Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/8A9PuemuIq6pydL-GIWRmICeR0E.roa
File: 8A9PuemuIq6pydL-GIWRmICeR0E.roa (raw, json)
Hash identifier: nKacuWQG1qPsMi1r4mBxghGpBALTmjVTOyUch+p3F88=
Subject key identifier: F0:0F:4F:B9:E9:AE:22:AE:A9:C9:D2:FE:18:85:91:98:80:9E:47:41
Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial: 018CC64B16D3E81BB2A0262EBDCB1234AEA3
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/8A9PuemuIq6pydL-GIWRmICeR0E.roa
Signing time: Mon 01 Jan 2024 18:30:58 +0000
ROA not before: Mon 01 Jan 2024 18:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12571
IP address blocks: 45.128.100.0/22 maxlen: 22
212.76.192.0/19 maxlen: 19
212.76.208.0/24 maxlen: 24
2a00:1d48::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:16:d3:e8:1b:b2:a0:26:2e:bd:cb:12:34:ae:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Validity
Not Before: Jan 1 18:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f00f4fb9e9ae22aea9c9d2fe18859198809e4741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:53:3b:14:ca:1f:bb:7f:11:13:0f:fc:47:
0f:2f:1c:29:cd:6d:7c:a0:72:b7:47:d5:4c:64:25:
6d:83:13:75:4b:24:f3:ec:ad:38:6e:4f:c1:09:c6:
41:ea:e9:63:9e:2d:36:27:ed:b1:48:9c:bd:82:cb:
32:49:d6:32:b4:14:eb:0e:1a:0e:21:20:e0:b1:67:
eb:c5:0b:1e:11:72:8f:80:9d:3c:ce:24:fb:80:14:
c6:4d:fa:b8:1a:7c:8b:3a:b6:2d:c7:61:d9:1a:19:
1c:f1:b3:e3:d2:c9:50:1e:13:c8:08:c0:17:71:15:
c5:34:48:64:00:63:63:f8:90:1d:e2:1c:2e:c7:12:
f1:d2:62:7b:6d:95:3c:56:48:7c:53:d3:be:cc:8c:
12:58:30:61:70:17:3c:3f:ed:69:c6:1f:aa:9d:a3:
73:95:7b:be:17:d2:8c:a9:bb:46:63:a0:1e:16:0e:
95:bb:f9:7b:50:bc:b1:8e:7d:6e:4d:b4:2b:43:05:
14:bc:bc:b9:fb:30:82:f1:82:66:e3:31:b0:62:40:
18:75:62:0f:b3:a7:bb:db:bb:66:0d:5f:60:a1:01:
d3:38:a5:27:c3:d5:e3:43:ae:e6:ff:e4:c2:c8:a9:
05:78:0e:1a:35:44:e7:a3:90:c7:90:09:37:be:7d:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0F:4F:B9:E9:AE:22:AE:A9:C9:D2:FE:18:85:91:98:80:9E:47:41
X509v3 Authority Key Identifier:
keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/8A9PuemuIq6pydL-GIWRmICeR0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.100.0/22
212.76.192.0/19
IPv6:
2a00:1d48::/32
Signature Algorithm: sha256WithRSAEncryption
0a:19:f5:9f:a0:f3:cc:21:d0:3b:5f:9e:94:29:bd:a7:0a:f3:
f7:61:f0:c3:49:d2:2a:40:41:c4:f3:7a:57:9e:c9:c3:fb:a4:
a9:8b:9e:6c:3d:25:58:87:8c:46:53:a5:1b:3d:98:98:15:f8:
7b:db:e4:ab:fe:69:04:3d:8d:08:d4:fb:96:09:ab:1c:9f:09:
c0:58:3c:72:8d:1d:c7:99:a4:dd:6e:9c:17:fb:fe:38:42:f4:
d3:72:a5:f4:db:bc:65:b1:f5:dc:2e:0a:e0:28:ef:33:6b:cc:
93:35:97:56:c7:cf:ad:2c:88:52:12:c9:2e:5b:50:9b:9f:20:
ba:52:20:0b:37:61:87:a7:df:4a:89:01:d1:ef:db:3d:01:21:
86:8e:2f:5b:d8:56:ca:d9:c9:5f:37:2c:04:f8:41:a2:22:74:
a6:6a:be:84:2a:7e:bd:49:55:2c:38:61:ef:64:5c:a8:79:e7:
9d:a4:dc:5d:5c:7f:0e:9e:97:7e:21:de:96:4b:70:13:0c:0b:
29:25:7f:ba:f2:06:e8:ea:73:9d:5a:7b:66:6b:94:2c:96:89:
ee:d0:aa:8e:9f:1b:fa:af:fc:fe:35:d9:0a:67:17:a0:26:56:
ad:91:e1:08:3c:3e:2b:74:92:a1:eb:d1:74:28:e5:58:14:46:
f6:82:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:44:31 2024 by rpki-client on console-fra.rpki-client.org