Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pcSleI_0mBHHb7EsgXoAYMXlMJ8.roa
File: pcSleI_0mBHHb7EsgXoAYMXlMJ8.roa (raw, json)
Hash identifier: lsD2dT8r8BF4MtLKfGiKEWJSncrlfSilEsFlVl6Mgfk=
Subject key identifier: A5:C4:A5:78:8F:F4:98:11:C7:6F:B1:2C:81:7A:00:60:C5:E5:30:9F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018EF51965D7EEE56B73D9FB0817EB106A63
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pcSleI_0mBHHb7EsgXoAYMXlMJ8.roa
Signing time: Fri 19 Apr 2024 06:44:26 +0000
ROA not before: Fri 19 Apr 2024 06:44:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207177
IP address blocks: 45.67.117.0/24 maxlen: 24
45.86.16.0/21 maxlen: 23
45.86.16.0/22 maxlen: 22
45.86.16.0/24 maxlen: 24
45.86.17.0/24 maxlen: 24
45.86.18.0/24 maxlen: 24
91.242.81.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:19:65:d7:ee:e5:6b:73:d9:fb:08:17:eb:10:6a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 19 06:44:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c4a5788ff49811c76fb12c817a0060c5e5309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:8a:a6:c2:3a:ea:0c:0d:10:b6:b3:d3:5a:
08:93:9f:8f:0c:74:2d:f8:58:30:86:68:dd:50:9a:
10:e9:27:68:d6:61:dc:ca:6e:4e:0b:25:88:6a:c0:
4c:bf:85:90:67:3f:6e:de:23:90:43:83:91:42:07:
2e:b0:5c:d0:ce:a8:a4:ef:18:de:bb:57:3d:91:a2:
af:3e:85:de:6b:6c:ff:bb:a3:4b:c8:46:ec:1b:83:
be:8b:ad:dd:82:4f:ee:ff:3d:53:a1:83:23:84:cd:
88:20:e2:19:a2:08:32:3b:2e:48:7a:48:6d:66:3d:
b7:9f:9b:3e:b5:fe:1e:72:d3:a3:2f:99:72:51:fe:
4f:23:85:d0:20:76:ef:d9:ac:3b:67:3a:59:e5:f5:
49:76:1c:96:1a:84:6d:2d:7e:cf:eb:4a:bc:67:47:
2c:3e:7a:01:b7:dd:b0:0f:27:5b:6c:19:d1:18:c7:
54:0b:9a:c2:bf:93:5b:af:a3:bb:4b:94:d7:a6:6e:
56:75:c4:84:b8:e0:9d:e5:52:6e:e8:a5:aa:f6:c5:
b3:8c:37:18:23:ad:e8:e0:88:dd:5a:3f:26:59:df:
ba:fb:8b:4e:a3:1f:ff:37:b6:36:b3:f3:aa:a1:61:
ad:06:e4:a8:5f:cf:30:05:1d:ec:9e:fc:ee:58:30:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C4:A5:78:8F:F4:98:11:C7:6F:B1:2C:81:7A:00:60:C5:E5:30:9F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pcSleI_0mBHHb7EsgXoAYMXlMJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
45.86.16.0/21
91.242.81.0/24
171.22.52.0/22
Signature Algorithm: sha256WithRSAEncryption
11:56:07:e1:52:51:50:c8:91:85:f7:b0:c4:29:a8:71:2d:06:
70:fe:d4:38:f6:5b:a6:7f:31:42:eb:b6:59:8d:d6:51:a8:1e:
1e:b9:42:4f:68:8d:be:29:de:6e:a8:0b:c0:89:10:1a:43:ec:
cc:5a:2d:2f:83:ac:92:d7:40:c9:ed:dd:02:49:98:fb:13:5d:
d0:c8:e7:9c:3c:2d:31:46:a2:3e:0d:cd:06:b2:4d:91:6c:2f:
7c:07:c5:81:71:85:c0:f6:5c:3b:98:cf:9b:e1:b6:95:23:76:
61:c5:f3:85:69:1f:10:56:1a:31:6b:9e:65:b6:59:85:bf:23:
16:f9:79:9b:0b:55:96:40:8c:9c:f0:03:0a:8c:3c:ff:f7:7a:
d5:52:20:04:1b:33:40:e1:6d:12:89:3d:df:b0:8c:57:40:0d:
ea:71:a2:97:70:7a:7d:90:ea:24:e1:4f:b9:7d:a1:50:38:a4:
b8:85:cc:ac:3c:47:af:38:20:ec:20:40:db:65:f7:4b:2f:1c:
f6:fe:a2:9d:6c:23:10:43:a9:82:9c:9c:08:63:c7:46:57:3a:
c6:36:6a:42:60:f1:a8:89:c4:ee:b7:81:4d:30:07:57:e3:41:
8c:6c:bf:e1:af:a3:85:6a:11:7a:7d:d1:85:78:d9:6d:17:32:
26:09:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:36 2024 by rpki-client on console-ams.rpki-client.org