Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8l8siZRax8caiHJU5DBOW8AkCSg.roa
File: 8l8siZRax8caiHJU5DBOW8AkCSg.roa (raw, json)
Hash identifier: 6QnVud4Q1R+A3zob5M/3V0upl+ZbHwnPD5wg2tqG8rY=
Subject key identifier: F2:5F:2C:89:94:5A:C7:C7:1A:88:72:54:E4:30:4E:5B:C0:24:09:28
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018F070798678BA0D85E8F06A08EFA088A67
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8l8siZRax8caiHJU5DBOW8AkCSg.roa
Signing time: Mon 22 Apr 2024 18:18:09 +0000
ROA not before: Mon 22 Apr 2024 18:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.49.0/24 maxlen: 24
147.45.50.0/24 maxlen: 24
147.45.51.0/24 maxlen: 24
147.45.60.0/24 maxlen: 24
147.45.84.0/24 maxlen: 24
147.45.85.0/24 maxlen: 24
147.45.86.0/24 maxlen: 24
147.45.87.0/24 maxlen: 24
147.45.116.0/24 maxlen: 24
147.45.126.0/24 maxlen: 24
147.45.177.0/24 maxlen: 24
147.45.178.0/24 maxlen: 24
147.45.179.0/24 maxlen: 24
147.45.200.0/23 maxlen: 23
147.45.202.0/23 maxlen: 23
147.45.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:07:07:98:67:8b:a0:d8:5e:8f:06:a0:8e:fa:08:8a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 22 18:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f25f2c89945ac7c71a887254e4304e5bc0240928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:7a:03:e0:d3:0e:eb:08:69:8d:b3:e5:50:
14:ac:fc:d4:8c:c6:85:c6:85:fa:56:fb:68:04:05:
56:0c:76:e5:6e:b4:72:97:f6:e4:9c:08:b2:d0:95:
80:d6:9e:4b:21:6e:f0:4d:b1:81:5a:9d:78:3e:44:
d5:73:1d:ad:c8:4f:ce:df:31:60:e0:eb:c1:7e:59:
49:f2:a5:f8:c4:12:e1:e1:df:02:4e:2b:78:3e:66:
34:0e:0d:ca:6b:43:d5:f6:c7:f8:42:d9:eb:33:7c:
f6:46:8c:67:de:12:44:84:29:05:1a:50:39:6a:ea:
de:6f:80:02:1e:2c:71:f1:25:ab:4d:25:2b:92:17:
37:72:af:01:56:b1:52:d5:48:92:4e:cb:8d:38:7d:
5d:28:e7:18:8d:d6:32:e0:dd:c1:c3:6d:a1:fe:ec:
fe:59:29:70:fe:f1:45:60:f1:e1:46:1a:25:45:ae:
67:fa:49:8d:91:2e:af:e4:a4:1e:0d:45:3b:9b:65:
fb:09:67:60:00:db:02:80:58:90:ab:8f:e7:f3:99:
3c:9a:31:ad:c8:2c:88:00:5f:96:19:30:a6:7f:fa:
88:09:4e:11:b7:ef:34:6f:54:82:b5:d1:63:e6:ca:
fa:0f:34:f5:fa:3a:72:57:6b:a0:fd:b3:5d:b5:98:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5F:2C:89:94:5A:C7:C7:1A:88:72:54:E4:30:4E:5B:C0:24:09:28
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8l8siZRax8caiHJU5DBOW8AkCSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.49.0-147.45.51.255
147.45.60.0/24
147.45.84.0/22
147.45.116.0/24
147.45.126.0/24
147.45.177.0-147.45.179.255
147.45.200.0-147.45.204.255
Signature Algorithm: sha256WithRSAEncryption
8d:a1:a1:bf:28:72:ab:49:26:3b:69:39:a1:60:61:2b:c3:50:
2c:65:0f:46:17:0c:2e:60:41:45:89:b6:b1:ad:6a:c1:19:10:
1f:80:ab:38:5e:75:98:14:c6:5b:d0:ca:8d:ab:80:9a:e2:df:
b1:5b:31:0e:c1:63:17:6c:16:ed:06:22:4b:85:93:be:7f:a3:
1e:a0:5c:ec:c7:7b:35:58:b0:5f:67:8f:1f:43:cd:0e:1d:41:
a2:72:7a:53:62:d1:58:48:c6:d4:16:4a:0a:89:f8:2e:87:a5:
54:df:7c:2e:72:24:23:1a:59:eb:85:44:7d:aa:de:b6:1c:a3:
4c:cb:0a:15:e2:ad:6c:98:2a:dd:3d:89:2e:c9:c4:e7:5e:63:
68:63:6a:01:27:33:cc:bf:28:10:b1:1b:f1:2f:34:10:47:0e:
06:fa:5c:ba:fa:c6:61:ce:ca:e1:e3:13:94:9c:0a:61:63:52:
3d:9c:70:5b:d1:09:ed:3f:dc:c2:7e:65:7c:2f:45:81:3e:2b:
ff:50:70:bc:06:73:a5:3c:01:31:65:1d:03:4d:86:24:13:c8:
65:51:ba:95:8a:fb:9d:15:3a:77:ce:93:2a:08:2e:95:f1:d8:
dc:42:59:c1:c1:3c:04:9d:a6:89:fa:ac:83:3c:43:92:19:f0:
98:04:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:39:10 2024 by rpki-client on console-fra.rpki-client.org