Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1wWk2gRxjYjYnpKcu9tM4wbh3uU.roa
File: 1wWk2gRxjYjYnpKcu9tM4wbh3uU.roa (raw, json)
Hash identifier: g6EZQCi6eVq0Wg80UaV8q+UTbfNvYiZ4b5TmL2BJmZo=
Subject key identifier: D7:05:A4:DA:04:71:8D:88:D8:9E:92:9C:BB:DB:4C:E3:06:E1:DE:E5
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0191DBF541FA391044EA2B760C88BF58C43D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1wWk2gRxjYjYnpKcu9tM4wbh3uU.roa
Signing time: Tue 10 Sep 2024 12:42:48 +0000
ROA not before: Tue 10 Sep 2024 12:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207238
IP address blocks: 45.150.44.0/22 maxlen: 22
91.242.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:f5:41:fa:39:10:44:ea:2b:76:0c:88:bf:58:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 10 12:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d705a4da04718d88d89e929cbbdb4ce306e1dee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:78:8e:98:76:8a:15:d7:38:eb:8a:62:6c:
94:55:c6:10:b5:32:2c:de:65:b9:23:cb:1f:40:4c:
c3:f3:32:4c:af:68:7c:4a:80:ff:2e:f2:26:dc:b6:
e3:d2:68:80:f3:22:90:3f:d6:9f:92:59:a0:aa:d8:
19:34:55:b8:16:d6:65:57:85:e2:81:4e:db:7c:56:
8b:b3:95:a2:fd:bd:91:a2:15:af:06:be:f9:6d:7e:
ca:25:01:60:b1:ad:1c:3c:25:62:c1:3d:02:4f:9a:
44:6f:13:53:0c:4c:5f:44:f5:e1:32:b1:08:fc:85:
c6:55:10:41:8b:9f:38:11:75:c5:64:99:e2:29:32:
3f:2c:da:c9:de:6b:ce:fe:bf:04:0a:54:24:86:c1:
ac:b7:5b:f2:81:ef:dd:bf:2c:54:86:ec:b4:d4:25:
19:03:d1:f4:75:28:47:b1:c7:c2:7d:1b:fa:87:e4:
2a:bd:64:1c:d3:6d:3d:d3:c5:3c:e5:d1:80:51:08:
56:ae:05:9f:d2:fd:47:58:df:31:96:ae:ad:a6:e0:
06:ff:bd:69:25:f8:5f:a0:0b:01:5d:a1:49:f8:e4:
41:fd:02:f2:5a:71:a9:c6:3b:5d:14:f2:c6:29:80:
d4:07:6a:1b:e8:4f:93:b1:5b:10:32:42:0f:70:01:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:A4:DA:04:71:8D:88:D8:9E:92:9C:BB:DB:4C:E3:06:E1:DE:E5
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1wWk2gRxjYjYnpKcu9tM4wbh3uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.44.0/22
91.242.68.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a5:8f:11:0b:8c:c2:e2:2a:08:ce:cc:44:2a:b3:3c:9a:0c:
b9:f2:cb:f8:b8:82:c4:06:93:53:b5:69:b1:99:6f:57:e7:2b:
43:45:e8:d8:9e:aa:04:02:d3:b9:7b:d8:7b:68:63:0b:ee:25:
1a:e9:01:48:21:73:99:73:b6:8b:04:61:50:5a:ad:0f:f9:ef:
1d:9d:82:d5:c5:c6:c1:64:21:07:fc:4d:47:72:23:77:51:a0:
02:17:60:6e:a0:1c:87:42:0c:46:48:25:ad:21:06:c9:c2:1d:
83:91:e4:4a:15:a6:c1:1e:8f:4e:0a:52:5f:7c:b4:ef:36:34:
ea:50:6a:49:d4:9f:1d:d9:56:fe:21:4e:ad:df:b8:a6:ec:6c:
21:ed:20:6d:12:cf:1c:ba:69:f3:c7:7d:c9:90:c5:ef:6a:19:
04:c0:d0:2d:ba:3d:5c:c2:52:fc:25:ec:65:14:f4:8f:1e:6f:
75:53:c9:03:7a:c5:f3:1e:26:7a:e7:ab:fb:8e:46:60:4e:90:
be:f6:9c:b6:93:e4:60:bc:22:27:42:7f:f6:6d:4a:60:c9:e1:
22:54:44:1a:07:f6:1a:1a:e7:cb:8a:1f:5d:eb:bf:da:ac:d5:
91:b9:36:00:b2:0c:3c:c9:ce:71:81:04:43:0b:3a:66:7b:ea:
32:70:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:31 2024 by rpki-client on console-ams.rpki-client.org