Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Dv35v0OXG9-I7d3zjJmj90hw9v4.roa
File: Dv35v0OXG9-I7d3zjJmj90hw9v4.roa (raw, json)
Hash identifier: wo1j5uSxpgfhG8VhaoUo9TrIKoFJXddkw5IJ2RMsRa4=
Subject key identifier: 0E:FD:F9:BF:43:97:1B:DF:88:ED:DD:F3:8C:99:A3:F7:48:70:F6:FE
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018CC7948D93FF8E7C03AB9AD68FBD564E74
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Dv35v0OXG9-I7d3zjJmj90hw9v4.roa
Signing time: Tue 02 Jan 2024 00:30:50 +0000
ROA not before: Tue 02 Jan 2024 00:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 45.8.24.0/24 maxlen: 24
45.8.25.0/24 maxlen: 24
2a0e:4201::/32 maxlen: 48
2a0e:4202::/32 maxlen: 48
2a0e:4205::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:8d:93:ff:8e:7c:03:ab:9a:d6:8f:bd:56:4e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 2 00:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0efdf9bf43971bdf88edddf38c99a3f74870f6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:cf:8e:ea:48:49:7a:31:cd:0a:55:f5:dd:
82:be:ef:27:b1:42:9a:56:d6:bd:9b:3f:3a:cb:5d:
d3:83:74:4f:52:bc:ea:de:77:f4:09:b9:80:45:c2:
4c:a9:40:df:0a:d6:0d:b8:5d:38:ac:ee:43:99:6f:
3b:7f:85:96:50:af:86:c1:b3:c1:60:b4:63:b0:2a:
7f:28:72:fb:20:a4:41:dd:4c:cd:23:25:e5:3a:54:
a4:ac:66:13:f7:57:72:30:33:6d:82:d3:0b:81:d9:
c3:de:ad:5e:18:35:3a:f7:27:6d:8a:63:04:ea:36:
8f:c9:47:da:f3:31:fe:66:1c:80:d7:22:0a:46:e2:
ad:60:e1:b5:67:d3:d5:3f:b3:50:11:9b:d3:f8:26:
48:ef:97:82:82:3d:d0:d4:7f:97:7a:8b:d9:6c:ec:
03:86:d9:33:ec:28:1a:6d:91:df:89:14:b4:94:bc:
5b:b3:ea:48:ad:3b:2b:49:88:6a:56:0a:13:75:6b:
1a:dd:a5:ae:e5:2c:63:10:a3:17:06:67:11:63:09:
ee:12:d5:13:6f:01:76:6a:d7:f1:e7:4b:6a:79:ba:
e1:6d:5e:7a:f3:09:1d:71:fb:09:39:a1:3d:24:24:
e0:e3:75:1a:3a:72:98:98:29:0e:ba:18:44:81:16:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:F9:BF:43:97:1B:DF:88:ED:DD:F3:8C:99:A3:F7:48:70:F6:FE
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Dv35v0OXG9-I7d3zjJmj90hw9v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.24.0/23
IPv6:
2a0e:4201::-2a0e:4202:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:4205::/32
Signature Algorithm: sha256WithRSAEncryption
97:e4:80:f7:78:73:c4:2e:cf:eb:20:9a:9b:18:58:8f:5a:57:
a4:1d:6d:77:06:7e:d4:05:8d:80:c4:70:44:fe:31:76:14:57:
8c:35:a9:0a:5a:10:45:14:f2:9e:36:b9:c6:53:82:ef:67:51:
a9:04:41:37:e2:87:cc:3f:31:91:08:73:2f:a9:c2:a4:b2:1c:
c8:46:31:b4:39:db:fd:bd:33:c4:b7:34:88:1c:66:b6:d6:71:
e3:73:ef:cb:dc:aa:fa:86:59:89:c4:ff:ec:2a:6f:45:5e:72:
8b:89:10:27:f8:5b:d9:a3:ab:02:9d:e8:f4:73:12:35:3f:3e:
06:6e:3a:a0:a5:2b:6a:d3:7b:86:f3:30:61:11:43:97:18:0e:
9d:b4:c8:55:69:88:23:51:97:89:ed:0c:00:5d:71:0d:32:03:
52:ee:c9:38:89:ab:f7:8f:8e:ac:a5:00:e3:00:a2:4c:19:95:
5d:e0:9e:95:8c:a7:fe:fa:8f:98:c1:54:9d:76:9b:95:7e:18:
69:7c:e5:54:b5:22:50:5d:57:00:51:08:30:49:53:71:56:5b:
59:90:f8:c9:de:97:3f:48:8e:b9:66:3b:65:25:43:d5:b9:49:
ae:4c:13:ae:0c:0f:9f:96:be:5b:82:27:ad:f5:06:43:b4:83:
71:9d:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:18:54 2024 by rpki-client on console-fra.rpki-client.org