Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/rdbpoE7y1kBFADJ9Q6cp1djSE9Y.roa
File: rdbpoE7y1kBFADJ9Q6cp1djSE9Y.roa (raw, json)
Hash identifier: oTiJBgB5ww8K6vcYa3TVLZ6dGIcJYjKciOxTuuYZH2M=
Subject key identifier: AD:D6:E9:A0:4E:F2:D6:40:45:00:32:7D:43:A7:29:D5:D8:D2:13:D6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019076F2716AD9D9405D6138D8CE89044ADC
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/rdbpoE7y1kBFADJ9Q6cp1djSE9Y.roa
Signing time: Wed 03 Jul 2024 04:55:18 +0000
ROA not before: Wed 03 Jul 2024 04:55:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205516
IP address blocks: 45.8.116.0/24 maxlen: 24
45.8.117.0/24 maxlen: 24
45.8.118.0/24 maxlen: 24
45.8.119.0/24 maxlen: 24
82.115.63.0/24 maxlen: 24
193.43.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:76:f2:71:6a:d9:d9:40:5d:61:38:d8:ce:89:04:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Jul 3 04:55:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=add6e9a04ef2d6404500327d43a729d5d8d213d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:33:ff:d6:89:98:40:a6:d7:4e:a1:9a:e3:
ef:99:3b:fc:25:39:ae:94:21:c2:69:0e:ca:8a:8c:
b2:8c:06:ec:c1:cb:67:9b:fe:d2:da:16:e6:38:9e:
53:37:77:02:d1:95:6e:c2:4e:cd:aa:49:38:be:6b:
62:0d:aa:dd:65:65:66:86:36:0f:d2:83:30:49:1f:
3b:1b:81:28:88:2d:66:71:32:84:c5:c5:a8:0c:2f:
26:35:ce:1b:bd:1b:a8:c5:d1:1d:50:b6:57:2d:a7:
3e:cb:d9:9c:1b:d7:a5:6f:a6:2a:f6:b2:71:c8:24:
90:e1:81:13:d1:ba:52:dd:03:fb:83:97:a2:07:37:
8f:7a:6e:c2:6e:7b:f3:36:67:f9:6d:67:c8:12:8d:
3b:78:53:0d:d7:da:01:c2:df:7e:d1:43:f6:88:76:
d1:f1:8e:dd:58:2a:92:89:2d:19:d5:c5:dc:be:0e:
68:7e:62:80:25:54:cf:05:90:ba:57:26:fe:f8:2e:
1c:aa:1e:e0:05:b4:42:8e:12:ce:fe:ad:0d:cb:b5:
b3:25:ed:45:15:43:1c:bc:09:e8:44:8f:71:36:1a:
e1:05:2f:17:8d:9f:17:09:f2:72:e3:f7:60:aa:16:
35:30:3e:86:3f:8e:2b:63:d5:1f:5e:ea:66:7a:d3:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D6:E9:A0:4E:F2:D6:40:45:00:32:7D:43:A7:29:D5:D8:D2:13:D6
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/rdbpoE7y1kBFADJ9Q6cp1djSE9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.116.0/22
82.115.63.0/24
193.43.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:10:d3:0e:34:ca:70:24:fa:0f:dc:d7:06:ac:0f:7b:d7:69:
2c:9f:e4:d5:2e:c4:38:9e:4d:1a:b3:4f:f4:a6:53:7d:a6:70:
b8:a6:3d:35:b6:b3:17:ba:cd:e6:24:6e:89:6f:5d:97:fe:c5:
2c:ae:9c:a8:fd:7d:be:7a:73:ba:d5:c4:cd:03:79:f1:dd:fa:
76:36:9c:b8:b1:03:43:f9:d4:39:b6:c2:c0:87:8f:df:a8:22:
03:1b:b7:ec:6a:c7:dc:81:09:94:79:1d:f9:a6:a7:eb:e1:df:
49:fc:b1:65:f8:9a:88:4f:37:68:ee:e5:8d:ea:b8:14:16:b4:
df:b6:7b:58:69:b3:62:36:f0:90:2f:3c:c2:40:b5:b8:2b:c5:
22:16:1f:a6:96:c5:e6:ba:16:5b:ce:34:e0:4d:b4:17:e3:91:
e5:db:ef:6a:34:68:42:c6:2a:8e:3e:31:99:87:0e:ea:44:42:
1b:d2:71:7a:db:61:84:73:0e:21:fd:d6:7d:4c:72:71:4b:e8:
85:af:34:82:ff:70:98:30:c6:45:41:26:33:3f:a2:72:a7:1c:
b7:8a:c6:71:3b:85:76:4d:25:cb:b6:bf:a6:d9:ba:bf:b2:90:
42:b9:4e:b0:b9:b1:74:9d:b0:fb:44:1c:c9:f7:41:37:ae:c2:
9d:9b:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:56:52 2024 by rpki-client on console-fra.rpki-client.org