:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:05 2024 by rpki-client on console-fra.rpki-client.org