Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/fiqRPiLGptRMddDNcCbddpPhO9w.roa
File: fiqRPiLGptRMddDNcCbddpPhO9w.roa (raw, json)
Hash identifier: Vz0J9TvLMU+DtNmqn50aT1moYjm7eOD8p9ILaULf6co=
Subject key identifier: 7E:2A:91:3E:22:C6:A6:D4:4C:75:D0:CD:70:26:DD:76:93:E1:3B:DC
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 0192D7552F168E757E26AEE45FF9E0651560
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/fiqRPiLGptRMddDNcCbddpPhO9w.roa
Signing time: Tue 29 Oct 2024 08:12:16 +0000
ROA not before: Tue 29 Oct 2024 08:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.154.33.0/24 maxlen: 24
62.3.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:55:2f:16:8e:75:7e:26:ae:e4:5f:f9:e0:65:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 29 08:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e2a913e22c6a6d44c75d0cd7026dd7693e13bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:8a:a7:1e:d7:9f:71:9f:5e:e2:1f:07:61:
70:bd:85:e1:d9:a4:26:40:57:26:e1:6e:a5:e8:60:
18:f4:03:bd:5f:bf:ea:e2:21:05:b2:dd:8d:66:4b:
d2:50:18:94:47:70:7c:81:fb:e7:43:0d:07:6e:0c:
17:3a:29:11:5b:a9:10:e8:a6:1f:75:04:19:7b:36:
d6:3d:f0:b2:8c:33:35:a4:fe:aa:fb:b8:51:a7:3e:
64:89:82:95:fb:c9:52:6e:ce:50:12:d5:69:67:ad:
0c:f9:85:4f:4c:01:59:76:ee:93:59:7f:53:87:6a:
b7:b3:fd:93:ca:29:01:d8:37:b9:61:fb:9f:16:bc:
7d:4d:61:9e:73:7c:44:24:38:54:61:fd:76:2a:9a:
eb:78:2b:d0:ef:41:7b:f1:0f:da:8e:ff:a0:d8:8b:
1b:10:31:20:34:96:66:aa:d9:f2:64:e1:e4:04:49:
18:65:4c:d7:ba:7d:7b:2e:60:a5:3b:f1:ef:d4:17:
ee:de:d9:af:63:82:28:ab:a3:2a:13:4a:d1:59:b5:
77:ed:f2:91:1d:0e:39:e9:0d:62:2c:8c:40:66:7b:
48:0a:a5:b3:d2:a7:f5:9f:7f:2e:e1:ab:3c:4a:03:
c6:96:39:0e:61:75:3d:64:8d:7f:27:21:94:d8:70:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:91:3E:22:C6:A6:D4:4C:75:D0:CD:70:26:DD:76:93:E1:3B:DC
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/fiqRPiLGptRMddDNcCbddpPhO9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.33.0/24
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
77:24:52:e2:ec:6b:52:a9:f2:75:72:c9:d4:7a:c2:e1:80:8e:
50:13:9d:4f:7c:7c:9f:73:03:ce:37:a7:d3:7a:a5:d0:98:92:
8c:4b:d5:fb:56:9a:ad:9f:fb:7d:02:0f:ce:fd:c3:04:08:8e:
1e:54:44:0c:a5:74:5b:79:5c:ea:5a:0a:ef:8d:b6:57:a6:5f:
0e:d0:4f:70:b6:0e:15:51:3a:76:bc:06:c4:d3:36:2e:5b:aa:
44:e6:78:35:1e:54:35:cf:4a:28:33:69:86:db:68:8e:8d:69:
88:05:2a:7d:c1:46:76:d7:ce:8d:ed:4c:d9:5b:66:49:0d:6d:
6e:bd:9e:a0:40:0f:f9:a0:a5:c5:e3:1e:cf:62:32:87:8b:74:
ad:3f:ef:ab:5b:b8:d6:4c:73:64:36:c7:df:ce:0a:15:37:30:
7c:1a:38:ce:17:7e:74:24:ca:0d:47:08:4b:85:9d:3f:3e:5d:
fc:04:6a:91:3f:60:66:1d:bb:be:5b:f7:d5:95:c0:eb:62:d9:
7e:93:6f:78:cc:d8:7e:2f:c4:b9:e4:d5:94:eb:9a:af:ca:c9:
99:7b:c2:b5:5b:c3:5a:16:a1:a1:e4:aa:ef:7f:9f:12:df:7b:
7c:4f:37:07:b1:a9:d9:00:b1:0b:a0:45:88:f4:c2:ed:fb:6c:
f6:05:dc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:08 2024 by rpki-client on console-ams.rpki-client.org