Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XFt2KrpA2zpU1C7YEDcnKY5c814.roa
File: XFt2KrpA2zpU1C7YEDcnKY5c814.roa (raw, json)
Hash identifier: 1bGdF9OCEShIO9UQM8gsPvMrfRGiIUAKzYT4ZytGVHI=
Subject key identifier: 5C:5B:76:2A:BA:40:DB:3A:54:D4:2E:D8:10:37:27:29:8E:5C:F3:5E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE95B4EE203D5AEFF9C186B5A59D38
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XFt2KrpA2zpU1C7YEDcnKY5c814.roa
Signing time: Tue 02 Jan 2024 06:31:19 +0000
ROA not before: Tue 02 Jan 2024 06:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 271993
IP address blocks: 45.8.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:95:b4:ee:20:3d:5a:ef:f9:c1:86:b5:a5:9d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c5b762aba40db3a54d42ed8103727298e5cf35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:a8:19:d7:5f:58:99:ba:fe:42:6b:90:ec:
f5:94:6e:19:bb:19:83:6b:35:84:30:d1:59:77:35:
df:09:35:ff:c5:7b:e1:7e:1c:6d:f1:4c:d0:42:33:
b1:f4:8c:53:69:a3:64:86:1a:c6:e6:64:b7:45:f3:
dc:c9:0f:53:38:60:a6:78:34:c9:cf:dc:f4:fb:b1:
01:5d:27:43:40:70:93:3c:c4:8b:3a:1c:fb:cf:19:
22:5f:25:c7:82:d0:0c:3e:1b:b7:fb:ec:28:50:d8:
4c:e6:62:10:49:c8:0e:bc:95:09:a0:45:83:35:cb:
53:0c:77:6f:c9:a7:58:37:8f:04:1f:d4:c4:6f:2b:
58:5a:05:f5:f1:ad:a2:15:80:48:06:36:a2:6f:29:
87:2f:ac:2d:17:77:66:1b:6d:14:53:ee:80:47:88:
3f:66:ee:df:4d:5c:18:1d:90:fa:44:d7:b7:bc:e1:
b7:3d:a1:60:a2:bb:fb:1f:eb:f2:74:82:d1:82:6b:
a1:24:30:cc:44:d3:fa:f4:a0:af:ca:59:54:bd:d3:
38:23:05:43:c8:c8:a7:4e:52:60:94:e1:07:2d:94:
24:41:6c:32:7a:0e:32:11:4d:2c:f8:36:51:54:66:
e8:20:8d:6d:0a:ee:1c:22:ef:22:70:81:fa:21:bd:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:76:2A:BA:40:DB:3A:54:D4:2E:D8:10:37:27:29:8E:5C:F3:5E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XFt2KrpA2zpU1C7YEDcnKY5c814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.207.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c6:a0:01:32:80:65:e8:39:90:36:55:62:43:a7:50:65:7a:
f8:15:c9:6e:1e:7d:86:fc:bb:73:52:a9:ff:46:47:ce:54:35:
83:f5:09:3e:1b:5f:82:60:91:6b:24:35:39:05:50:6a:e8:e4:
92:05:87:6b:cd:e7:7a:1e:ca:88:bd:f9:a8:42:6d:4d:d8:82:
2f:ae:74:5a:7a:47:1c:4a:3a:e7:a0:cc:2d:f9:30:b4:6c:5c:
8f:d1:15:16:62:cb:85:05:56:66:b5:79:3c:4a:9f:4b:af:5a:
67:f5:d2:42:89:60:bc:0a:9f:b9:ba:85:03:93:e6:47:c0:41:
ae:c0:d9:a9:ac:71:41:ce:25:5f:77:6f:60:64:94:7e:5d:17:
ff:2b:18:99:07:8b:4b:e0:2a:57:cd:36:9e:13:90:70:eb:68:
f4:c7:c0:81:6f:36:bd:0f:a4:1f:d2:5e:7a:c5:75:65:6d:8c:
51:1e:8c:a1:d8:4b:44:2c:aa:32:74:74:3f:83:7a:b6:cc:c4:
88:8c:78:0b:c2:ae:21:82:e4:01:1b:b0:f7:8c:e2:8f:2a:80:
dd:09:b3:cb:7c:8f:8a:ad:9e:3b:60:40:08:93:49:42:25:bc:
08:c1:2e:c8:d6:62:13:66:52:0b:39:36:a7:7d:d8:4c:a0:06:
3a:76:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:53:27 2024 by rpki-client on console-ams.rpki-client.org