Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/557UJgnPDmNM3-nvhbJ64zGas0s.roa
File: 557UJgnPDmNM3-nvhbJ64zGas0s.roa (raw, json)
Hash identifier: 8H5uD2atx/LLN2wfwLteV4oNjvtsEtB9c/VcL1HiJSU=
Subject key identifier: E7:9E:D4:26:09:CF:0E:63:4C:DF:E9:EF:85:B2:7A:E3:31:9A:B3:4B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE929BF2E56B81031F1E465BC8315C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/557UJgnPDmNM3-nvhbJ64zGas0s.roa
Signing time: Tue 02 Jan 2024 06:31:18 +0000
ROA not before: Tue 02 Jan 2024 06:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211318
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:92:9b:f2:e5:6b:81:03:1f:1e:46:5b:c8:31:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e79ed42609cf0e634cdfe9ef85b27ae3319ab34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:79:b6:4b:a1:15:76:6f:3e:9f:e7:a3:97:
7e:64:08:43:4f:41:32:01:40:67:02:9d:0d:66:11:
10:61:92:7b:da:5d:40:95:a1:f3:82:f0:70:c1:a7:
20:85:91:98:08:b3:c7:e0:a9:29:9b:a8:f8:79:2b:
44:5e:7b:13:d7:2f:e9:31:1f:49:e1:c5:44:c2:7c:
dc:48:9f:bf:39:40:96:d4:db:fc:f6:23:36:7c:ae:
b4:88:d8:8e:3c:d7:86:a9:21:23:32:06:f9:90:53:
a5:15:0d:9b:f1:f4:cf:08:40:e2:be:d5:b5:d6:f0:
a3:1a:a3:49:f7:05:bf:b1:cc:1f:de:fe:e4:ed:65:
51:f6:d2:c4:c8:84:0d:bd:ef:d2:3d:70:82:c9:8f:
82:d9:d0:f7:8d:15:0f:cf:82:2f:6c:ef:c0:f2:50:
b2:11:57:2e:ae:ea:c3:78:96:f7:63:98:db:73:e1:
87:31:a4:6c:88:1a:9a:0b:ba:0b:4b:9c:c4:dd:65:
19:f8:e8:c4:0b:86:b6:32:3d:95:54:67:93:17:f3:
2d:45:29:f7:0e:7e:37:08:14:6e:5c:c8:68:3c:39:
a2:6b:4b:cd:63:a7:07:c0:0e:37:96:17:46:c3:5d:
e9:8b:05:3b:55:e8:1d:b7:67:6e:4b:c5:44:ee:2b:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:D4:26:09:CF:0E:63:4C:DF:E9:EF:85:B2:7A:E3:31:9A:B3:4B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/557UJgnPDmNM3-nvhbJ64zGas0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c5:1e:d9:de:74:77:d5:c7:64:4f:b4:07:56:2c:67:92:b5:
da:55:e9:7f:52:d3:d9:af:2e:25:f7:f9:58:e6:25:ff:35:36:
3b:59:f6:14:6b:64:bc:09:f1:5a:26:e8:a1:dc:1e:51:b1:4e:
e4:2a:57:9e:42:30:f6:77:53:07:0c:6d:ae:ba:81:05:f5:f8:
09:ca:e7:e9:ec:06:63:84:53:71:56:30:a9:ea:23:d6:cc:9a:
e8:50:19:02:70:90:f1:33:0d:16:04:fb:32:9b:6d:b1:ef:0d:
d1:27:c0:10:34:67:f0:b4:f0:ab:c6:f7:7a:21:d0:75:dc:8e:
88:8d:aa:30:40:52:0d:8f:6d:c3:c6:ba:0c:9b:9b:34:49:5f:
91:e7:7f:8c:8b:06:30:d0:f6:e6:ce:3c:47:21:6d:a9:33:48:
71:2a:c8:cd:87:d9:ab:bb:c9:22:5d:9e:3a:72:86:82:ca:37:
83:cf:45:62:95:98:85:d4:53:dc:b0:0a:6c:71:63:9c:e4:e6:
52:8f:5c:ee:44:e2:1f:1b:6a:08:8a:2d:fb:dc:13:b1:15:3a:
06:de:cf:8a:d6:b1:7d:09:3a:c6:91:6b:eb:c7:49:68:f3:b2:
cb:65:96:ad:42:b7:45:14:a0:0d:f5:1c:f1:a1:ad:ed:ed:14:
c3:bd:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:14:01 2024 by rpki-client on console-fra.rpki-client.org