Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7td444KdgZIaJkn3jI9036pNpxw.roa
File: 7td444KdgZIaJkn3jI9036pNpxw.roa (raw, json)
Hash identifier: w6syrVB7tqCQ0dxp7BNcGzawkq/AH+vZWR6na3FmBcw=
Subject key identifier: EE:D7:78:E3:82:9D:81:92:1A:26:49:F7:8C:8F:74:DF:AA:4D:A7:1C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE824DB543F6BC02817E7942FFBD43
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7td444KdgZIaJkn3jI9036pNpxw.roa
Signing time: Tue 02 Jan 2024 06:31:14 +0000
ROA not before: Tue 02 Jan 2024 06:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 45.8.196.0/24 maxlen: 24
85.208.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:82:4d:b5:43:f6:bc:02:81:7e:79:42:ff:bd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed778e3829d81921a2649f78c8f74dfaa4da71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:60:ed:13:b9:2f:49:79:1b:0a:6b:f8:b6:
a6:3b:bc:f5:1c:d2:aa:63:1a:46:69:da:59:4d:ea:
d2:12:43:af:36:4b:33:c0:fd:07:52:ce:4b:7a:1b:
70:5b:b5:91:2a:18:e9:31:56:01:82:f3:2e:89:80:
17:74:af:3a:b8:58:b4:fc:0e:14:d8:fb:e4:cc:df:
6a:eb:dc:2e:c3:c3:93:d7:af:2c:35:5d:d3:89:e8:
31:d5:be:95:55:19:93:8c:9a:55:1b:81:88:d5:28:
ba:43:e7:9d:5e:e1:0c:1a:40:a0:0d:37:88:6b:8a:
3c:3d:b2:ce:13:dc:32:87:c5:18:f9:27:2f:d5:62:
e8:89:3b:09:d7:be:9a:6f:1d:25:02:11:53:c7:52:
b9:f4:71:8f:eb:9a:d3:a1:fa:b7:43:85:85:10:be:
a0:b4:36:21:23:08:fb:5c:27:55:9e:94:9c:5b:68:
79:f9:6c:33:d1:dc:4f:2f:f3:b2:8c:31:39:3b:18:
de:c6:8f:a5:b5:62:53:bb:e7:fb:f2:c8:fb:02:fa:
43:19:c0:e6:8d:3b:d8:48:ff:80:b3:a4:6d:ef:1f:
b7:f6:14:44:ee:e8:24:73:f0:7d:8d:b0:72:34:96:
ae:0e:57:30:02:d2:50:8f:d1:fb:a1:67:0d:2b:9b:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:78:E3:82:9D:81:92:1A:26:49:F7:8C:8F:74:DF:AA:4D:A7:1C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7td444KdgZIaJkn3jI9036pNpxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:95:0e:b8:3d:7a:39:87:30:cb:b7:41:b3:16:c5:92:0b:cb:
bb:6e:3a:60:be:d0:a6:70:1a:1f:70:e4:61:f0:26:94:aa:b1:
3f:4d:6a:c7:0e:85:a5:e2:c1:df:36:21:8b:66:cb:06:51:cc:
75:c5:01:38:c2:21:36:d6:c9:a9:34:ba:9f:49:38:6e:14:f1:
e0:52:9e:21:b6:f4:33:e7:59:3a:cf:b7:30:86:0a:c7:03:f4:
57:15:a7:72:7b:67:14:9b:a1:2a:94:8f:f8:a5:61:89:2e:18:
be:da:7a:36:8b:37:c4:c2:b7:d4:75:ef:0d:da:23:ba:1e:7b:
61:4b:fa:10:e6:46:ba:15:ca:e4:2e:57:da:39:02:21:f7:4b:
2b:43:1a:e2:83:1c:23:c0:5f:24:82:51:ad:06:d9:ea:d8:9d:
9d:87:f1:7c:16:79:bb:1c:a8:bb:da:d0:c4:d4:b8:a6:b0:b8:
6a:f5:a0:aa:d4:dc:1c:99:ba:96:c0:35:f8:06:aa:b3:ff:9f:
5b:51:88:7e:9e:1f:e0:a3:85:28:31:93:94:81:5f:2d:c9:b7:
05:ae:6c:8b:41:d6:c7:e7:71:8e:fc:0e:0e:94:27:7d:82:ef:
8a:15:03:4d:c6:40:e8:a1:65:2f:b7:f2:16:cd:95:58:ad:80:
35:72:52:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:41:39 2024 by rpki-client on console-fra.rpki-client.org