Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/foRl78zfyTbC08937Kj14ikA4A8.roa
File: foRl78zfyTbC08937Kj14ikA4A8.roa (raw, json)
Hash identifier: yTKB9WkbUMgpsU+9JczO88SUTc6hNUw0VjFpvMmHcYg=
Subject key identifier: 7E:84:65:EF:CC:DF:C9:36:C2:D3:CF:77:EC:A8:F5:E2:29:00:E0:0F
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018CC79461AC26072134DBA5927A9FD7A7E7
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/foRl78zfyTbC08937Kj14ikA4A8.roa
Signing time: Tue 02 Jan 2024 00:30:39 +0000
ROA not before: Tue 02 Jan 2024 00:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26548
IP address blocks: 193.202.80.0/23 maxlen: 23
193.202.82.0/23 maxlen: 23
45.80.104.0/23 maxlen: 23
193.203.8.0/23 maxlen: 23
193.203.10.0/23 maxlen: 23
45.140.206.0/23 maxlen: 23
45.145.130.0/23 maxlen: 23
45.148.232.0/23 maxlen: 23
45.148.234.0/23 maxlen: 23
83.142.52.0/23 maxlen: 23
83.142.54.0/23 maxlen: 23
212.119.44.0/23 maxlen: 23
212.119.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:61:ac:26:07:21:34:db:a5:92:7a:9f:d7:a7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 00:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e8465efccdfc936c2d3cf77eca8f5e22900e00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:3f:dc:63:44:f0:38:dd:66:62:03:2e:df:
24:3b:72:a1:fc:17:85:6c:e0:3c:3e:2e:1a:1d:51:
ac:d4:0b:ea:24:11:f1:6d:f6:0a:0c:f0:52:61:41:
61:70:4d:71:be:2b:a1:e0:de:4a:3d:5c:ea:04:32:
29:37:7f:81:59:55:2d:02:26:74:cc:b8:5d:57:0c:
10:34:ac:ea:a0:2b:b0:85:ae:0e:93:00:ff:45:09:
d3:54:8e:f6:16:d4:a0:0a:14:23:42:66:c3:95:51:
e1:7f:57:e6:70:4d:0b:03:3d:3c:7a:f0:1b:03:4a:
5f:0d:f2:b0:58:fd:f8:a2:b9:50:08:9f:58:99:db:
6a:e3:20:db:2e:85:e4:a1:2c:e5:cd:2a:cd:30:25:
01:63:c8:eb:db:24:aa:ac:00:8e:63:57:f8:b6:33:
7c:94:ab:e4:86:4b:2d:b2:9a:25:81:e1:0a:db:b3:
c1:6b:1c:1a:b1:7f:23:f4:08:31:18:fb:af:05:97:
dd:4c:a6:cc:27:69:73:be:50:06:83:18:27:91:d5:
c0:5d:2b:a8:41:54:3e:b6:87:28:c1:7c:62:bd:03:
35:4f:3e:f3:9e:b5:8d:97:ce:8c:71:5a:32:35:48:
25:c0:b0:44:2c:ad:49:4f:66:18:2a:9c:12:b0:17:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:84:65:EF:CC:DF:C9:36:C2:D3:CF:77:EC:A8:F5:E2:29:00:E0:0F
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/foRl78zfyTbC08937Kj14ikA4A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.104.0/23
45.140.206.0/23
45.145.130.0/23
45.148.232.0/22
83.142.52.0/22
193.202.80.0/22
193.203.8.0/22
212.119.44.0/22
Signature Algorithm: sha256WithRSAEncryption
46:d3:d6:c6:8a:19:13:4f:ce:15:78:5b:11:f6:30:f5:f1:8a:
8b:40:5b:80:cb:aa:6d:8c:95:2e:b4:6f:88:b0:bc:60:66:04:
60:da:a7:f7:31:c5:f3:78:48:4f:4a:65:9d:63:b1:e5:9f:19:
62:55:78:37:6c:4a:63:46:7f:1c:a8:29:63:f7:5f:13:c3:29:
7c:58:1a:07:d9:8b:73:ea:c3:d8:c4:ad:c4:16:dd:c6:ef:dc:
72:7f:67:9b:d0:90:19:03:73:83:8a:93:dd:e3:c0:f1:34:93:
1e:99:11:ce:3d:e9:3c:2e:03:41:f9:69:d6:dc:37:82:f8:95:
af:59:61:57:8f:7a:78:ff:51:fc:8c:c9:94:bf:f1:d7:e3:54:
ed:24:25:68:91:90:7d:83:ed:49:59:73:aa:f6:c3:10:7c:dc:
d4:2b:a1:6a:4d:2d:2b:6b:11:90:4e:fc:2a:d7:c7:e6:09:43:
6e:a3:c5:d2:93:24:06:95:4e:1c:a0:c9:fc:f6:f9:7f:63:7c:
42:ff:d8:1f:b4:4c:2a:d8:df:72:d6:7b:0e:9d:18:d8:96:71:
34:9d:fc:71:61:8d:53:09:cb:24:ad:8f:8b:ac:87:ee:2b:be:
a8:fa:00:a6:eb:73:fe:dc:8a:4c:ee:a0:97:d8:e7:1d:65:58:
5f:ef:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:49:16 2024 by rpki-client on console-fra.rpki-client.org