Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/8akYZ6Bwmawm402BBT9dDQWwjuM.roa
File: 8akYZ6Bwmawm402BBT9dDQWwjuM.roa (raw, json)
Hash identifier: sd4cHZz+ykC4BkcX5erHTa1uLXy+P1cgLKgjh4huPgA=
Subject key identifier: F1:A9:18:67:A0:70:99:AC:26:E3:4D:81:05:3F:5D:0D:05:B0:8E:E3
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 018CC7942F0123EACD6CFE3F9D7BD761829F
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/8akYZ6Bwmawm402BBT9dDQWwjuM.roa
Signing time: Tue 02 Jan 2024 00:30:26 +0000
ROA not before: Tue 02 Jan 2024 00:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209015
IP address blocks: 45.10.201.0/24 maxlen: 24
45.10.200.0/24 maxlen: 24
45.10.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:2f:01:23:ea:cd:6c:fe:3f:9d:7b:d7:61:82:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Jan 2 00:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a91867a07099ac26e34d81053f5d0d05b08ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:e8:b1:c2:c4:9d:14:c8:8e:7e:23:7c:4f:
7d:fe:99:6b:d5:e5:59:56:40:f9:3e:71:56:6a:c7:
fb:35:23:3e:15:eb:e0:5e:0f:bd:ad:14:46:c7:e1:
5d:f4:11:4d:35:32:10:86:db:f7:6a:69:a7:f4:7d:
b0:2b:88:2b:15:e8:b5:0b:5e:84:f6:6e:0e:ad:99:
61:be:5d:41:74:2d:f5:57:50:b2:7c:12:05:c1:b0:
9a:0f:7b:de:f5:78:c5:ff:b3:e2:87:2c:ae:ea:64:
8b:56:58:2e:44:28:8e:9a:38:66:3b:88:7b:16:c3:
3c:6a:20:05:9c:d1:a3:f7:7c:a6:7d:f6:e4:7c:d8:
be:d7:2b:4a:f3:42:0a:20:3b:75:70:e6:39:28:0b:
f6:85:75:99:97:d4:2a:6c:a4:00:c9:af:3e:6d:76:
49:da:ce:5c:2a:26:ff:3f:ef:92:d4:3c:39:f9:5a:
ce:a6:83:5a:46:51:f9:90:22:cc:51:4f:3a:42:ad:
75:81:4b:40:8a:67:39:33:42:86:20:a2:d6:fc:84:
ba:5d:f7:b2:d7:4f:f0:63:54:63:04:c3:72:bf:ec:
48:d3:d9:88:df:65:cd:f1:5d:c0:1f:b3:03:3a:46:
62:41:6d:bf:dc:e8:ec:98:0c:b3:fe:44:4e:f0:b3:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:18:67:A0:70:99:AC:26:E3:4D:81:05:3F:5D:0D:05:B0:8E:E3
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/8akYZ6Bwmawm402BBT9dDQWwjuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.200.0/23
45.10.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:3b:e5:c1:27:0f:bc:05:dc:c7:bc:61:64:b5:d7:65:ac:dd:
e4:f2:10:b6:b9:ca:60:63:06:d4:d0:49:11:75:e8:98:23:6c:
9a:46:b9:a9:23:7d:d5:c9:12:eb:91:6e:32:b3:35:88:f4:09:
d2:a9:c4:08:91:af:21:a8:13:75:0f:4f:10:75:be:be:9c:8e:
d7:00:03:11:e9:89:6a:db:6d:b2:2a:bd:97:5a:93:1b:f6:ed:
91:fa:36:b6:ce:ee:3f:29:a4:2f:28:7a:71:a5:76:16:9c:29:
a1:8e:f4:a2:2d:3f:5a:c9:1a:62:b6:74:d6:36:ae:79:5f:bb:
c9:fa:ff:15:1e:77:ea:5f:d0:dd:ad:11:98:6d:67:37:68:04:
d8:44:0a:d0:04:06:d1:9a:e6:5c:86:05:cc:e0:fd:a4:3b:0f:
09:6f:ab:bd:9c:9c:a3:c9:a9:37:0b:eb:01:74:55:9e:92:b4:
ca:13:3b:06:f2:26:ba:84:8d:e6:ff:a4:ff:c9:4f:ed:68:d8:
41:be:0f:60:cf:00:59:1f:e3:4e:74:c9:4e:6b:14:8a:ce:21:
9a:69:ae:72:74:2d:07:7f:be:a1:f3:da:48:c4:ed:54:da:bf:
a9:f3:ea:7b:09:10:6f:d2:94:46:ae:ee:c5:b1:79:79:0e:34:
7c:5c:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:07:11 2024 by rpki-client on console-fra.rpki-client.org