Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/1FIbqtO3aW8novEaXJvYQVwGyWc.roa
File: 1FIbqtO3aW8novEaXJvYQVwGyWc.roa (raw, json)
Hash identifier: S/3SvlSXk5DuXS8X/TIAJioTM549z8K8Q6eZKQBRacc=
Subject key identifier: D4:52:1B:AA:D3:B7:69:6F:27:A2:F1:1A:5C:9B:D8:41:5C:06:C9:67
Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial: 018CC42543E316F632842DD152906A393AA9
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/1FIbqtO3aW8novEaXJvYQVwGyWc.roa
Signing time: Mon 01 Jan 2024 08:30:25 +0000
ROA not before: Mon 01 Jan 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200046
IP address blocks: 185.38.60.0/22 maxlen: 22
45.8.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:43:e3:16:f6:32:84:2d:d1:52:90:6a:39:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
Validity
Not Before: Jan 1 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4521baad3b7696f27a2f11a5c9bd8415c06c967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:c0:dc:f6:bb:64:ef:3a:42:a3:8c:ca:a7:
da:e5:7b:b9:c7:e7:dd:ca:a2:a6:5c:a0:f9:58:0d:
1b:3d:e8:b1:17:e1:b0:20:30:c8:1a:a4:63:0c:f4:
f4:5b:28:ba:cb:e4:54:f8:0b:3a:72:62:2a:5a:c9:
a5:46:4f:47:02:80:2e:54:9e:92:ea:f9:0b:1d:0b:
04:45:da:d0:4e:c9:14:d3:91:63:3f:f0:7b:35:17:
fe:d0:51:8e:d7:23:22:01:1f:7d:75:bf:c8:c1:9f:
db:34:fb:8d:b7:5d:cb:b7:74:cb:0a:02:32:3e:54:
92:ea:5f:66:8a:ac:e9:67:59:87:aa:8f:2d:de:84:
b1:ba:35:97:a3:ab:7c:bf:a9:84:ae:d0:8a:15:83:
52:13:1b:47:a1:9f:78:d6:11:73:5b:0c:7f:7d:7f:
b3:7c:7f:7a:6d:f1:2b:ab:15:da:a7:4c:fe:3e:3a:
18:84:af:9f:81:92:6e:9f:b9:d0:57:ee:0a:79:87:
5f:ae:c7:d9:c4:cb:ef:6a:a3:e6:ac:11:72:95:8a:
ca:34:8c:a5:7c:4b:0c:10:4d:98:95:0d:f6:bf:37:
50:8f:d7:d6:81:ec:35:87:47:39:a1:41:b6:fa:ff:
2a:45:8f:5d:25:3e:9a:33:5b:9e:30:d7:20:b5:b4:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:1B:AA:D3:B7:69:6F:27:A2:F1:1A:5C:9B:D8:41:5C:06:C9:67
X509v3 Authority Key Identifier:
keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/1FIbqtO3aW8novEaXJvYQVwGyWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.27.0/24
185.38.60.0/22
Signature Algorithm: sha256WithRSAEncryption
82:da:29:d6:a7:da:eb:18:ca:f1:79:9c:85:cd:d2:23:33:02:
18:41:a9:bf:17:ee:c4:e0:3a:3a:c4:6e:11:49:0e:3a:50:05:
2b:f1:66:22:06:33:3e:6a:4d:be:11:bf:64:39:e8:e0:ee:4c:
a3:e2:d2:5c:c3:70:ee:79:d5:ed:68:b7:ff:66:27:90:46:cd:
ed:62:f0:8e:44:35:ed:64:2f:ad:4b:ef:81:41:c7:5b:d4:96:
34:75:30:6e:3d:e4:13:62:06:5d:29:8b:80:8f:26:c0:8a:25:
2a:a8:2b:49:c6:93:84:85:2d:da:bf:c4:42:ac:54:ca:5f:c6:
93:b8:c7:8d:1d:a7:2d:f6:fb:78:d8:a9:66:c4:5e:c5:4f:60:
24:06:32:04:aa:0a:1f:17:9c:64:ac:06:22:5a:a4:68:c1:34:
2b:fa:5e:ad:56:8f:5b:c0:c3:fe:9d:7b:02:8e:c9:5c:b9:36:
08:03:c3:e7:0c:ce:34:b7:7a:b9:3c:fa:c4:9b:ae:e9:9a:fd:
28:f9:a4:3e:68:84:0e:44:3a:ac:65:ef:6a:97:0a:4d:b6:05:
1f:48:33:b1:62:b2:5b:a3:e5:50:54:49:b1:b3:0c:1a:67:0c:
19:61:27:21:3f:4b:3b:a4:b8:66:0f:3b:f5:08:1d:4f:c7:63:
6e:79:38:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:51 2024 by rpki-client on console-ams.rpki-client.org