Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/geIdxaSajBjTx8x74t2qPL492eE.roa
File: geIdxaSajBjTx8x74t2qPL492eE.roa (raw, json)
Hash identifier: SH8mQhlnHSsSjcX1OP9RlbDghJ43t6Hz2rUUfsDvgBI=
Subject key identifier: 81:E2:1D:C5:A4:9A:8C:18:D3:C7:CC:7B:E2:DD:AA:3C:BE:3D:D9:E1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE857E825B4DF1AC904E33342AF201
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/geIdxaSajBjTx8x74t2qPL492eE.roa
Signing time: Tue 02 Jan 2024 06:31:15 +0000
ROA not before: Tue 02 Jan 2024 06:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57025
IP address blocks: 45.8.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:85:7e:82:5b:4d:f1:ac:90:4e:33:34:2a:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81e21dc5a49a8c18d3c7cc7be2ddaa3cbe3dd9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:bf:65:47:e9:94:b4:7b:46:ff:9a:9c:92:
1b:91:17:92:f5:7d:58:c1:4c:68:31:64:8e:cc:4d:
9b:6e:80:06:b4:be:ca:29:fd:3e:89:e9:92:9c:f9:
a4:a8:97:c7:c6:53:73:34:d2:6c:c7:d4:9f:e6:ea:
e5:c1:0f:4b:7a:84:22:6c:c5:ee:db:23:a3:52:45:
8f:6d:98:33:24:83:dd:4c:f2:42:3f:4d:08:b9:1e:
f4:b4:43:93:c1:b9:87:df:8f:6c:24:8f:79:e1:96:
34:28:86:0e:f9:39:55:12:a9:f3:e1:89:7a:5f:c7:
97:14:90:2f:36:52:88:58:7c:1d:66:60:62:f2:00:
e3:0d:81:45:ed:1c:d2:ae:03:6a:5f:a6:35:29:bd:
ac:ef:45:7e:34:67:da:85:7d:d7:8c:79:13:ca:1b:
43:f2:62:d1:07:4f:0a:52:83:84:4b:66:00:d8:9a:
83:68:0f:da:29:8f:d9:53:6e:57:ee:a4:39:f1:5d:
eb:be:47:39:c9:34:4e:71:ed:75:7f:86:ad:da:03:
c7:5f:e4:f5:5a:9e:83:ef:92:6f:c9:53:73:fd:f9:
d4:e3:08:b9:9b:4e:b5:67:94:60:6c:af:05:5d:b7:
02:2e:14:00:96:c7:ad:ad:28:62:73:d3:f7:cf:94:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E2:1D:C5:A4:9A:8C:18:D3:C7:CC:7B:E2:DD:AA:3C:BE:3D:D9:E1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/geIdxaSajBjTx8x74t2qPL492eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.204.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4e:ec:80:5a:5f:0d:16:98:8f:c5:96:62:9a:9a:eb:08:24:
83:cf:cf:fa:5c:9d:50:fd:fc:62:ce:2d:3d:33:94:ff:f2:be:
5b:fe:78:eb:fa:3b:82:30:49:64:c4:8b:c5:a3:3f:5f:a1:ce:
6b:53:3f:8f:3d:c6:8e:d2:87:57:b2:75:9d:22:93:d2:c1:e3:
6d:9a:77:c4:dc:16:f6:cc:20:d8:b3:06:50:2e:1c:e6:7c:35:
c2:87:14:ea:5b:78:7a:e2:f9:91:ca:fe:d8:de:af:11:2f:42:
7d:2d:91:3e:0f:7b:44:1c:21:c2:5e:52:e0:2d:6b:1e:9c:da:
bf:8c:e8:b9:84:b4:ea:c9:bf:21:c0:b1:03:92:bf:2d:e6:68:
b6:b8:f4:3b:29:5a:d1:30:87:ae:f6:f1:11:a0:23:94:5e:29:
df:62:8c:66:e2:c4:ca:09:cb:1e:7d:d4:b4:13:7a:6e:b1:37:
73:cd:e4:98:0a:09:17:9e:12:f0:23:e9:ee:43:3a:53:74:d4:
e3:cf:65:13:82:31:08:f9:69:ba:f8:d7:16:8c:29:4f:a6:00:
2e:0a:bb:79:ed:d4:76:b1:6d:71:32:8d:9b:30:1a:4e:b0:19:
90:73:e1:92:26:d2:28:64:7a:9e:39:be:fa:f9:d4:c3:24:d0:
a6:a4:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:59:20 2024 by rpki-client on console-fra.rpki-client.org