Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/cWoWhhp7HojpkqqhSUARX8MMlZw.roa
File: cWoWhhp7HojpkqqhSUARX8MMlZw.roa (raw, json)
Hash identifier: O1zFzVAouNtHytG8NULVs5bdHkvTD8caleGcV5yEzFk=
Subject key identifier: 71:6A:16:86:1A:7B:1E:88:E9:92:AA:A1:49:40:11:5F:C3:0C:95:9C
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 018CC9BCA893DBDF647A541EA929C64BB57A
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/cWoWhhp7HojpkqqhSUARX8MMlZw.roa
Signing time: Tue 02 Jan 2024 10:33:53 +0000
ROA not before: Tue 02 Jan 2024 10:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51447
IP address blocks: 45.137.20.0/24 maxlen: 24
45.137.23.0/24 maxlen: 24
45.137.22.0/24 maxlen: 24
45.137.21.0/24 maxlen: 24
185.222.58.0/24 maxlen: 24
185.222.57.0/24 maxlen: 24
185.222.56.0/24 maxlen: 24
185.222.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a8:93:db:df:64:7a:54:1e:a9:29:c6:4b:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Jan 2 10:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=716a16861a7b1e88e992aaa14940115fc30c959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:1f:f8:b5:ab:30:95:b4:98:4b:34:ca:40:
40:f1:f1:e4:be:b0:99:ad:58:ea:27:9d:bb:70:e7:
45:9f:b4:bc:25:31:2c:93:51:42:c9:7a:58:b4:76:
60:b6:72:45:ae:c2:a0:6d:27:5c:df:b3:a3:1b:d7:
f6:ff:16:61:6f:62:69:25:7d:9b:f2:84:c3:d0:c0:
23:c6:ed:81:4b:de:d2:05:a2:7a:a0:9b:c6:61:ac:
cb:01:ba:b0:74:f1:5d:e7:13:8a:46:7c:bb:a1:f0:
0a:a5:d3:44:a6:89:11:db:3c:7e:a6:1b:f5:73:10:
39:c7:2b:ab:29:b3:e1:2b:d1:3b:a0:0e:78:81:67:
cc:51:9e:37:a0:5e:89:4e:1f:a8:c5:7e:de:ed:3a:
66:f9:17:49:df:6f:1d:e3:8b:a7:f0:2b:23:32:fe:
87:9c:ee:ec:2c:d1:e0:50:8b:a3:09:fd:ce:43:fa:
d4:99:34:85:aa:1e:23:74:a3:37:81:ff:f5:a5:e2:
8a:ff:f5:2c:92:62:05:3e:66:88:73:11:e7:16:8a:
d8:20:0d:72:4e:02:d5:2a:4d:17:12:f1:91:2c:d2:
2f:68:ae:f1:71:e5:bc:58:a6:d1:8e:f8:2f:c9:de:
00:07:7b:1d:d5:3a:0d:f0:df:85:aa:54:28:22:ab:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:16:86:1A:7B:1E:88:E9:92:AA:A1:49:40:11:5F:C3:0C:95:9C
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/cWoWhhp7HojpkqqhSUARX8MMlZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.20.0/22
185.222.56.0/22
Signature Algorithm: sha256WithRSAEncryption
85:14:6d:58:f8:8c:db:54:07:81:1d:dc:ec:b9:83:8b:f0:bf:
08:e1:db:f2:8b:6f:f6:7a:9a:5c:5f:86:6e:29:b9:1e:04:8c:
c0:30:dc:17:17:dd:de:b3:63:c0:33:bf:80:f1:b4:4f:55:ac:
cf:fb:dd:c8:19:30:47:76:66:f4:d7:21:db:6e:2b:e7:8c:38:
76:46:58:0b:6c:84:2c:55:62:b1:66:d4:98:b2:6d:6c:1a:1a:
75:0a:8b:fa:18:7b:9c:ad:89:e0:73:cf:ff:3f:44:cb:83:f8:
2e:59:d0:70:ff:02:73:5c:38:81:fb:5a:21:6a:a4:ae:99:09:
21:98:0c:f1:c4:54:78:ee:5c:62:11:95:5e:68:e2:9e:a2:f3:
3b:94:51:5c:09:ff:a5:79:e1:e0:f1:1a:7c:d0:c5:c1:6b:7f:
b9:24:86:2b:96:13:3d:50:ab:2f:05:13:f3:8e:dd:2a:f9:a1:
23:68:1f:1c:e1:2b:c8:c7:92:ec:7f:bd:d6:bb:e2:ab:d1:48:
66:23:30:05:78:ff:98:cd:52:d4:76:2d:52:4f:bf:43:47:9e:
9c:70:48:7c:54:33:01:c6:5a:44:d0:d5:57:ba:31:8d:6b:76:
35:51:4e:12:2c:1e:a2:16:a2:02:b6:2e:7c:9c:5c:38:1e:8e:
bd:39:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:56 2024 by rpki-client on console-fra.rpki-client.org