Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/K8P39abPUf4Sk_iJlQyfynXHtL4.roa
File: K8P39abPUf4Sk_iJlQyfynXHtL4.roa (raw, json)
Hash identifier: oi+/6cjYblnfDm/cP5PmRHTCRXNAKEAG+LTl6i+6ME8=
Subject key identifier: 2B:C3:F7:F5:A6:CF:51:FE:12:93:F8:89:95:0C:9F:CA:75:C7:B4:BE
Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial: 018CC7954B75B1A3758AB6FAECA7577329B2
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/K8P39abPUf4Sk_iJlQyfynXHtL4.roa
Signing time: Tue 02 Jan 2024 00:31:39 +0000
ROA not before: Tue 02 Jan 2024 00:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15969
IP address blocks: 45.86.212.0/22 maxlen: 22
185.7.170.0/23 maxlen: 23
185.7.168.0/23 maxlen: 23
46.227.240.0/23 maxlen: 23
46.227.246.0/23 maxlen: 23
46.227.242.0/23 maxlen: 23
46.227.244.0/24 maxlen: 24
46.227.245.0/24 maxlen: 24
2a01:5e00::/29 maxlen: 29
2a01:7600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4b:75:b1:a3:75:8a:b6:fa:ec:a7:57:73:29:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bc3f7f5a6cf51fe1293f889950c9fca75c7b4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:19:63:23:8f:c2:43:ea:43:a8:61:ca:83:
c3:30:d0:54:39:b7:a8:e0:8e:5e:f9:31:a1:96:89:
4d:57:6e:1b:37:b7:6d:ed:e9:50:56:72:c1:65:39:
e5:a0:b4:44:1c:ac:f5:4d:e4:41:5f:e3:af:09:a8:
4f:17:31:97:31:be:2f:a7:b7:41:13:4f:40:d9:1b:
04:24:8a:7b:4d:e7:e2:60:c6:51:bc:09:a4:40:01:
86:ee:b0:90:86:95:74:bd:4e:d8:e4:4b:35:f8:81:
5b:f5:e7:a9:ce:c3:83:1c:2f:64:9a:41:a4:af:d2:
93:91:d8:51:90:50:6a:b9:06:83:f6:20:fe:ad:29:
21:aa:d1:df:79:3c:f8:59:1e:61:da:69:77:54:09:
58:07:80:ae:69:3d:15:8b:aa:2b:d5:af:0d:6a:bd:
65:da:b5:dd:5b:15:96:e9:73:3f:9a:d4:d0:9d:22:
1b:90:3a:a7:b7:c2:ad:2f:f3:48:91:83:98:98:32:
a4:3e:fa:bd:8c:3b:13:cb:bf:e2:fb:84:c7:8d:80:
0a:1e:8b:e3:43:27:2a:50:15:35:d9:24:be:99:ab:
24:69:bb:91:08:e2:8e:2b:91:2c:8b:fe:cc:18:48:
e8:64:bc:ac:17:b1:81:a0:87:d0:6f:f7:db:96:a7:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:F7:F5:A6:CF:51:FE:12:93:F8:89:95:0C:9F:CA:75:C7:B4:BE
X509v3 Authority Key Identifier:
keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/K8P39abPUf4Sk_iJlQyfynXHtL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.212.0/22
46.227.240.0/21
185.7.168.0/22
IPv6:
2a01:5e00::/29
2a01:7600::/29
Signature Algorithm: sha256WithRSAEncryption
33:21:f9:0a:1e:69:50:27:a8:0f:05:51:4c:b8:ff:b5:9b:96:
85:68:59:0a:91:67:bc:33:3f:9e:d9:03:0a:ce:c2:34:3b:ce:
76:47:4b:af:52:f4:2c:e5:b9:4f:ee:62:95:5a:15:f4:44:29:
74:01:e0:eb:9d:4b:35:8c:52:43:6c:9b:65:18:5c:fe:b3:32:
8a:f4:34:41:17:7f:e8:1c:e4:0b:f4:ae:57:78:e4:9d:99:74:
86:73:e6:15:e2:80:bc:a0:44:a1:d9:cd:a7:bc:28:15:bc:19:
e3:60:5e:6b:6e:83:74:98:f4:cb:c9:61:12:e2:47:ab:85:ca:
3f:e4:11:68:a0:66:6d:a7:b5:b3:7c:b4:27:f3:72:56:4c:dc:
8d:45:a3:f8:79:46:3b:56:8f:ce:47:63:14:40:f5:f6:a1:9d:
f0:09:9f:5b:e5:26:17:d8:b9:18:24:3f:16:6c:cb:a3:a8:79:
89:10:8a:48:c7:2a:06:80:31:9b:d6:05:32:b1:ec:02:00:65:
33:48:29:2d:85:e3:a7:72:fe:18:82:8a:b3:c8:5a:66:c4:a3:
94:46:9e:20:72:7d:54:3a:bc:f6:e1:89:a4:f1:58:d6:ab:d8:
93:10:d3:ff:75:0d:7c:2e:96:61:03:e8:dd:2a:9a:04:78:90:
86:6e:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:01:52 2024 by rpki-client on console-ams.rpki-client.org