Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/spWocLsF74Oo0n0aihXYzBxPZXs.roa
File: spWocLsF74Oo0n0aihXYzBxPZXs.roa (raw, json)
Hash identifier: kZ17gkgmdfh8BFudMhwee/lxWkrlyxVko/U4h8byuD4=
Subject key identifier: B2:95:A8:70:BB:05:EF:83:A8:D2:7D:1A:8A:15:D8:CC:1C:4F:65:7B
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 018CC94E1A158EBBD1F0A614B47CCAD87D25
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/spWocLsF74Oo0n0aihXYzBxPZXs.roa
Signing time: Tue 02 Jan 2024 08:33:08 +0000
ROA not before: Tue 02 Jan 2024 08:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12874
IP address blocks: 45.84.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1a:15:8e:bb:d1:f0:a6:14:b4:7c:ca:d8:7d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b295a870bb05ef83a8d27d1a8a15d8cc1c4f657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:86:28:da:ab:53:35:5d:e4:99:31:de:86:
ce:de:25:7e:58:e5:7d:fd:39:dc:bf:dc:19:76:57:
21:d3:b1:32:df:3a:14:d4:c2:ab:51:5f:4e:7e:9d:
e0:3d:79:e3:3b:de:61:98:f4:ee:36:ec:0a:0a:d3:
b8:24:62:98:f9:ed:3e:9d:ec:c6:75:2a:e4:36:14:
74:56:f0:50:44:89:02:51:c2:2f:a6:a2:0f:5f:f5:
e9:88:f4:24:3d:ec:d2:9c:b8:68:5c:c1:bb:cd:dd:
b1:34:cc:7c:9c:06:25:e8:9d:b7:65:41:8a:e0:c5:
49:83:26:aa:e5:8d:8d:b2:88:7c:85:e8:54:ba:43:
a5:ff:90:24:b4:2c:d5:fe:75:c0:a2:c2:4c:70:da:
2c:90:7a:c9:e4:f6:f0:c3:cf:e7:5a:86:91:a3:e0:
fe:8f:77:e5:2a:d4:60:13:fa:0b:0d:6b:24:b2:03:
b8:c9:d5:da:4e:be:f3:a4:3f:44:3e:27:8d:b1:0b:
07:cf:60:03:42:87:0b:12:b0:ca:03:e5:bc:97:49:
48:1c:bd:1f:44:9d:a3:cb:b7:2a:a2:0b:8d:23:dd:
9f:e2:16:71:9a:e8:a2:95:23:b6:e5:6b:f1:58:00:
fc:58:80:7f:4c:e3:18:15:02:d0:3b:5b:b5:80:ae:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:95:A8:70:BB:05:EF:83:A8:D2:7D:1A:8A:15:D8:CC:1C:4F:65:7B
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/spWocLsF74Oo0n0aihXYzBxPZXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.195.0/24
Signature Algorithm: sha256WithRSAEncryption
81:01:3a:02:f4:5e:e3:e4:c0:13:e3:a1:bb:a9:30:0d:90:cb:
f8:86:26:dd:f5:71:2a:3b:ec:c4:7d:ee:d1:7f:06:fd:06:47:
a7:57:43:5c:1b:f5:e0:50:00:3b:36:8d:d1:3c:03:a3:29:bc:
b6:c0:25:48:b9:c1:56:cc:bc:2b:f1:90:87:14:16:0a:7d:3f:
d4:4a:90:46:01:68:9b:a3:e3:6e:58:35:8d:cc:f1:a8:1c:ff:
f4:48:1c:7a:a2:a4:7a:35:4a:d8:f4:81:7c:67:36:7b:11:c9:
7d:33:0c:60:61:0b:24:fc:23:e0:8c:93:6b:31:e1:b1:ca:e7:
01:c1:42:73:5a:fe:3f:17:28:a4:f0:70:44:1a:f2:c0:fa:25:
c9:de:62:31:5d:8b:a6:e2:72:1a:41:3c:ef:98:54:8d:90:1a:
9d:6a:27:32:8e:b0:6b:02:7b:b1:21:3e:c6:15:9c:c9:5a:fa:
0b:87:7d:c3:57:33:7d:1f:18:10:bb:05:4c:9a:12:5a:fb:72:
f6:e2:44:65:bb:14:01:7a:89:9b:77:c1:b1:54:9f:5b:fa:7e:
17:bc:07:8b:78:d9:ec:fd:25:a6:68:e9:40:45:b7:76:73:f4:
c7:4f:0d:a7:fc:ec:48:09:98:be:e6:f4:c7:8b:56:95:af:20:
5d:3a:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:22 2024 by rpki-client on console-fra.rpki-client.org