Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/8pY7U526wBemlLunBntFDEJ4CtA.roa
File: 8pY7U526wBemlLunBntFDEJ4CtA.roa (raw, json)
Hash identifier: Z196HBjufMEWKQMOiAtwkCWPZx3bZTAK3ZmeTQJXDx0=
Subject key identifier: F2:96:3B:53:9D:BA:C0:17:A6:94:BB:A7:06:7B:45:0C:42:78:0A:D0
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 01905B10FDBC5D1C524666F04C3653FD1344
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/8pY7U526wBemlLunBntFDEJ4CtA.roa
Signing time: Thu 27 Jun 2024 18:59:18 +0000
ROA not before: Thu 27 Jun 2024 18:59:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208792
IP address blocks: 45.85.28.0/24 maxlen: 24
45.85.29.0/24 maxlen: 24
45.85.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5b:10:fd:bc:5d:1c:52:46:66:f0:4c:36:53:fd:13:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Jun 27 18:59:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2963b539dbac017a694bba7067b450c42780ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:2f:a8:31:f4:c7:25:38:8b:ef:02:79:fc:
b4:44:37:bc:75:91:96:d4:60:ca:5c:64:db:0e:97:
55:c1:fc:9c:90:1d:48:57:7e:9e:bf:50:89:78:96:
8b:bf:75:25:e1:a3:ea:d5:7a:7e:de:11:f6:0a:cf:
32:21:7e:04:5a:79:d7:4d:36:ac:f5:99:72:22:de:
6b:2b:f9:04:5e:82:b3:0d:76:bd:de:df:b6:88:1c:
71:14:ec:5d:bd:e6:39:e5:62:e9:34:28:bd:fb:86:
60:44:fa:0d:b0:93:e7:ec:95:f4:29:ec:67:51:55:
b8:3c:0d:62:13:1d:02:d1:95:e1:5f:4a:ca:8c:e0:
12:ab:db:08:21:f0:4d:ec:59:f4:07:09:0f:92:77:
f0:d1:20:e3:a9:58:70:31:08:2f:59:0e:9a:7a:a9:
7d:9d:e6:92:83:9c:f7:f4:29:cc:7c:37:6e:db:44:
5f:7d:85:f8:a0:21:37:af:c2:b0:16:bf:be:21:43:
c8:f9:ae:ed:56:3d:a6:ef:a6:7c:09:28:ee:0c:ba:
e1:f3:72:ec:9f:0d:83:af:0c:02:b4:41:2b:f4:90:
2f:5b:bc:76:48:47:f8:73:f8:6e:62:52:d2:b0:c5:
2e:4c:18:c3:3b:79:2c:a6:e9:38:1b:c4:0c:b5:63:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:3B:53:9D:BA:C0:17:A6:94:BB:A7:06:7B:45:0C:42:78:0A:D0
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/8pY7U526wBemlLunBntFDEJ4CtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.28.0/23
45.85.31.0/24
Signature Algorithm: sha256WithRSAEncryption
82:43:ac:a8:93:79:d7:8d:95:bc:2d:4f:92:4c:05:0a:dc:36:
cc:6b:db:73:ae:4e:42:51:94:88:25:8f:5b:88:3e:ba:f5:a3:
2c:02:5d:34:4b:ca:6f:bb:a4:e7:ab:1a:9d:f5:9d:4c:be:93:
04:e8:61:32:03:9c:b8:81:bf:2d:e1:02:7c:8c:d7:45:bd:12:
63:58:c8:70:92:5c:ae:25:85:95:ed:95:6b:af:1d:81:71:12:
63:1e:e3:17:e3:35:d1:f8:b9:02:c7:66:f0:1d:82:a8:e6:bb:
e3:18:0c:b2:f4:3a:91:c2:50:54:71:d7:99:eb:d2:0b:e4:f4:
04:cd:08:6b:2c:41:cb:1b:96:b7:e8:87:89:2b:2f:9a:81:d8:
0c:fd:2f:ff:80:7a:04:f3:8a:13:7d:a1:c4:8e:16:15:41:d2:
b4:09:da:d0:82:f2:b3:3f:5a:66:4e:a3:44:e8:66:e6:de:f4:
30:66:44:60:9d:12:70:16:5b:eb:b5:9e:78:3f:f1:7e:e7:d4:
c7:23:9a:85:a4:27:72:ce:c2:ca:dc:cc:ab:0d:ec:60:75:83:
8f:e0:9c:3f:60:3b:cf:e3:03:46:81:5e:94:3b:54:5b:6b:09:
60:8c:ff:06:ad:5c:5a:8e:86:2c:74:cc:5b:67:3a:3d:4e:67:
c1:e7:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:33 2024 by rpki-client on console-fra.rpki-client.org