Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/W9XtplxDVea_xmcL0EudPhDMZz8.roa
File: W9XtplxDVea_xmcL0EudPhDMZz8.roa (raw, json)
Hash identifier: APioojH5qla2z2jijMouuTw/D5QGxK16ZgyBQ01lNdk=
Subject key identifier: 5B:D5:ED:A6:5C:43:55:E6:BF:C6:67:0B:D0:4B:9D:3E:10:CC:67:3F
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 018EE626341525B09F012914439735E3B083
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/W9XtplxDVea_xmcL0EudPhDMZz8.roa
Signing time: Tue 16 Apr 2024 09:04:06 +0000
ROA not before: Tue 16 Apr 2024 09:04:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204542
IP address blocks: 185.245.208.0/22 maxlen: 22
185.245.208.0/24 maxlen: 24
185.245.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:26:34:15:25:b0:9f:01:29:14:43:97:35:e3:b0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Apr 16 09:04:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bd5eda65c4355e6bfc6670bd04b9d3e10cc673f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:fb:81:05:32:89:9a:a9:a5:c2:de:ed:bb:
d0:b7:e2:25:8b:96:5a:1c:2f:e3:9e:7e:d7:ba:97:
df:03:d9:80:1b:62:75:85:23:72:ee:8a:83:8b:86:
52:78:e3:df:38:c5:41:d3:cc:8a:55:fc:b9:b7:47:
3a:ef:91:a7:1e:4e:f5:cc:4b:0e:d1:cd:f2:fb:ec:
5d:b7:6e:1c:ed:d5:0a:61:ce:25:d2:56:6c:99:ae:
71:14:e9:0b:83:76:04:b6:18:0a:df:ed:f2:14:0e:
92:27:0c:ef:b9:36:82:c2:ba:c0:50:eb:ab:89:03:
68:65:6f:ab:51:e4:5f:2f:e5:35:38:50:56:f0:97:
de:b3:aa:77:94:ab:fa:1e:50:a8:f2:2b:ec:5d:3d:
4a:31:62:41:52:1e:77:53:b3:e5:97:be:1f:ad:3e:
be:d2:9d:d6:d1:c4:87:b7:0d:ac:08:9f:00:1f:eb:
1b:20:31:04:3f:ac:8d:07:43:ef:85:39:d6:2c:c8:
ec:d1:24:14:df:1f:64:5b:e1:93:5f:18:11:a7:4d:
66:50:49:e7:b3:de:d0:fc:0d:df:30:3a:5a:79:3b:
63:13:cf:ea:69:30:cf:17:87:a3:80:94:18:85:c4:
b6:6a:ab:b7:76:d8:bf:07:f1:89:c2:0d:f7:ac:13:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:ED:A6:5C:43:55:E6:BF:C6:67:0B:D0:4B:9D:3E:10:CC:67:3F
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/W9XtplxDVea_xmcL0EudPhDMZz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:ed:14:e0:b8:5a:73:50:28:07:f4:ab:dd:3e:21:cb:b5:a8:
db:02:4e:87:76:1e:52:04:c4:f7:fb:99:41:cd:bd:55:61:ba:
67:b5:8c:94:66:15:a1:07:96:b3:7c:4b:2f:2a:c1:8a:75:4f:
a0:03:ac:ed:97:e9:11:bc:18:dd:69:cb:92:d4:a0:92:43:57:
a5:f1:9a:01:91:a1:a7:f4:b0:b4:78:c2:2f:93:65:03:8a:b9:
23:10:bd:95:1b:b1:8c:15:02:22:f5:46:9a:5a:18:d7:13:1a:
c6:2c:64:d3:5a:5c:72:2b:ff:02:8c:4a:5c:89:ce:2d:76:6b:
b9:dd:ff:db:fe:ab:67:00:5e:8d:90:89:35:79:fd:70:d7:f4:
c6:dc:18:c1:f6:7e:ce:d5:d1:40:fa:c4:a9:eb:3e:8d:fe:c8:
2c:8f:a6:8b:f2:2f:5b:b6:e8:18:3c:76:17:ed:da:36:60:9d:
a9:2c:8f:bd:67:1a:2a:b1:ad:50:98:7f:15:24:9b:d5:c2:19:
6b:cc:e6:10:38:96:53:50:01:e2:ba:6e:9e:8f:06:d7:cb:87:
74:17:d7:4c:e6:df:37:44:f0:c2:d6:0f:3c:54:4b:aa:f9:94:
ab:19:39:21:db:e0:05:64:03:0c:73:99:e7:2e:53:76:71:4d:
5e:22:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:08 2024 by rpki-client on console-fra.rpki-client.org