Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kJwKwhmqSuhHA3_9TWUiXz5ETXY.roa
File: kJwKwhmqSuhHA3_9TWUiXz5ETXY.roa (raw, json)
Hash identifier: dM45DTzgNZFCISzGR0znyDGgMPi3YapSm6ixpM9yZ5k=
Subject key identifier: 90:9C:0A:C2:19:AA:4A:E8:47:03:7F:FD:4D:65:22:5F:3E:44:4D:76
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018E0B49AC1181DF6DBDA88EA8177AD82D34
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kJwKwhmqSuhHA3_9TWUiXz5ETXY.roa
Signing time: Mon 04 Mar 2024 21:06:01 +0000
ROA not before: Mon 04 Mar 2024 21:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204174
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0b:49:ac:11:81:df:6d:bd:a8:8e:a8:17:7a:d8:2d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 4 21:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=909c0ac219aa4ae847037ffd4d65225f3e444d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:f4:ea:50:ae:cf:11:9e:6f:0f:4b:ed:94:
29:a5:04:24:65:38:12:5c:b6:f2:8d:cc:c7:ed:8d:
99:79:ee:4c:2a:a6:44:7c:e7:20:a7:ce:1b:94:6d:
55:c1:08:df:be:08:eb:f4:8d:0e:c8:3c:51:8d:86:
4f:ee:87:c9:6f:94:21:7f:70:70:e4:90:28:6f:95:
da:b4:76:05:a4:a8:aa:88:c8:18:ee:1e:7a:63:7c:
87:a0:fd:1e:64:4a:7e:9b:14:66:c9:af:e2:07:4b:
ec:1a:c9:74:57:39:20:a3:31:e1:f8:7c:59:72:c0:
76:1f:7d:d6:df:98:0f:62:9b:be:e9:f1:ee:e7:a7:
e2:21:ba:fb:26:36:7e:15:6b:49:ef:c3:d6:dd:bb:
2d:df:b6:26:07:a7:34:67:f1:1c:ef:23:96:bf:7b:
9b:20:b4:2e:32:c3:e3:18:f4:cb:9c:0b:fd:51:df:
68:68:ff:33:ce:ab:f5:d1:51:8a:e1:29:4e:27:60:
a0:b9:f2:75:d6:9f:fb:2d:54:af:10:9c:3e:f4:e9:
67:a9:02:04:d2:88:e3:8d:f5:f3:81:91:a5:d6:b7:
70:56:fd:4b:ae:64:0d:77:3c:ff:f4:f1:35:c7:1d:
f8:7f:3c:82:7d:ed:12:f4:3c:3e:87:be:ce:e7:60:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:0A:C2:19:AA:4A:E8:47:03:7F:FD:4D:65:22:5F:3E:44:4D:76
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kJwKwhmqSuhHA3_9TWUiXz5ETXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f2:45:4c:37:86:4a:a4:39:79:9e:69:8f:59:6b:4e:91:70:
7b:ca:bd:5f:77:f8:e5:4b:4f:fa:48:df:9b:10:a8:89:23:33:
04:6e:65:c8:57:02:c9:f0:8b:67:b6:71:23:c8:fb:84:38:c1:
e5:75:56:d0:1f:05:4c:ad:40:9c:28:ed:22:f3:a8:0e:6f:75:
70:69:f8:2e:3d:30:5c:3c:16:32:44:a6:55:dd:5c:3b:73:2d:
6a:18:3f:fc:7b:71:09:ae:16:7c:5e:fc:00:15:20:df:97:df:
50:a4:7d:30:14:b0:d7:cb:16:53:35:70:43:54:b6:e1:0b:4e:
b4:e0:a0:fd:de:df:14:e4:4f:d0:ee:2a:ea:42:ab:f1:cb:47:
b0:e7:ab:25:b1:51:40:54:8c:44:c6:59:74:d7:df:1c:81:7d:
34:b3:d0:93:14:4d:5a:3b:6c:af:83:c9:3b:8e:a4:a9:a7:b1:
0b:2b:65:0f:da:37:1f:01:45:fd:e9:7a:60:7e:71:c0:07:b8:
1b:22:a9:50:aa:40:8b:4f:71:16:bc:4e:d9:b5:85:76:8f:c7:
d5:99:af:f1:82:2c:e3:08:98:28:83:4a:b3:c3:96:ef:d7:40:
df:0a:84:6a:5b:c5:04:07:73:24:20:37:93:8e:91:fb:26:7c:
97:42:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:59:20 2024 by rpki-client on console-fra.rpki-client.org