Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/jg08wEsXQ225GyfhVbbL0lj2dro.roa
File: jg08wEsXQ225GyfhVbbL0lj2dro.roa (raw, json)
Hash identifier: ETn+vqNcyYMPwZSk1mN1U7+a7en6NExuJihUnB/gXv4=
Subject key identifier: 8E:0D:3C:C0:4B:17:43:6D:B9:1B:27:E1:55:B6:CB:D2:58:F6:76:BA
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 018CCA2A1CF18871313C7ED7F879CC62D364
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/jg08wEsXQ225GyfhVbbL0lj2dro.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58145
IP address blocks: 45.157.8.0/22 maxlen: 22
2a0f:3780::/32 maxlen: 32
2a0f:3780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1c:f1:88:71:31:3c:7e:d7:f8:79:cc:62:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e0d3cc04b17436db91b27e155b6cbd258f676ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:39:de:a3:82:94:91:5a:d9:3e:99:da:2c:
69:61:ad:f2:05:28:7d:c2:ea:d5:82:dc:14:32:08:
3b:73:f9:92:cf:e4:5d:df:48:14:48:05:cc:7e:21:
a3:53:0c:85:49:4a:3c:13:d1:fd:5c:21:25:f2:34:
7a:48:0e:c7:e8:61:1a:a5:bc:fc:96:a9:25:98:4c:
92:69:7d:26:66:7e:0f:45:6f:f2:11:74:04:60:e3:
13:df:37:85:2f:1d:08:12:1e:e8:7c:52:2a:25:cc:
57:35:0c:41:41:76:78:51:e4:5f:a3:ef:3e:ea:7a:
6c:e5:49:49:58:37:72:1a:da:f2:6a:77:5d:2e:fa:
8c:0e:7a:0f:48:f5:42:ed:5e:6f:8c:18:d2:bc:38:
35:0e:0e:b7:8e:5f:fa:03:bb:da:9f:1e:44:03:55:
c4:75:d6:65:57:c9:bf:f6:df:86:b4:62:b3:ba:23:
b2:c7:23:b1:4a:c2:c2:dc:80:c5:46:7c:14:54:72:
55:3d:e4:e2:ec:fd:fa:1f:80:3d:5d:b9:80:92:eb:
47:08:bc:0b:6b:26:9a:b8:ad:fb:d0:c0:65:3d:e2:
2d:ef:bc:f9:c8:be:96:10:7f:0d:de:a1:df:3e:cf:
c6:45:52:6e:29:7c:72:f8:7a:bb:82:85:20:ce:03:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0D:3C:C0:4B:17:43:6D:B9:1B:27:E1:55:B6:CB:D2:58:F6:76:BA
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/jg08wEsXQ225GyfhVbbL0lj2dro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.8.0/22
IPv6:
2a0f:3780::/29
Signature Algorithm: sha256WithRSAEncryption
b2:a0:75:11:e6:18:65:41:ab:67:2c:ea:44:d8:8f:5e:71:4d:
b0:38:57:69:a7:48:a1:2e:d4:60:bc:96:9f:53:56:47:e0:a6:
0d:44:0a:84:14:73:87:cc:b9:0f:cd:97:8e:5b:84:11:42:49:
b3:a8:8d:d6:78:01:e1:e3:1c:b2:e0:b4:8e:ea:aa:88:c0:ff:
b8:20:62:b1:ef:0a:08:69:30:98:de:f8:dd:52:79:fe:ca:70:
0a:ae:3d:16:81:a6:2e:3d:f3:5f:f8:45:3c:51:1c:a6:76:2b:
18:6c:f2:dd:a9:5d:a5:6e:11:e4:a6:80:3b:69:76:44:06:11:
ba:1d:09:0c:4f:83:13:73:40:17:a3:bd:c5:da:1b:45:5e:ce:
86:92:4e:5b:79:71:10:ba:7d:2b:61:e6:b4:bc:99:68:82:77:
ec:f6:9f:18:f3:34:41:31:dd:97:ab:4f:ac:ae:08:1f:7e:2d:
43:4c:c7:18:a4:b9:a6:99:ca:82:63:07:4f:34:45:8d:25:8a:
43:5d:47:fd:16:24:97:90:b3:4b:bf:41:e7:aa:ed:4e:64:1f:
33:fc:6d:80:ba:be:d2:04:41:c7:cf:59:41:60:d9:fa:59:f6:
05:65:24:7c:26:3c:b8:d0:57:62:4e:4c:2f:73:56:bd:73:90:
93:10:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:15:14 2024 by rpki-client on console-fra.rpki-client.org