Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1NWG-z29arU6V-muAzoir5n2izg.roa
File: 1NWG-z29arU6V-muAzoir5n2izg.roa (raw, json)
Hash identifier: 8XoSJtrVKrNU4fM97diPosMVCCxxXFraIvH7Zd+D/9E=
Subject key identifier: D4:D5:86:FB:3D:BD:6A:B5:3A:57:E9:AE:03:3A:22:AF:99:F6:8B:38
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 018CC86EFBE0F1EBC26262E5B1C0AFAF3DC7
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1NWG-z29arU6V-muAzoir5n2izg.roa
Signing time: Tue 02 Jan 2024 04:29:25 +0000
ROA not before: Tue 02 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 45.86.104.0/24 maxlen: 24
45.86.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fb:e0:f1:eb:c2:62:62:e5:b1:c0:af:af:3d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jan 2 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4d586fb3dbd6ab53a57e9ae033a22af99f68b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:93:bf:88:96:5b:50:21:4a:cb:7d:ba:5c:
79:62:56:15:2b:ec:bf:96:90:9a:c1:3d:08:ab:c7:
20:8d:62:82:13:49:30:b1:de:57:e3:c5:d5:06:c7:
c8:62:93:0d:56:fd:d5:87:15:89:8d:cb:3f:82:ab:
52:8b:91:22:6d:98:89:63:44:7a:21:15:7d:a5:72:
27:71:71:78:53:35:9d:e9:77:2c:70:3a:c8:03:07:
ab:a6:84:1e:10:35:65:b6:f8:73:70:df:7c:5c:fc:
b8:ac:6d:92:ce:8e:61:4d:c4:26:71:9d:43:35:c2:
d0:0d:18:63:b9:fa:96:dd:4b:f9:05:62:48:13:cf:
63:98:0f:d1:c4:05:9f:98:f9:18:9a:7d:88:c2:25:
00:2c:f3:26:af:f9:c7:6e:fc:6c:0a:64:99:fd:40:
90:a1:c9:8a:da:05:93:60:35:54:5a:15:c4:36:a8:
a1:49:f7:cf:bd:6b:98:26:de:6b:23:81:78:93:75:
01:bd:17:5a:65:0b:78:f9:31:2b:85:e5:69:fc:c9:
7a:13:99:f6:c3:ef:ac:bb:c9:76:ca:ae:21:d6:fe:
ed:5e:13:43:c2:56:00:89:82:7e:b7:2d:d3:0b:1c:
13:73:8d:b0:a2:5a:cd:56:60:67:82:9f:c3:80:7e:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:86:FB:3D:BD:6A:B5:3A:57:E9:AE:03:3A:22:AF:99:F6:8B:38
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1NWG-z29arU6V-muAzoir5n2izg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.104.0/23
Signature Algorithm: sha256WithRSAEncryption
70:f8:38:c0:f2:69:98:52:23:97:6c:27:6f:b2:33:d9:d0:d7:
e9:1c:50:f5:eb:54:59:49:09:be:dd:86:ce:e2:db:46:03:ff:
b7:00:ac:21:50:19:23:b3:94:6f:f8:ad:fc:32:94:9f:f9:a0:
3f:fe:94:19:10:27:08:04:91:f9:da:03:06:25:73:27:0b:11:
bd:f0:09:27:f8:41:20:f0:16:ea:af:7c:ef:43:a9:33:a5:a5:
96:f5:bf:11:69:d4:df:79:b1:ca:2e:f9:43:70:8f:5a:53:93:
f8:0e:2a:dd:0a:f5:86:dc:94:5d:db:b6:99:a7:af:65:38:d0:
6b:f5:dd:27:c0:39:95:7e:d1:33:78:ad:51:84:eb:84:b9:e0:
b4:db:47:42:65:ac:b0:0a:dc:3d:9d:ce:61:a3:38:a5:01:6f:
70:7f:2f:9e:d3:a2:1d:bd:8c:53:72:7c:f2:a8:67:c5:91:3a:
6c:3b:a1:d0:91:a4:48:00:99:38:b4:b3:54:de:8f:0a:ae:df:
3d:01:df:2e:f2:5f:0c:43:15:df:5c:05:84:ee:b4:64:9b:38:
8e:ff:06:90:87:09:02:09:b1:ce:d2:c2:2c:56:24:7c:13:a3:
61:da:41:cb:5a:ac:91:0b:19:17:89:3c:ef:1e:64:10:70:48:
03:97:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:30:41 2024 by rpki-client on console-ams.rpki-client.org