Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/8B_n18TjZnpdH4VSmAfWWyMTG9Y.roa
File: 8B_n18TjZnpdH4VSmAfWWyMTG9Y.roa (raw, json)
Hash identifier: xfalGS2aRYaAWrLcQWp+OZwpjT/MXkx3b+hGvsDOqxw=
Subject key identifier: F0:1F:E7:D7:C4:E3:66:7A:5D:1F:85:52:98:07:D6:5B:23:13:1B:D6
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 018CC8DCD16EBB18DFBD6D42206DC5423DA6
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/8B_n18TjZnpdH4VSmAfWWyMTG9Y.roa
Signing time: Tue 02 Jan 2024 06:29:23 +0000
ROA not before: Tue 02 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202365
IP address blocks: 45.153.248.0/22 maxlen: 24
185.170.9.0/24 maxlen: 24
2a10:f9c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d1:6e:bb:18:df:bd:6d:42:20:6d:c5:42:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Jan 2 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f01fe7d7c4e3667a5d1f85529807d65b23131bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:e0:0b:1a:ea:5d:d6:a9:7a:56:19:ea:84:
2a:cf:17:85:58:b2:0e:59:14:f8:e7:e9:b9:50:e0:
13:73:e5:24:60:a8:9a:29:34:a6:40:15:01:38:85:
0e:6c:b5:d0:c4:81:79:34:31:c1:e8:05:20:53:73:
db:50:ab:29:be:d3:ba:d2:41:6d:b6:e7:10:62:78:
30:5c:6e:01:d3:0d:1f:84:34:99:0c:9e:54:76:52:
92:f6:81:57:29:5e:82:68:3d:38:35:2c:a3:6d:60:
8a:7a:f1:39:36:b4:82:1d:48:6f:c1:18:c6:7d:ec:
67:cd:11:c1:49:c1:be:d6:ce:e4:3e:2b:4f:c9:b1:
44:56:c7:80:d5:e8:95:66:1b:82:23:22:7e:4f:16:
87:01:c5:1b:9f:20:01:0e:97:aa:d6:29:41:77:e5:
8f:d3:46:1d:f2:1f:e7:a1:20:4d:89:91:c5:85:2e:
78:a1:43:f7:d4:5b:b8:17:19:43:0c:5a:8b:42:4d:
aa:75:5a:63:3f:2c:09:92:02:bc:93:a4:e1:c0:7d:
75:31:6f:20:77:84:21:43:7c:45:26:7f:1c:4c:a6:
e6:cd:c1:35:78:a1:28:37:ba:4a:18:7a:a4:a1:26:
59:fa:75:2e:fb:3d:ef:35:5d:0d:09:24:27:55:71:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:E7:D7:C4:E3:66:7A:5D:1F:85:52:98:07:D6:5B:23:13:1B:D6
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/8B_n18TjZnpdH4VSmAfWWyMTG9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.248.0/22
185.170.9.0/24
IPv6:
2a10:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:4c:4a:54:b8:43:79:fa:c4:d0:40:82:f9:13:ae:d7:b1:09:
7f:d0:75:6f:3a:03:b4:34:31:05:40:44:a3:84:82:01:25:bc:
ac:4b:e0:a0:50:72:63:14:f0:72:77:2d:5f:74:42:32:e3:cf:
56:cf:5c:f3:72:77:eb:6e:fe:e0:82:5b:85:1d:fe:5c:d4:b8:
b4:d7:60:06:b0:70:f1:6b:79:04:d6:41:5d:cc:87:25:7f:ba:
9f:17:21:05:8c:12:84:62:9a:5a:32:92:bc:aa:d6:f3:18:48:
4e:d7:68:45:07:c5:6d:55:d2:a8:b0:68:13:6b:1a:4a:f1:17:
a4:1c:72:4a:5b:9d:45:69:57:68:33:51:2d:ae:51:91:cf:57:
a0:34:0b:58:16:a9:cb:ea:b9:f2:84:50:aa:8d:2c:94:25:e3:
76:c4:85:06:25:41:47:a7:bd:90:36:7c:3c:65:06:2f:d7:25:
bf:e1:09:0b:aa:d5:23:25:5a:7d:f2:4d:71:17:df:05:a7:28:
0c:f2:74:c4:14:bd:05:6c:9f:22:50:d5:91:ae:f6:54:20:fe:
0a:cb:e1:b9:02:53:91:80:73:ec:39:96:a8:73:7e:9e:6f:4b:
27:a9:1c:ec:51:64:e0:c5:ba:da:b9:71:64:8e:6e:ed:3b:e2:
59:a2:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:31:57 2024 by rpki-client on console-ams.rpki-client.org