Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Rdi1nQUpisxRTT_Y6DIP6VZa--4.roa
File: Rdi1nQUpisxRTT_Y6DIP6VZa--4.roa (raw, json)
Hash identifier: gUgogu2p0oe2gMTKmz/b2yyh7O6LqtQ3n0+ncfDpiHU=
Subject key identifier: 45:D8:B5:9D:05:29:8A:CC:51:4D:3F:D8:E8:32:0F:E9:56:5A:FB:EE
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 018CC801F3A8221BC9E06F7F94BB73E3996A
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Rdi1nQUpisxRTT_Y6DIP6VZa--4.roa
Signing time: Tue 02 Jan 2024 02:30:20 +0000
ROA not before: Tue 02 Jan 2024 02:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212430
IP address blocks: 109.69.217.16/28 maxlen: 32
109.69.221.192/28 maxlen: 32
87.238.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f3:a8:22:1b:c9:e0:6f:7f:94:bb:73:e3:99:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 2 02:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d8b59d05298acc514d3fd8e8320fe9565afbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:db:ef:27:74:62:fb:30:80:ae:a8:dd:c8:
53:d5:54:33:f4:22:f7:25:cf:d9:36:79:ee:d9:fe:
d7:b1:07:ac:e7:5f:36:b1:51:cc:c3:38:09:c3:13:
e8:f1:36:13:6c:d0:13:3a:9b:76:1e:cc:9d:f8:2e:
8c:0b:1f:0a:e2:22:9e:20:b0:83:d2:2a:d0:9b:0a:
f3:6c:ed:96:e3:d0:a6:a4:7b:76:36:3a:cb:d0:be:
90:3c:14:3a:4b:ff:c5:e6:f3:b0:0a:ae:e6:db:e0:
58:05:c1:77:bb:92:69:00:83:b4:c6:54:4f:04:b2:
b1:9d:30:ef:1d:d3:76:d8:a4:73:1f:f6:ac:4c:c2:
a0:92:e2:13:ac:d1:79:11:12:4e:c9:c5:95:b8:d7:
73:5d:77:9d:fe:bb:37:cc:04:d9:12:e3:fb:9c:68:
38:a8:4a:60:f9:bc:79:cf:2c:7a:bb:95:48:b5:f9:
a2:88:65:bc:a4:5b:d4:81:67:82:0e:80:6a:e6:d2:
e7:08:41:a3:71:5e:8a:5f:54:85:f4:5a:26:5d:b6:
88:f0:39:d7:d2:0f:f3:5c:b2:07:a4:9a:83:aa:76:
32:68:0d:7f:dd:7f:3c:5b:dc:d8:9c:1d:0b:f6:f2:
48:28:9c:db:a9:36:68:b7:ea:9d:21:b6:b9:1a:51:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D8:B5:9D:05:29:8A:CC:51:4D:3F:D8:E8:32:0F:E9:56:5A:FB:EE
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/Rdi1nQUpisxRTT_Y6DIP6VZa--4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.227.0/24
109.69.217.16/28
109.69.221.192/28
Signature Algorithm: sha256WithRSAEncryption
23:3c:09:17:15:f2:90:1a:87:b0:84:49:47:96:4b:98:28:75:
76:88:b4:08:7c:d8:b6:42:bf:c0:03:53:9a:2e:d1:9a:34:10:
64:ba:73:7f:cd:a0:23:00:19:94:f2:f4:3e:0e:67:c1:22:e1:
29:b2:2b:f3:5e:34:6f:ff:cf:bf:c0:36:13:06:29:57:9d:e2:
de:5f:61:f2:23:85:51:7f:c7:e7:d5:d3:85:ad:98:d1:dc:9f:
7f:56:8d:49:1e:c3:e6:e2:ef:08:83:de:6e:cf:cd:09:49:ad:
63:07:dc:f5:50:ab:5e:8f:d2:93:e0:7f:26:01:01:45:a1:8a:
02:ce:55:6b:db:49:32:0f:e9:25:86:f2:81:11:e4:18:45:d5:
b8:6f:8d:75:d0:fb:44:6a:31:e3:cb:ce:b7:47:d1:b3:f6:25:
2e:97:33:1d:e0:88:3c:30:89:9a:69:e6:35:72:74:29:54:2e:
ad:16:22:1f:3e:c8:be:c5:a9:82:e9:1d:e8:97:82:75:e0:c5:
bd:bf:ac:ce:e3:3a:28:ab:ec:b7:4e:7f:ca:9d:3c:16:41:e6:
b4:48:69:f3:3b:98:02:d8:be:a5:95:84:25:3a:18:21:d0:77:
fd:27:c5:4f:f2:a6:54:0a:4e:86:db:c9:18:ef:09:31:97:08:
ca:6a:dd:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:50:04 2024 by rpki-client on console-ams.rpki-client.org