Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/8eRe4YYK6ljn4f1is07_6JXd6bI.roa
File: 8eRe4YYK6ljn4f1is07_6JXd6bI.roa (raw, json)
Hash identifier: sGuX+27uM1ZARE4fZbpYHPFMaps7hevvxeM1n0fjiXM=
Subject key identifier: F1:E4:5E:E1:86:0A:EA:58:E7:E1:FD:62:B3:4E:FF:E8:95:DD:E9:B2
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 018CC492E770249B7A2656B47434225ED2CF
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/8eRe4YYK6ljn4f1is07_6JXd6bI.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60475
IP address blocks: 45.90.242.0/24 maxlen: 24
45.90.242.0/23 maxlen: 23
45.90.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e7:70:24:9b:7a:26:56:b4:74:34:22:5e:d2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1e45ee1860aea58e7e1fd62b34effe895dde9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:9a:00:93:75:cb:43:31:3b:02:b8:78:09:
62:54:9e:1c:9b:9e:69:a7:f0:3f:6c:e1:1f:d0:d3:
95:2c:3b:b6:91:3f:be:cd:d6:8e:27:c2:05:44:fc:
85:05:b4:2c:a9:b9:ea:da:8e:b1:9a:72:4a:70:d4:
0b:8a:6e:a6:35:bf:da:06:51:c9:87:6c:c4:ed:48:
99:51:79:6a:39:0a:99:90:ec:10:e3:7c:77:a3:1a:
e3:f0:a9:e1:6a:7b:66:bc:58:f6:c6:67:9a:0e:dd:
ce:7d:3f:3d:3d:cd:af:58:3b:77:71:fb:13:4c:b1:
cc:6a:03:2d:c2:70:46:bf:3e:c0:7e:bf:9a:0c:a3:
00:0e:ca:36:17:38:01:e4:fb:6f:8f:fb:a8:12:31:
e1:48:87:d3:da:c4:97:8c:9e:bd:05:e3:ee:29:4f:
84:59:8b:f6:27:f8:6a:c5:c3:91:eb:d0:00:14:a0:
64:87:88:ae:3e:11:e6:83:69:80:66:ce:3f:d5:59:
11:2f:7d:1a:62:17:41:9c:68:ae:b8:e8:bc:25:ca:
e0:03:d1:4a:ac:a3:ce:37:42:ea:ac:b1:e7:3e:df:
68:3d:b1:22:3e:67:20:c3:24:bb:36:7a:4e:83:8a:
91:af:2f:8c:ea:02:b6:d2:b1:31:f7:9f:86:c1:d7:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:5E:E1:86:0A:EA:58:E7:E1:FD:62:B3:4E:FF:E8:95:DD:E9:B2
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/8eRe4YYK6ljn4f1is07_6JXd6bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.242.0/23
Signature Algorithm: sha256WithRSAEncryption
64:12:fa:93:18:cf:85:4e:c9:27:eb:a7:42:09:79:8e:ac:e5:
8d:d3:8a:2d:2b:b4:98:57:37:fa:52:62:1b:93:00:a5:b1:7d:
77:d3:ce:f4:dd:20:a6:de:be:25:f2:cf:88:70:f2:5b:14:40:
1d:73:5f:62:0c:2e:15:74:27:a9:ea:1d:ff:b7:f4:8e:7f:e8:
20:3f:71:54:b7:92:f5:97:2a:19:f1:50:e6:91:74:ac:0d:90:
9f:ae:c7:ba:d4:c4:b1:44:76:8e:a9:f9:c4:26:de:4b:55:47:
d5:91:a0:e7:76:64:61:c7:8c:6b:1c:1c:f7:ec:b2:47:a8:1c:
ab:1e:7d:89:61:7b:ba:4e:65:05:b1:94:48:ed:2c:5a:7d:f3:
e1:4c:2c:98:3e:e1:ac:25:00:c7:2e:3d:9d:3f:fe:0e:34:95:
47:d5:58:59:04:1d:6f:2c:be:00:d4:2f:b7:f5:ff:62:e2:b4:
bf:e0:bb:13:c8:7e:b5:4a:b3:94:cc:ee:0a:7c:97:7e:22:d4:
58:43:af:a1:96:9f:cf:a0:02:e5:42:9a:8e:b4:5e:7f:83:f5:
e0:df:38:10:2e:a0:a8:93:df:b6:aa:db:69:31:6a:a5:5c:09:
6b:ea:95:90:66:e4:02:b2:56:1b:c7:f5:f7:46:a7:fb:3f:60:
32:ec:b6:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkudwJJt6Jla0dDQiXtLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy
YzNjZWIwHhcNMjQwMTAxMTAzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWU0NWVlMTg2MGFlYTU4ZTdlMWZkNjJiMzRlZmZlODk1ZGRlOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH+aAJN1y0MxOwK4eAliVJ4cm55p
p/A/bOEf0NOVLDu2kT++zdaOJ8IFRPyFBbQsqbnq2o6xmnJKcNQLim6mNb/aBlHJ
h2zE7UiZUXlqOQqZkOwQ43x3oxrj8KnhantmvFj2xmeaDt3OfT89Pc2vWDt3cfsT
TLHMagMtwnBGvz7Afr+aDKMADso2FzgB5Ptvj/uoEjHhSIfT2sSXjJ69BePuKU+E
WYv2J/hqxcOR69AAFKBkh4iuPhHmg2mAZs4/1VkRL30aYhdBnGiuuOi8JcrgA9FK
rKPON0LqrLHnPt9oPbEiPmcgwyS7NnpOg4qRry+M6gK20rEx95+GwdfK5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPHkXuGGCupY5+H9YrNO/+iV3emyMB8GA1UdIwQY
MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt
YzlkZTIyYjkxNmNhLzEvOGVSZTRZWUs2bGpuNGYxaXMwN182SlhkNmJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh
LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVryMA0G
CSqGSIb3DQEBCwUAA4IBAQBkEvqTGM+FTskn66dCCXmOrOWN04otK7SYVzf6UmIb
kwClsX1308703SCm3r4l8s+IcPJbFEAdc19iDC4VdCep6h3/t/SOf+ggP3FUt5L1
lyoZ8VDmkXSsDZCfrse61MSxRHaOqfnEJt5LVUfVkaDndmRhx4xrHBz37LJHqByr
Hn2JYXu6TmUFsZRI7SxaffPhTCyYPuGsJQDHLj2dP/4ONJVH1VhZBB1vLL4A1C+3
9f9i4rS/4LsTyH61SrOUzO4KfJd+ItRYQ6+hlp/PoALlQpqOtF5/g/Xg3zgQLqCo
k9+2qttpMWqlXAlr6pWQZuQCslYbx/X3Rqf7P2Ay7LZb
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:04:54 2024 by rpki-client on console-ams.rpki-client.org