Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Q02dItLZ2OxDEDvkvNzhdt_h-M8.roa
File: Q02dItLZ2OxDEDvkvNzhdt_h-M8.roa (raw, json)
Hash identifier: EYK7sWbRsbVpho6DMTrL6SCJ2Jaf9EXREE8OiWtY6Q4=
Subject key identifier: 43:4D:9D:22:D2:D9:D8:EC:43:10:3B:E4:BC:DC:E1:76:DF:E1:F8:CF
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 018CC2DB18C1F8CBF822CA8D28DC3A15574A
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Q02dItLZ2OxDEDvkvNzhdt_h-M8.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202808
IP address blocks: 198.52.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:18:c1:f8:cb:f8:22:ca:8d:28:dc:3a:15:57:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=434d9d22d2d9d8ec43103be4bcdce176dfe1f8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:d3:b2:69:94:23:90:25:f3:f9:1c:56:74:
ee:ed:02:fd:6e:b6:d8:60:11:41:d8:fc:69:5f:0e:
c3:96:94:99:43:f4:e1:dd:66:35:2e:d0:c0:cb:56:
cd:a2:f4:99:8d:90:dc:a3:26:92:3b:d4:ed:a1:9e:
18:71:c0:5b:c1:8f:fd:fd:d8:69:0e:5c:72:91:41:
96:cd:6c:a3:e5:e0:dd:a4:28:14:a2:a4:ab:b2:3b:
9c:4d:69:73:69:bd:fb:04:28:b3:37:1f:2c:bc:bf:
a5:82:bd:3b:ba:2f:31:9d:ea:1f:bd:32:e1:49:91:
6b:e4:9d:15:c0:46:17:f4:40:76:78:3c:ee:d3:ab:
7e:50:55:6a:cf:99:72:c3:d1:ec:1b:3b:56:5b:9e:
2b:8f:0b:3a:7a:86:81:14:2b:cd:ae:4b:59:b7:b5:
b0:c8:3c:21:a4:53:0e:ae:e0:b4:5d:8f:bc:08:4e:
b9:00:ec:ec:5b:6f:80:aa:03:bc:b9:60:1c:bb:25:
61:e0:b2:19:6b:d9:9b:6a:21:d9:85:67:c8:12:56:
bf:b6:12:4a:96:19:11:9f:83:6b:51:18:90:d5:3b:
3a:52:a9:e8:d0:3c:cd:e2:64:1e:1d:df:5b:34:0f:
2d:55:12:86:17:3e:cf:d0:90:f6:1e:06:7d:da:87:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:9D:22:D2:D9:D8:EC:43:10:3B:E4:BC:DC:E1:76:DF:E1:F8:CF
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Q02dItLZ2OxDEDvkvNzhdt_h-M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.52.45.0/24
Signature Algorithm: sha256WithRSAEncryption
27:62:12:19:32:2f:b7:f1:87:f2:60:74:b7:76:bb:b3:f0:76:
71:60:5f:e3:ec:e6:8a:c5:ac:c8:39:2e:fb:1d:d1:c0:86:8c:
e5:23:81:33:87:dd:80:69:c9:ad:5e:2b:0f:32:d3:5f:57:22:
81:3f:09:ee:01:95:6f:91:c0:74:49:77:89:ce:2e:0e:ce:1e:
89:13:ef:0e:ee:d7:39:73:ab:5c:c3:c7:ef:1b:7a:a7:f0:e0:
34:3f:20:c6:0c:1f:25:c8:e8:6c:42:3a:b2:9b:65:ee:06:5e:
0b:96:78:b8:92:19:d6:41:9b:74:35:32:30:cf:56:61:89:dc:
c6:5e:55:10:a9:e4:7a:1a:77:c9:1f:e7:ee:62:0d:f1:54:98:
f9:86:02:45:46:20:4b:a4:e0:6e:f3:6f:88:af:da:8f:9d:10:
91:2e:f2:e5:fa:bf:df:86:a3:48:63:4c:d8:3d:71:30:0f:40:
41:bd:82:04:f2:33:4b:73:d0:2c:b5:52:a2:fb:5a:4a:4a:d0:
a3:5e:df:64:04:04:14:aa:c6:af:58:51:a2:7c:96:7c:39:c1:
23:0c:9b:0d:de:cf:30:1c:08:06:d7:5c:ee:3f:dc:94:d7:51:
4d:f7:4c:c1:a9:c4:d0:30:b6:18:a4:83:64:df:f3:50:fd:f4:
5d:d5:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:20:56 2024 by rpki-client on console-fra.rpki-client.org