Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/H8sRl_5ndQEJfevs47WcRaZP2-g.roa
File: H8sRl_5ndQEJfevs47WcRaZP2-g.roa (raw, json)
Hash identifier: UmqZy8MgbhThfr6ZvZo6AikBzL8vCL3TtQ5AcQdVHL4=
Subject key identifier: 1F:CB:11:97:FE:67:75:01:09:7D:EB:EC:E3:B5:9C:45:A6:4F:DB:E8
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E386D3833A595ADB3D84022B0FA0CB03F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/H8sRl_5ndQEJfevs47WcRaZP2-g.roa
Signing time: Wed 13 Mar 2024 15:27:45 +0000
ROA not before: Wed 13 Mar 2024 15:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 45.132.50.0/24 maxlen: 24
194.26.138.0/24 maxlen: 24
213.109.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:6d:38:33:a5:95:ad:b3:d8:40:22:b0:fa:0c:b0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 13 15:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fcb1197fe677501097debece3b59c45a64fdbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:f5:e8:f0:69:4f:e4:f5:00:9e:2c:56:a6:
ec:6f:fa:e3:89:39:c6:fe:de:79:c3:a3:1c:0f:68:
2e:23:d8:80:9b:cb:15:6f:9e:c0:a8:0f:a8:8e:b0:
42:2e:47:c7:36:0d:de:b2:0e:7a:8c:17:96:01:8e:
38:ac:01:6d:82:04:e9:36:a9:77:c8:ff:9a:89:5a:
96:00:d2:50:0d:70:3a:f8:6c:3e:47:4d:bc:76:46:
58:8c:f2:c9:e6:0f:49:6a:42:cd:1b:29:f3:de:dd:
4e:85:a7:21:3f:a2:59:09:a5:93:40:49:4c:6a:3e:
9d:59:60:dc:c2:7e:48:f6:8c:71:0a:83:a4:93:63:
fc:c1:a1:b7:81:ea:ca:e7:a6:54:07:7f:41:08:86:
f5:83:fc:ee:ad:e2:df:b6:fe:a3:65:a4:97:49:42:
ae:96:a2:e3:95:64:20:c0:87:82:b2:9d:e0:6b:50:
59:4e:70:61:bc:37:b4:d1:25:ff:f2:3c:24:c4:84:
ff:b5:73:0c:90:fb:7b:58:53:6d:d6:1b:e2:e4:f0:
be:5d:e2:ca:0f:0d:e4:67:05:94:f6:de:42:fe:57:
97:14:61:f4:ee:9f:85:1d:98:9a:48:13:38:bd:54:
26:64:3b:4c:87:44:6a:33:d3:15:33:be:66:52:1a:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CB:11:97:FE:67:75:01:09:7D:EB:EC:E3:B5:9C:45:A6:4F:DB:E8
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/H8sRl_5ndQEJfevs47WcRaZP2-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.50.0/24
194.26.138.0/24
213.109.204.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1f:9c:bb:9d:e7:6e:0b:fe:63:d7:16:2f:f5:99:69:f3:3a:
5d:09:3f:c1:b3:d5:89:aa:7f:ed:16:d5:53:5d:3b:1b:c5:59:
ba:09:5d:c3:b2:e6:04:da:2a:28:68:48:fa:f5:49:d3:c9:cb:
ba:c9:40:c3:e1:a5:a9:0b:47:cc:69:12:37:54:2f:2a:6a:54:
55:eb:33:5d:b5:7b:69:57:77:0b:a5:2e:9d:2d:89:7d:da:7e:
90:90:1f:ab:a2:e6:72:3f:99:67:fc:a0:d9:cb:da:f8:29:76:
76:df:22:de:fb:36:b8:9b:b1:ac:45:ac:b5:1e:73:25:01:66:
2c:01:5a:c7:ee:49:3b:62:c8:cf:2a:2b:63:6d:73:92:8e:27:
b9:e0:19:f2:71:0d:3e:ba:22:94:76:3d:01:8d:0d:cd:a2:b2:
c0:7d:df:eb:6d:15:3f:03:ac:38:ec:a8:da:c9:85:4d:c8:d2:
67:32:2a:89:00:05:52:3d:3c:89:49:4d:ef:35:09:f3:9f:d5:
3c:e6:db:d0:3b:2f:70:9b:89:9b:92:68:80:84:1c:13:30:14:
0c:7b:05:0e:8f:fe:a8:e3:35:98:3d:aa:16:63:3e:47:82:52:
c7:28:0b:4d:5f:a4:c6:cc:45:bb:43:d8:2c:8e:e0:b6:a2:8d:
bc:37:71:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:30:39 2024 by rpki-client on console-fra.rpki-client.org