Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eTYt3fP5anZJn3y9M6Ud38TFBWI.roa
File: eTYt3fP5anZJn3y9M6Ud38TFBWI.roa (raw, json)
Hash identifier: tseqPNzDUZb9IY2Fu3rkkTkbs55JfYh6zew7kGE2Q0Y=
Subject key identifier: 79:36:2D:DD:F3:F9:6A:76:49:9F:7C:BD:33:A5:1D:DF:C4:C5:05:62
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE80970CDD106F5BA2471A7786A784
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eTYt3fP5anZJn3y9M6Ud38TFBWI.roa
Signing time: Tue 02 Jan 2024 06:31:14 +0000
ROA not before: Tue 02 Jan 2024 06:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 45.8.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:80:97:0c:dd:10:6f:5b:a2:47:1a:77:86:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79362dddf3f96a76499f7cbd33a51ddfc4c50562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dc:56:ee:d8:85:e1:78:a1:4d:13:74:65:d3:
46:23:98:14:a7:dc:48:8c:b6:0c:a3:17:45:75:dc:
bc:2a:99:ed:bf:17:23:02:bf:ff:3a:3b:7f:c4:f1:
e4:9b:d2:b7:ae:35:24:35:e9:be:b0:13:d9:3a:a2:
bc:b0:5c:6b:aa:05:e1:e6:2a:b7:57:8b:00:ac:5a:
7f:b6:b1:3c:c2:8b:25:7d:d1:13:69:eb:bf:f4:bf:
c1:29:ad:c5:a2:0f:21:79:b3:5e:33:6c:dd:89:33:
7e:d3:95:85:a2:5e:3d:d7:7a:69:01:e8:07:3b:54:
1e:5a:e1:07:53:7f:a4:eb:b9:91:25:8e:60:5b:0e:
15:b5:49:d4:8f:b7:75:d3:b9:f3:ba:84:07:e8:c1:
2e:1c:28:8c:2b:23:01:04:7c:9b:e8:41:d2:d3:04:
8c:27:27:ee:7b:d0:01:d4:e3:07:ee:2c:f6:15:e1:
cd:40:7e:75:2f:84:2b:f4:05:d8:09:70:a2:11:38:
fe:c4:10:07:5c:20:ce:a0:3d:4f:1c:4c:4e:c9:17:
c0:7f:87:f2:bf:64:1f:22:fc:49:de:7a:18:2c:d8:
15:3c:7d:ee:e7:59:95:dd:65:48:b0:7a:76:c4:bb:
cf:b7:b3:56:3c:74:97:ff:08:fe:db:40:dc:17:56:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:2D:DD:F3:F9:6A:76:49:9F:7C:BD:33:A5:1D:DF:C4:C5:05:62
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eTYt3fP5anZJn3y9M6Ud38TFBWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5e:2f:a0:e7:f2:60:89:f2:7a:6b:66:0d:f9:32:5a:ea:f3:
ba:62:d3:e6:63:ce:b6:a2:50:ca:39:b2:00:35:af:3e:aa:d8:
e6:3e:05:7f:9b:a3:a2:ac:3e:24:ba:a8:e3:9e:81:b8:be:12:
8c:c2:0d:ac:f0:66:da:90:f2:58:9c:09:6a:ad:e0:59:37:eb:
2b:c2:48:a2:f9:90:8b:ff:4b:f2:d0:f2:b1:cc:a0:15:4b:95:
8a:fd:a9:39:c2:b3:52:45:ec:63:06:85:d3:96:7a:aa:4b:9d:
97:78:1a:44:a8:00:8c:f0:37:27:be:c9:10:58:2a:dc:65:8f:
14:58:d4:41:2b:71:17:c0:2c:12:7b:63:9c:d8:27:dc:51:80:
74:e7:ad:a7:99:e7:2e:63:b5:4e:38:bd:33:41:fe:77:ed:24:
3e:b9:45:80:73:88:be:4f:c4:7d:78:09:31:1f:90:ba:d1:5d:
92:1e:d6:97:e7:9e:5f:c7:56:6e:6d:f9:b3:65:c3:36:3e:58:
10:20:7a:f2:69:44:bd:37:e8:92:6b:8a:0e:d3:a3:b9:54:57:
d8:de:07:fe:9b:8e:07:17:80:21:bf:23:9c:e2:d7:5b:99:05:
47:e3:32:f8:ca:9d:1e:79:e8:68:52:e5:d5:d9:13:f4:fa:f7:
02:47:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:53:05 2024 by rpki-client on console-ams.rpki-client.org