Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/8jw2L-ZZcuZnZcPvTpKNbA0StE4.roa
File: 8jw2L-ZZcuZnZcPvTpKNbA0StE4.roa (raw, json)
Hash identifier: oGDemG6EajipnInjyvkzJqzkAjtm8Ad2FIXcD9e4BFc=
Subject key identifier: F2:3C:36:2F:E6:59:72:E6:67:65:C3:EF:4E:92:8D:6C:0D:12:B4:4E
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 018CC6B83F82C32C3AB217BE1393D590AD2A
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/8jw2L-ZZcuZnZcPvTpKNbA0StE4.roa
Signing time: Mon 01 Jan 2024 20:30:12 +0000
ROA not before: Mon 01 Jan 2024 20:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208638
IP address blocks: 45.91.16.0/22 maxlen: 24
2a0e:e40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:3f:82:c3:2c:3a:b2:17:be:13:93:d5:90:ad:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Jan 1 20:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f23c362fe65972e66765c3ef4e928d6c0d12b44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:33:78:e2:e9:ca:3d:1f:11:01:ae:6b:25:0a:
e9:c9:0a:b7:48:ba:f4:80:04:1f:8e:8a:03:91:7d:
85:40:03:5f:65:2a:af:f4:ad:fe:a5:20:3f:e8:50:
b1:ef:b2:72:30:82:7b:fd:c7:8f:fe:a0:36:7c:11:
1e:91:93:6f:c4:f8:a7:bd:48:66:be:0f:eb:f3:a3:
5f:00:99:f7:39:10:a4:51:f9:2f:ab:f4:93:5a:ae:
a2:71:4b:4e:d1:79:a8:3b:67:78:66:58:7a:b2:0e:
9b:62:dc:43:70:38:b4:71:fe:64:b0:7a:6c:ed:6f:
7d:13:7d:31:99:d6:ea:7e:17:80:76:b2:cf:49:c3:
90:85:75:76:1d:22:49:f4:0a:1b:82:9d:a0:78:7b:
1b:c1:7e:49:b1:03:b0:5c:62:17:a3:f1:b8:90:fe:
72:86:f8:c9:e0:d6:81:1d:49:82:66:35:e2:e9:05:
d8:12:ed:52:d3:05:0b:03:70:9d:19:85:a4:33:32:
dc:1c:93:a2:aa:1c:3c:c1:db:40:d9:9d:a7:d9:f4:
74:56:45:7a:f0:69:83:3f:35:73:d5:2c:00:fb:b2:
41:d0:fd:e1:a5:91:c4:cc:11:a7:ce:9b:eb:b3:35:
5b:26:5d:ce:1f:54:06:e8:6c:ef:76:3e:0e:a7:85:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:36:2F:E6:59:72:E6:67:65:C3:EF:4E:92:8D:6C:0D:12:B4:4E
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/8jw2L-ZZcuZnZcPvTpKNbA0StE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.16.0/22
IPv6:
2a0e:e40::/29
Signature Algorithm: sha256WithRSAEncryption
36:72:46:6a:a3:42:29:9e:a0:69:7f:06:aa:a6:dc:5b:cc:33:
92:7f:35:70:30:32:7a:b7:aa:23:21:11:16:6d:6d:35:f8:3e:
13:1b:ca:b6:eb:66:b8:d3:33:c5:95:67:bc:0f:60:85:a2:50:
50:c1:fb:bb:38:43:9d:ba:cb:8d:69:34:ae:88:11:9f:43:00:
53:66:8e:9e:cd:71:ab:aa:ef:07:a6:bf:2c:d8:1e:50:47:e3:
5a:fc:81:b8:64:72:e9:93:5b:54:7d:66:7e:7a:9c:3d:46:75:
1c:c5:34:6f:f8:75:5e:23:e7:ef:8c:10:c8:e3:0c:13:a3:38:
48:01:98:a5:78:52:cb:af:26:e0:0f:85:cf:c7:db:20:5c:f3:
84:f6:2c:47:ff:50:a2:66:06:2c:53:3c:68:b8:42:0d:59:ed:
17:97:ce:56:3d:49:60:7b:35:0e:b9:d8:fd:81:8d:7f:fd:39:
4d:0d:8b:5a:f5:f1:93:f8:d7:02:a1:38:3c:16:b1:da:a5:25:
08:b5:7f:22:c7:18:a5:05:0a:cf:b2:60:26:94:d5:ec:02:26:
b4:d5:b7:09:8a:da:a3:18:c8:07:9a:d2:30:11:d5:8d:32:df:
9a:d5:a6:02:f9:fe:5e:ad:02:aa:bb:b6:2d:8f:d8:61:b6:f5:
7a:e8:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:52:38 2024 by rpki-client on console-ams.rpki-client.org