Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8N1cW_CkX5LbuNZbwlyZxLpMLnM.roa
File: 8N1cW_CkX5LbuNZbwlyZxLpMLnM.roa (raw, json)
Hash identifier: X8vBahQP50v3g5YgzzZdfgLFRIc2vVQuauUcnDe4MqU=
Subject key identifier: F0:DD:5C:5B:F0:A4:5F:92:DB:B8:D6:5B:C2:5C:99:C4:BA:4C:2E:73
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC7942595F04E4057571FF4BF45F0AC48
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8N1cW_CkX5LbuNZbwlyZxLpMLnM.roa
Signing time: Tue 02 Jan 2024 00:30:24 +0000
ROA not before: Tue 02 Jan 2024 00:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212999
IP address blocks: 95.182.104.0/22 maxlen: 24
46.8.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:25:95:f0:4e:40:57:57:1f:f4:bf:45:f0:ac:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0dd5c5bf0a45f92dbb8d65bc25c99c4ba4c2e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:74:1a:48:13:a3:92:32:21:4b:2b:a9:a0:
76:5a:c0:e4:90:5d:75:4d:18:42:ea:bb:26:4d:34:
b4:29:c2:4f:60:6b:44:4a:ad:d1:17:5d:83:d6:0b:
00:e0:47:3f:d9:21:7e:20:e0:da:67:f7:aa:5a:6c:
91:55:38:f1:e8:f7:07:2c:53:0b:b8:3a:0e:c3:3c:
6d:54:cc:d7:f3:70:da:57:87:2c:38:33:b7:50:2e:
26:48:55:1a:87:95:69:ff:5a:b0:89:18:6e:8c:a7:
07:71:5e:32:4d:cd:28:d8:74:68:e0:dc:4b:fb:f1:
aa:72:6b:74:a9:8e:5f:aa:28:f4:23:b0:1c:8f:9e:
89:17:56:99:38:06:cf:2e:74:b2:1c:67:03:ed:80:
4a:4b:8b:35:df:22:17:8f:46:30:7d:95:59:b2:03:
57:3e:07:87:f1:6c:a9:63:3a:14:ff:80:59:91:19:
f1:43:31:3a:20:73:88:a0:e4:ca:27:d0:f7:d9:cb:
87:68:b1:1b:ee:0e:6e:e9:9c:4e:ec:4c:0e:2d:1a:
9c:06:e8:51:5a:fc:ae:35:87:ca:82:d2:55:cc:d4:
d0:38:b6:b5:f2:ba:b9:79:fb:f3:6b:ed:a6:dc:c2:
da:1f:7e:8d:89:73:ec:2a:b7:27:70:68:3a:3e:2c:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DD:5C:5B:F0:A4:5F:92:DB:B8:D6:5B:C2:5C:99:C4:BA:4C:2E:73
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8N1cW_CkX5LbuNZbwlyZxLpMLnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.150.0/24
95.182.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:f8:5a:89:ac:2c:39:3c:ec:fd:26:9c:28:4c:52:27:6c:e4:
40:f2:a9:ab:24:0f:36:82:27:aa:6a:7c:70:f2:32:1b:51:b2:
56:96:16:6d:45:61:22:00:36:6b:18:74:74:c8:44:e4:7e:d1:
dc:6e:48:3f:3e:8a:8a:fe:31:41:16:12:4b:f0:e6:38:26:1a:
66:9b:15:1e:91:02:43:96:0c:30:55:ef:ef:c1:18:dc:f9:55:
9d:75:08:16:69:40:26:e6:1f:c0:fa:2e:b0:cb:c5:f8:ad:fb:
bd:e5:e9:98:42:d9:78:8e:70:5a:45:97:1b:5d:8b:9c:1a:63:
3c:ee:66:65:6d:88:b3:34:1e:51:b3:33:c5:7e:1b:a3:76:74:
f7:51:5c:d4:71:0f:c3:b5:f5:90:36:aa:08:1c:93:ab:7a:a2:
c7:c0:39:66:f6:ce:24:1f:d4:be:60:b2:ec:eb:91:2f:2f:6c:
97:0b:02:cf:68:a7:85:11:7d:41:02:ec:d4:24:11:51:f4:b7:
4a:56:de:97:72:b2:c3:19:ed:1e:38:1f:d9:f3:7f:fe:1e:05:
60:a5:e6:fc:e2:c4:85:1e:e8:56:71:6c:31:10:cf:d6:ee:2d:
40:f2:92:8d:c4:23:79:45:53:45:6e:25:04:1b:a3:ae:7a:a3:
65:83:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:42 2024 by rpki-client on console-fra.rpki-client.org