Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bKn2cRJY62iA2_lUG72Dl3vkil8.roa
File: bKn2cRJY62iA2_lUG72Dl3vkil8.roa (raw, json)
Hash identifier: 1lkMYaMb23xnPFHNJ9M5642MkpGUH5i68cVKgHHO+4I=
Subject key identifier: 6C:A9:F6:71:12:58:EB:68:80:DB:F9:54:1B:BD:83:97:7B:E4:8A:5F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018FEDA33C17243B83E959A802B1CBD99196
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bKn2cRJY62iA2_lUG72Dl3vkil8.roa
Signing time: Thu 06 Jun 2024 13:00:48 +0000
ROA not before: Thu 06 Jun 2024 13:00:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:a3:3c:17:24:3b:83:e9:59:a8:02:b1:cb:d9:91:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 6 13:00:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ca9f6711258eb6880dbf9541bbd83977be48a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:87:26:7e:2f:26:9c:50:71:cb:e1:1c:e7:
03:c9:fb:d9:29:4d:42:2c:89:ce:78:21:e1:3b:ca:
84:c0:8d:14:e2:48:87:54:da:2d:64:cf:f4:f4:73:
52:e3:44:44:33:3f:f6:8b:f4:bb:d1:b1:a6:f3:a5:
79:73:d3:98:aa:68:2f:79:ab:40:24:c9:cc:47:13:
3f:a2:92:8b:9e:41:fc:ad:75:f1:6f:75:43:b6:dd:
e9:31:f7:4f:af:c7:02:56:1f:7b:37:5b:df:ef:73:
6e:a8:d1:5c:13:cb:ab:8a:2c:6a:ac:b5:44:bb:12:
4c:d7:78:bd:1e:d8:a7:18:15:ac:bb:5b:3a:23:92:
04:a2:18:42:73:93:06:8d:74:1b:c4:29:c9:c9:ff:
34:bb:05:7c:2d:2b:cf:37:59:a1:fa:5f:de:87:f3:
17:52:fd:3e:a4:48:f1:a6:c9:e7:52:ea:82:e9:26:
a0:23:6b:02:76:49:1b:b1:37:2c:ad:51:61:58:b3:
a4:c6:34:cc:36:bb:52:92:65:9b:17:4f:c6:70:b7:
57:68:da:f2:85:c5:0f:af:0c:87:d6:19:c7:7a:76:
5e:24:c5:3e:cd:29:df:01:1c:e0:95:fe:82:5e:e3:
6c:84:d1:37:76:67:f5:fd:28:8d:dd:54:51:dc:44:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:F6:71:12:58:EB:68:80:DB:F9:54:1B:BD:83:97:7B:E4:8A:5F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bKn2cRJY62iA2_lUG72Dl3vkil8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b6:bf:35:9e:41:9f:bc:ad:95:20:5b:30:82:e2:d9:8c:be:
09:26:59:32:f5:b0:17:ce:fc:42:14:a8:35:ab:10:03:3b:0b:
3a:49:ea:40:cd:f2:c9:1f:56:2d:62:47:eb:b1:68:a7:d5:2f:
e4:2a:9f:78:c9:8d:21:20:a1:32:11:bc:79:4d:42:3b:c6:d6:
48:b8:51:03:9a:6b:d7:dd:dd:f7:18:45:9a:5b:9b:6e:85:e7:
b5:8a:79:e2:8a:d9:3f:2e:df:c4:67:43:8f:ef:66:c0:c6:a3:
19:23:1e:3d:66:40:8a:5d:30:33:62:39:78:06:53:75:86:e6:
30:26:52:7b:ff:65:07:bb:4b:1a:98:7f:bf:77:7e:75:ce:ae:
66:9b:4e:74:51:de:ca:f7:5e:e4:96:03:5d:2e:e6:14:67:be:
ea:e8:09:af:4f:8d:76:a4:0d:04:60:dd:0e:17:76:84:e7:d4:
f5:df:d6:a1:0b:cd:2f:1d:68:3a:42:55:ca:71:30:74:b7:d7:
13:21:19:1d:83:9d:ce:46:4a:e8:ab:ff:a6:34:2a:ab:76:b8:
d1:c4:d2:e6:fc:36:7b:04:05:e0:d3:60:e2:18:44:97:35:05:
07:cb:b5:df:cb:6b:6e:dc:c9:0d:8f:19:d3:59:b5:f1:09:6a:
d1:75:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:47:36 2024 by rpki-client on console-ams.rpki-client.org