Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8WSyoxL5DU4gvbIH0Fd2MY6rc_E.roa
File: 8WSyoxL5DU4gvbIH0Fd2MY6rc_E.roa (raw, json)
Hash identifier: JUApI8QDyBesodKb4x994uQCgpL/xrqBFahgo1KR5SE=
Subject key identifier: F1:64:B2:A3:12:F9:0D:4E:20:BD:B2:07:D0:57:76:31:8E:AB:73:F1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01943C997B0EA3CE763200E1953D91BA39AC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8WSyoxL5DU4gvbIH0Fd2MY6rc_E.roa
Signing time: Mon 06 Jan 2025 17:11:19 +0000
ROA not before: Mon 06 Jan 2025 17:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214114
IP address blocks: 45.144.173.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:99:7b:0e:a3:ce:76:32:00:e1:95:3d:91:ba:39:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 6 17:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f164b2a312f90d4e20bdb207d05776318eab73f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ae:ef:9a:5a:b2:5a:cd:7a:05:27:e6:f9:13:
f0:98:a3:d5:0d:18:6b:a3:a1:49:73:68:e9:8e:e0:
b3:89:e4:11:ef:b7:59:88:13:0b:d7:cc:a9:6d:24:
bc:3b:05:3d:b2:4c:77:89:dc:b7:3d:af:96:20:a3:
05:86:9e:95:47:ad:56:14:45:a3:53:82:1c:2e:c8:
9b:44:4f:d6:33:99:0d:cb:35:f3:f3:46:ab:ba:36:
bd:13:28:ea:f1:5a:63:f7:46:c0:f5:be:63:0e:7e:
73:1c:fa:71:42:22:78:86:80:c9:f6:16:10:6a:00:
50:84:d3:ad:25:f5:a7:7d:12:5b:cb:7c:92:59:53:
d1:fa:93:e7:a7:8a:6a:ab:c4:c1:0d:98:ef:d2:c2:
6a:2d:93:e8:0c:5a:d5:3f:c6:69:32:e4:78:91:9f:
24:13:bf:55:6e:e6:2e:22:e6:ac:31:39:25:84:c7:
bd:6d:e1:43:99:d3:31:a5:89:f1:9f:5d:d0:f3:9d:
98:99:26:90:13:07:df:6a:e4:b7:89:16:38:de:41:
10:93:a4:a6:40:29:51:39:50:5c:bd:c3:dd:a8:a2:
9b:1d:fc:f7:4e:bb:c9:59:86:2f:26:f8:f4:c8:a7:
3c:70:5e:77:01:7d:3a:3b:e6:37:20:0a:40:cf:9e:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:B2:A3:12:F9:0D:4E:20:BD:B2:07:D0:57:76:31:8E:AB:73:F1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8WSyoxL5DU4gvbIH0Fd2MY6rc_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.173.0/24
46.102.237.0/24
188.208.103.0/24
212.192.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c3:4b:a2:d7:1b:12:49:c3:dd:6c:9d:ac:01:6e:a9:c7:82:
43:6b:26:50:22:62:31:8b:86:ce:6f:c4:53:e8:4b:73:66:1d:
13:27:13:1b:fd:65:bf:6f:9e:0f:c6:cc:0a:c2:2a:44:08:d9:
e9:26:cc:73:4e:2c:17:e5:77:31:23:5b:bc:d7:74:3b:c0:58:
ca:0e:72:e4:28:c5:3a:50:79:50:67:9b:6b:5c:5b:5f:d5:73:
f5:4e:58:e4:c6:45:c2:55:1c:29:62:9e:01:4c:a1:24:ac:25:
f7:ef:9c:04:eb:20:61:53:ca:69:ae:7c:eb:f7:33:c0:1b:82:
68:30:1d:c9:cc:88:bd:10:83:ab:11:79:38:09:20:02:6e:4a:
9c:e2:41:f2:7c:85:95:10:a4:45:07:47:c5:0d:b0:cc:11:6e:
dc:0a:9e:4c:a4:8f:a7:eb:67:ec:b0:3b:de:98:b5:9e:78:04:
33:dc:fb:6c:00:4a:2f:b8:94:f2:be:17:08:70:6d:23:ed:87:
42:40:eb:c4:ec:de:5b:71:93:c1:a6:10:8e:2b:bf:5f:4f:08:
f8:13:d2:18:69:65:c0:63:54:33:85:d8:2f:f3:b8:4a:d1:40:
c4:3c:47:cf:af:a5:d0:e9:86:82:cb:b0:e3:d1:20:22:9e:dc:
cf:8d:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:46:45 2025 by rpki-client