Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dTniicGpoRuThTZ6OxASv_yioIA.roa
File: dTniicGpoRuThTZ6OxASv_yioIA.roa (raw, json)
Hash identifier: jmndkyBYe7wZ4qXr7bsaADZGa/wXnjj+CRpq+6Ozl+w=
Subject key identifier: 75:39:E2:89:C1:A9:A1:1B:93:85:36:7A:3B:10:12:BF:FC:A2:A0:80
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018E2C87A2354B52975123B37408A9952FE2
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dTniicGpoRuThTZ6OxASv_yioIA.roa
Signing time: Mon 11 Mar 2024 08:01:10 +0000
ROA not before: Mon 11 Mar 2024 08:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206164
IP address blocks: 45.8.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:87:a2:35:4b:52:97:51:23:b3:74:08:a9:95:2f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Mar 11 08:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7539e289c1a9a11b9385367a3b1012bffca2a080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:4b:d7:28:07:b0:78:5f:38:6c:25:d7:ee:
bc:cd:48:57:e3:17:44:97:de:89:9c:44:f6:6e:fb:
e9:a8:47:07:91:c1:2e:4e:21:6d:44:37:60:cd:83:
0f:4c:0a:7e:96:61:6f:6b:50:0b:7f:26:cc:d3:9f:
bd:db:7c:b9:d9:89:1c:52:ad:af:69:9a:f9:e7:50:
4e:70:64:26:f3:de:84:93:a1:61:93:8a:3b:94:85:
a1:c7:8c:a1:9e:dd:a6:50:5d:a7:08:6e:e3:fa:14:
54:8b:6a:a9:e5:ed:10:70:29:a9:9b:2a:71:af:a9:
34:23:31:9a:44:ec:88:6c:c8:0e:59:f7:4c:4b:90:
f8:a1:07:23:11:df:f8:5d:50:79:55:78:ae:05:fa:
d7:bf:c8:5b:f1:40:54:f5:4c:0a:06:9a:5f:ab:fa:
e2:3c:62:fc:fe:26:87:50:83:3f:64:a1:ac:e3:16:
18:00:89:08:34:f0:43:9f:d3:59:d7:21:61:1e:9e:
72:83:b3:01:72:54:66:42:80:1f:5a:7a:e7:cf:f0:
43:ca:72:f0:b3:d7:71:6b:17:d1:41:83:7d:f3:b3:
17:e4:c9:0f:13:e9:f7:d4:e8:04:05:4c:87:ad:da:
f6:77:67:86:41:52:8b:f1:e5:83:06:3f:68:43:c0:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:39:E2:89:C1:A9:A1:1B:93:85:36:7A:3B:10:12:BF:FC:A2:A0:80
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dTniicGpoRuThTZ6OxASv_yioIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.18.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3c:1b:5b:55:b9:01:e3:ba:09:e7:d7:c4:0d:61:f4:fa:0e:
ab:cf:0d:b5:97:53:d1:cd:34:49:01:2d:a0:d0:28:6a:b6:ff:
2d:42:9e:16:f6:41:e6:68:bf:04:c1:5a:44:5a:61:00:82:e4:
0f:6e:f2:26:b3:7e:fa:ee:fe:41:4d:63:5f:f3:30:e9:7a:95:
76:fe:bf:0b:e7:8e:0b:dc:cc:3c:8c:bb:7b:65:d3:72:9b:bd:
af:8b:c6:92:38:1c:ad:29:9d:35:07:06:05:1d:38:48:21:54:
30:c0:55:62:51:10:f7:ec:22:b6:3f:c9:7a:36:ca:c1:ae:5b:
92:69:2d:5c:74:da:87:e7:0f:f4:de:39:57:15:55:db:0b:6b:
85:cb:f2:0e:52:03:db:55:81:39:fd:e2:1a:ea:9e:3a:cd:d7:
c2:ed:90:3a:70:26:1e:1d:8b:9a:3a:fb:e4:37:0d:ac:95:1d:
38:df:93:ca:97:15:65:04:74:9b:f3:0f:77:2d:e4:b1:2b:b9:
02:ec:ee:b5:2f:47:51:7a:7a:ef:e1:b4:1f:b2:b5:1e:fd:27:
a8:f2:f9:44:e0:a7:1e:38:6d:f5:da:9a:63:b0:d1:10:97:1d:
2b:6e:83:69:01:2a:4e:71:bf:49:5c:62:2e:a2:e1:aa:98:e8:
1d:9a:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:55:54 2024 by rpki-client on console-ams.rpki-client.org