Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/i8qP7Q5sFQjmPm2wvsWmiYcx8fc.roa
File: i8qP7Q5sFQjmPm2wvsWmiYcx8fc.roa (raw, json)
Hash identifier: Jlj9RcT6JfTxPI1D/juUCCbmuAGCKeClW5CAw6vV4NU=
Subject key identifier: 8B:CA:8F:ED:0E:6C:15:08:E6:3E:6D:B0:BE:C5:A6:89:87:31:F1:F7
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0192D1C84943DCB5B428486E214672FB2E7A
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/i8qP7Q5sFQjmPm2wvsWmiYcx8fc.roa
Signing time: Mon 28 Oct 2024 06:20:16 +0000
ROA not before: Mon 28 Oct 2024 06:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208959
IP address blocks: 45.15.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:c8:49:43:dc:b5:b4:28:48:6e:21:46:72:fb:2e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Oct 28 06:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bca8fed0e6c1508e63e6db0bec5a6898731f1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:4a:63:c5:34:8e:d9:7f:c3:99:2c:a5:35:
43:7c:a1:1e:ba:74:a4:f5:cf:1a:bc:30:18:e4:6a:
34:d7:a3:02:15:fe:cb:00:15:f1:1f:5a:90:a2:f1:
2e:06:d8:68:5e:11:97:9a:64:fc:2b:3e:52:2b:7f:
3a:8c:e1:41:ab:e4:d1:89:6d:da:f5:66:9d:e8:09:
41:b4:23:d3:28:26:e8:ab:7e:ed:f0:9b:e5:29:6e:
b4:ab:0b:49:1b:49:48:e7:4f:bc:31:20:c1:a0:24:
89:86:4c:30:ba:9b:bf:79:89:ee:af:17:76:0c:1e:
87:b8:9f:fa:b0:29:98:a1:51:f8:8a:96:09:87:a7:
c0:c8:1b:86:63:16:f7:49:b1:16:e3:b7:fa:b1:e7:
df:f9:5d:73:b8:86:7a:45:b0:d7:99:7d:07:dd:de:
e1:36:f4:e8:cc:31:8b:69:a7:8b:d7:cc:ad:04:0a:
40:45:c8:8d:e3:58:08:33:04:3f:c7:e3:3d:d5:10:
69:da:5e:50:f2:31:10:59:99:68:24:57:a9:36:8b:
cc:e8:4a:9b:d3:38:a2:0e:84:33:f5:50:6d:b4:7f:
72:c1:60:d2:94:f9:5f:ac:05:ce:51:0b:71:27:8c:
b6:b3:3c:d9:7a:4e:23:cf:59:23:a8:5c:2c:33:3a:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:8F:ED:0E:6C:15:08:E6:3E:6D:B0:BE:C5:A6:89:87:31:F1:F7
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/i8qP7Q5sFQjmPm2wvsWmiYcx8fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c3:1a:ed:08:12:99:44:ca:65:19:d4:27:2b:7d:63:f9:15:
93:33:80:a0:b7:cc:68:3c:2d:3a:97:14:24:05:b9:2e:36:48:
55:be:4e:ff:f3:6f:6d:55:0f:b6:61:9d:47:f0:ef:e9:21:56:
4d:9c:10:89:91:9d:69:3e:d2:53:06:22:be:01:4d:85:c3:22:
29:ce:e4:2b:be:00:f9:44:50:ab:5a:d3:99:c2:f0:3d:b6:be:
8d:db:23:b2:51:59:cc:c1:56:66:2c:8a:8b:dc:d5:d4:96:87:
3c:74:e4:6d:09:79:ff:85:88:e9:81:d4:ea:57:22:b3:7b:7a:
ea:27:4f:7c:4d:88:3e:a6:15:30:e5:84:ac:bd:50:81:86:e0:
e3:78:21:20:21:f1:1b:3e:cc:20:a9:f7:ef:bc:10:12:c2:91:
2f:f7:01:0c:af:46:8f:93:5d:24:fa:a3:b4:54:67:47:ae:df:
dd:a1:0b:af:00:15:78:8f:f4:b1:42:e6:13:02:11:a6:a1:ea:
c7:67:6d:67:a2:cd:ed:a6:ef:1f:4c:de:3a:6c:14:9f:cb:18:
57:28:3c:63:c5:d8:dc:15:26:08:fe:d6:42:d7:7c:5e:e1:a7:
a4:c5:bf:9f:da:f2:76:ba:09:a1:d0:33:1f:fb:3e:41:b4:cf:
d9:8e:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:45 2024 by rpki-client on console-fra.rpki-client.org