Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/yIwVFoar4exH1C-BGUkkBxYsOWU.roa
File: yIwVFoar4exH1C-BGUkkBxYsOWU.roa (raw, json)
Hash identifier: YgcM0Ww1WB/FgkJ/mO0hxbSCXH/iCJXM09Vjo8JB5Fw=
Subject key identifier: C8:8C:15:16:86:AB:E1:EC:47:D4:2F:81:19:49:24:07:16:2C:39:65
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 019104384E8FFA85F9C88A20BEEEFDAEE7C1
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/yIwVFoar4exH1C-BGUkkBxYsOWU.roa
Signing time: Tue 30 Jul 2024 15:18:04 +0000
ROA not before: Tue 30 Jul 2024 15:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210015
IP address blocks: 45.80.248.0/23 maxlen: 23
193.151.160.0/23 maxlen: 23
193.151.162.0/24 maxlen: 24
2a0d:e7c7:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:38:4e:8f:fa:85:f9:c8:8a:20:be:ee:fd:ae:e7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jul 30 15:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88c151686abe1ec47d42f8119492407162c3965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:1b:b1:23:43:8e:20:f8:04:39:bd:1a:81:
04:43:b6:ca:75:32:c7:41:45:48:d1:2a:7c:ff:09:
1f:ab:0c:b6:6b:be:6a:fc:25:85:82:b2:25:c1:6b:
c1:da:94:e8:cf:98:d8:91:aa:f3:4f:d7:e4:4a:04:
73:d6:ce:d9:b5:5b:c8:d4:fe:c5:2f:92:c7:ca:f6:
0f:db:dc:de:95:dd:bb:d8:65:b8:af:61:a4:fe:e1:
09:8e:57:6e:21:79:e8:06:cf:a1:36:49:e2:3f:6a:
fe:5b:f3:66:9d:d4:9d:a0:36:fa:ab:59:91:12:7d:
eb:24:7d:9e:74:62:9c:e6:31:f9:87:69:26:f9:be:
ea:6a:8e:0f:75:9f:a6:11:16:9b:7c:c2:ba:c6:4b:
05:3d:55:2e:de:3f:ee:1f:93:40:41:46:0c:09:70:
77:35:97:4f:8c:a3:71:95:73:c9:80:a4:99:c1:d8:
04:16:7b:c7:a6:37:14:ec:4c:e9:49:b7:c8:7e:a5:
9d:a3:42:5c:44:1d:20:c3:45:27:19:7b:15:d6:63:
10:e4:e5:39:8b:fe:72:c9:ab:00:1a:83:07:19:a1:
47:e5:a6:22:22:a4:89:63:3d:1c:42:1f:2e:d0:d0:
87:c9:1d:19:78:58:46:a8:ce:75:89:df:7e:68:11:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8C:15:16:86:AB:E1:EC:47:D4:2F:81:19:49:24:07:16:2C:39:65
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/yIwVFoar4exH1C-BGUkkBxYsOWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.248.0/23
193.151.160.0-193.151.162.255
IPv6:
2a0d:e7c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
81:03:f1:64:fc:fc:3e:d6:c0:ab:a7:8f:36:41:81:71:2f:5b:
d4:51:23:31:2e:47:16:31:0f:b8:a8:92:17:63:69:1e:72:25:
15:ea:3b:11:1b:30:0a:05:bf:f2:41:86:36:1b:4b:e9:01:f8:
56:38:8d:c0:68:59:42:80:76:6a:b3:80:c8:57:06:f2:f8:7d:
fd:41:9e:52:a0:6d:58:c2:08:a7:5e:70:47:94:92:43:09:b7:
dd:4c:d7:d1:04:86:fc:28:9d:16:dd:b7:27:8f:bb:33:8b:47:
89:a8:ef:de:b3:9e:6d:49:df:66:21:4b:21:03:73:7d:50:06:
ea:a4:af:ae:ec:d9:fa:44:32:ad:24:6b:0b:ee:18:03:21:d3:
77:03:b7:c9:16:11:79:d2:50:eb:7b:0b:30:11:9f:17:79:7e:
45:19:ed:d6:0d:17:cc:98:2e:08:5a:34:f7:fb:f6:1b:56:9c:
4f:04:cf:f2:50:5d:0f:d4:f6:bb:97:a9:a8:f5:bf:b0:c8:8a:
5a:b5:5b:e8:80:92:7e:a6:12:5d:17:8f:a1:ad:22:e6:94:84:
ad:16:af:a6:af:bc:1d:0f:f8:8a:b7:e8:68:a3:df:b2:c1:5d:
97:26:51:a4:84:b5:dd:83:0c:a8:7f:b0:1d:a0:8e:4d:3e:78:
9d:24:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:12:07 2024 by rpki-client on console-fra.rpki-client.org