Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/sDPcqTvVOWqccXz-3RAkC0doyYI.roa
File: sDPcqTvVOWqccXz-3RAkC0doyYI.roa (raw, json)
Hash identifier: d0oGT14WFiwu9CID0k/bAyEaOnmkb6kS+0lCn19uT4c=
Subject key identifier: B0:33:DC:A9:3B:D5:39:6A:9C:71:7C:FE:DD:10:24:0B:47:68:C9:82
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 018CC94E1A72E8C6937D4BE90C4F1D01C181
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/sDPcqTvVOWqccXz-3RAkC0doyYI.roa
Signing time: Tue 02 Jan 2024 08:33:08 +0000
ROA not before: Tue 02 Jan 2024 08:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46873
IP address blocks: 45.84.192.0/24 maxlen: 24
45.84.193.0/24 maxlen: 24
45.84.194.0/24 maxlen: 24
45.84.195.0/24 maxlen: 24
45.153.109.0/24 maxlen: 24
45.153.110.0/24 maxlen: 24
45.153.111.0/24 maxlen: 24
45.153.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1a:72:e8:c6:93:7d:4b:e9:0c:4f:1d:01:c1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b033dca93bd5396a9c717cfedd10240b4768c982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:6b:0f:65:bb:60:21:01:8a:43:da:4b:2c:
03:5a:95:99:0f:d3:ff:d7:c1:70:31:4a:90:ea:e9:
2e:e5:0d:fa:bd:62:b0:86:b1:54:d4:cf:5f:9e:99:
14:87:19:60:ff:7f:d1:ed:97:e4:2a:06:ce:81:a2:
a9:34:ea:02:1a:c3:30:74:05:5e:79:db:b9:0c:3e:
b7:23:0e:d8:69:05:67:55:ec:87:fb:a4:d2:d8:61:
48:7f:6b:3d:ef:d9:b8:e2:c3:5a:15:34:2e:48:b2:
90:10:d5:1c:83:d6:0d:59:2f:27:45:41:11:9f:f5:
e9:0a:b7:86:23:3e:5c:56:fc:b5:c6:b2:52:c7:38:
71:5d:60:2d:79:bf:52:77:96:7d:cc:00:0d:0a:18:
0d:b9:16:93:29:b3:4b:f4:e5:9d:eb:76:84:86:b5:
42:92:fa:d9:51:13:77:14:cf:d1:29:a9:82:2f:e8:
3e:7a:34:c6:a5:8d:f2:4c:16:07:8a:ac:f4:29:2c:
5c:da:02:06:1a:29:35:2d:fd:bf:7a:a8:c3:28:0b:
b0:99:bc:7f:6e:60:6c:86:93:81:a8:0a:f3:3b:a1:
4c:18:e3:42:9f:91:55:7d:dc:34:d7:25:1f:e3:2a:
a8:c1:92:fb:4e:a3:37:da:84:75:b9:bd:78:b4:af:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:33:DC:A9:3B:D5:39:6A:9C:71:7C:FE:DD:10:24:0B:47:68:C9:82
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/sDPcqTvVOWqccXz-3RAkC0doyYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.192.0/22
45.153.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:26:ab:0b:89:f2:33:3f:b5:b4:9b:f4:67:5e:50:ac:25:4e:
3e:39:79:96:62:72:e1:c5:61:16:cd:49:df:66:25:16:c4:7c:
b9:9c:30:bd:35:d8:59:43:a2:2c:13:e9:aa:10:2a:a3:04:8e:
97:dd:53:1e:f3:10:e1:ec:2a:de:3e:46:a9:b2:14:5d:83:95:
a6:2e:d8:03:72:ad:8a:83:41:18:cd:52:09:93:5e:23:59:35:
d5:a5:e6:37:24:dd:01:be:ae:74:59:d8:ef:23:89:8f:26:8a:
52:85:96:0e:30:31:0d:57:42:42:08:bb:5e:dd:e2:0d:a9:fa:
f4:71:28:c9:f1:d9:d0:cd:7f:ff:c7:09:b5:70:fc:ea:79:0c:
0d:cf:35:0f:f9:fc:4b:ee:af:4c:40:70:2e:ab:d9:0a:3e:66:
da:0b:f4:0b:74:40:3e:a9:ce:27:fc:ef:46:d6:0c:61:21:7d:
3e:7b:b4:75:b2:6f:c4:ba:63:e2:e0:cb:66:a3:b0:f4:ff:54:
b7:29:45:0d:e1:39:6f:ff:f8:81:14:b1:c0:14:24:4d:46:30:
75:a8:1a:96:86:38:a4:35:60:b4:1a:7f:37:e6:55:3b:81:05:
e5:88:62:39:a7:f4:04:ff:37:54:f1:fe:0b:6e:ec:03:bc:62:
09:19:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:41:03 2024 by rpki-client on console-ams.rpki-client.org