Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hHqe6IWvFrtqrmX7CriNoEU7wEQ.roa
File: hHqe6IWvFrtqrmX7CriNoEU7wEQ.roa (raw, json)
Hash identifier: iJd4yfGgOB+98rnsl9HSYSTEG9tNVzky/5ceUJyDXYI=
Subject key identifier: 84:7A:9E:E8:85:AF:16:BB:6A:AE:65:FB:0A:B8:8D:A0:45:3B:C0:44
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE93DF9FD66D2BAF0177F67E9D25F8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hHqe6IWvFrtqrmX7CriNoEU7wEQ.roa
Signing time: Tue 02 Jan 2024 06:31:19 +0000
ROA not before: Tue 02 Jan 2024 06:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.8.192.0/24 maxlen: 24
45.8.193.0/24 maxlen: 24
45.8.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:93:df:9f:d6:6d:2b:af:01:77:f6:7e:9d:25:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=847a9ee885af16bb6aae65fb0ab88da0453bc044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:ab:64:d6:9f:45:cd:39:3f:ac:fe:85:9b:
82:70:52:cb:19:f6:ce:7e:1e:4d:0b:b1:51:b7:83:
ce:ed:db:58:d3:32:b6:ca:2f:6d:14:e4:ac:98:44:
ee:8d:16:ba:80:4a:fc:1c:0a:a5:25:98:6d:0b:ed:
2b:bb:73:20:f7:f8:fc:e9:ad:62:30:f0:a0:5e:cc:
28:d6:11:03:f0:9b:57:ad:28:b7:b1:7d:2c:2e:d1:
aa:bf:9f:a8:d0:e9:b7:27:15:f4:ec:c4:84:3e:4d:
da:20:5c:e5:a5:0b:92:00:60:80:3e:a3:9e:93:44:
31:4a:ff:e7:06:5d:3a:d1:d7:7e:76:e0:06:ee:4e:
b2:6d:2d:ca:1d:3c:2a:1e:8f:32:ef:12:5c:5e:87:
27:5a:38:68:48:d8:94:a0:12:2f:44:3c:2b:b2:7d:
19:e1:58:8e:a9:21:02:9d:04:54:e9:8c:13:72:69:
24:9f:b9:64:d2:7a:cd:2f:4f:32:4f:51:cc:40:19:
52:05:d5:d9:60:b5:ba:9e:c0:57:15:c6:8b:2f:e5:
46:7a:1b:af:f0:b3:0a:74:ea:2a:8d:a9:f4:7e:5f:
04:02:e0:b6:eb:85:ff:f8:ff:b2:64:31:d5:51:9e:
90:d1:a1:e4:27:39:e0:74:54:27:dd:e7:db:13:4b:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:9E:E8:85:AF:16:BB:6A:AE:65:FB:0A:B8:8D:A0:45:3B:C0:44
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hHqe6IWvFrtqrmX7CriNoEU7wEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.192.0/23
45.8.202.0/24
Signature Algorithm: sha256WithRSAEncryption
20:11:f6:ec:e2:82:e3:44:bc:c1:35:0d:1f:7c:c0:67:3c:5f:
9d:f4:81:a3:3e:36:36:ba:b1:59:fb:a7:a5:3e:0f:03:fa:da:
cd:78:48:8a:a3:65:b4:60:cc:34:a5:86:f5:4a:6a:7b:47:90:
48:91:37:46:4c:53:9d:c6:73:12:60:54:45:fa:ff:23:80:ed:
dc:48:79:0f:e2:23:f3:f4:18:48:e0:51:9d:5c:61:64:c8:4c:
38:e8:53:fa:fc:ce:8d:08:1c:ac:43:f5:9f:05:0f:66:f4:33:
b0:c6:a0:16:a9:3c:d9:f0:89:28:65:81:9f:3f:76:30:4a:b0:
1a:7d:e6:a7:24:a6:40:85:54:01:13:65:cf:c6:a4:10:14:af:
a0:4b:6b:2f:3f:c7:ca:27:35:50:6f:35:43:16:30:28:b4:e3:
72:5c:b8:ab:16:fd:16:ba:c8:47:7b:71:e1:8b:e1:92:be:ba:
50:29:0c:0b:77:3b:0d:d2:ca:da:8e:b7:94:be:df:98:18:97:
7f:a5:22:9c:b4:fe:86:0d:28:04:09:36:11:4c:85:8f:c2:c1:
50:24:32:39:2d:5a:2a:d0:b4:5e:28:78:47:19:8d:f3:8d:df:
84:2a:54:0e:16:8b:55:ed:7b:ed:01:c4:de:20:e0:79:92:12:
be:f7:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:37:56 2024 by rpki-client on console-fra.rpki-client.org