Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/f6xvo03puIhPAJ2hhPrcZ12TH6Y.roa
File: f6xvo03puIhPAJ2hhPrcZ12TH6Y.roa (raw, json)
Hash identifier: KeOGBayaf9pcnwjKEiAhedMi115XhQJLVdHtzMsk4n4=
Subject key identifier: 7F:AC:6F:A3:4D:E9:B8:88:4F:00:9D:A1:84:FA:DC:67:5D:93:1F:A6
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 018CC726FEC1563E113AA2B10AC7FC2DE792
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/f6xvo03puIhPAJ2hhPrcZ12TH6Y.roa
Signing time: Mon 01 Jan 2024 22:31:10 +0000
ROA not before: Mon 01 Jan 2024 22:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209047
IP address blocks: 45.9.33.0/24 maxlen: 24
45.9.32.0/24 maxlen: 24
45.9.35.0/24 maxlen: 24
45.9.32.0/22 maxlen: 22
45.9.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:fe:c1:56:3e:11:3a:a2:b1:0a:c7:fc:2d:e7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Jan 1 22:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fac6fa34de9b8884f009da184fadc675d931fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:57:92:0e:2e:bd:4d:7d:b5:4a:02:e0:61:
dc:67:c3:df:5e:db:a7:e5:15:51:4d:f5:14:22:be:
29:21:ee:2d:ae:73:4e:f5:2d:a0:bb:9c:9e:b1:40:
f2:e8:d8:c1:da:31:a0:66:9f:a0:1a:63:d6:93:4b:
b0:2d:01:e0:63:ee:24:32:8c:db:47:43:db:d3:72:
4e:32:68:a5:0e:a3:13:e0:74:0d:ee:bf:4f:5d:d4:
05:bb:c3:26:10:3b:e0:84:c4:ce:c9:f6:9a:ac:dd:
2c:09:ec:2a:a6:b2:9e:8f:fc:d8:8d:e8:ab:4b:dd:
10:ca:24:22:e9:0f:af:53:5a:b9:69:aa:8c:49:0e:
ef:79:22:83:8b:e9:66:59:e2:88:5e:73:01:32:9e:
c0:80:7e:41:8a:cf:84:9a:d8:f8:87:69:b4:8f:7c:
2b:15:64:a1:3c:c0:1d:da:3b:23:5b:be:c8:19:52:
71:26:ec:23:77:6f:02:d0:7e:21:fe:82:47:63:2f:
f3:4e:d6:a9:5c:d7:d3:ea:a1:90:f1:1c:38:18:f8:
af:bc:38:87:9b:f8:33:5a:0b:09:a8:62:e3:39:75:
cf:c5:c6:e5:ea:9a:32:17:4a:41:a0:31:f0:5f:2e:
11:ac:1b:4f:e2:af:e0:e3:b7:93:ae:d4:20:c5:9a:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:6F:A3:4D:E9:B8:88:4F:00:9D:A1:84:FA:DC:67:5D:93:1F:A6
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/f6xvo03puIhPAJ2hhPrcZ12TH6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:85:67:f4:be:ae:b0:79:ca:3c:56:b8:30:eb:5b:79:66:e1:
67:00:14:d8:d3:ea:5c:0b:b8:e4:29:17:32:94:d2:da:2c:8a:
53:e1:82:6b:9b:2b:c4:5e:74:a5:bd:a7:7f:da:75:91:06:35:
44:fd:a0:fc:61:be:d5:8f:86:bd:4c:e6:a4:62:32:06:ea:30:
59:ff:e1:60:14:f6:a8:d9:73:18:07:93:25:85:1c:8b:18:bd:
bb:34:08:ab:d7:a9:d6:fb:bb:36:54:91:ad:00:15:1f:8f:6b:
68:b1:db:1b:9c:74:04:18:e9:35:1e:05:ce:a7:11:89:09:0f:
1a:01:03:d6:9e:d6:f1:e0:a2:f6:dd:3f:01:d2:5d:de:1a:ca:
00:ef:21:c0:f7:fb:d1:0b:0b:bd:8a:8c:20:0a:ff:a2:ea:fb:
f2:b6:41:c8:4e:27:87:c2:37:b3:c7:98:e2:c3:55:dd:5e:ae:
49:11:69:82:19:a6:d0:3e:fc:83:b8:57:70:f1:24:60:c7:4e:
8b:17:c7:b7:bb:26:8f:b3:37:af:43:17:61:c7:69:b5:0d:ca:
d4:97:d8:06:8a:80:90:b7:f5:dc:8c:f9:bd:f1:54:b8:6b:2d:
13:86:bc:1a:64:a4:e9:14:02:81:a3:f6:2f:13:b2:03:f5:91:
04:ef:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:21:24 2024 by rpki-client on console-fra.rpki-client.org