Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Fv0OBP0-r0fj1S8p4nRRL8veQhY.roa
File: Fv0OBP0-r0fj1S8p4nRRL8veQhY.roa (raw, json)
Hash identifier: 8gGXjzOdeAgclxHjihv6nPl5abyoLOh19yh6uarX3Ec=
Subject key identifier: 16:FD:0E:04:FD:3E:AF:47:E3:D5:2F:29:E2:74:51:2F:CB:DE:42:16
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010ED3F1BD1090B958DA72E7687DF3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Fv0OBP0-r0fj1S8p4nRRL8veQhY.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 45.91.50.0/24 maxlen: 24
45.8.68.0/24 maxlen: 24
45.67.97.0/24 maxlen: 24
45.67.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0e:d3:f1:bd:10:90:b9:58:da:72:e7:68:7d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16fd0e04fd3eaf47e3d52f29e274512fcbde4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:26:86:39:7e:ba:1c:c3:cf:c7:07:24:24:
92:fc:b2:af:15:8d:11:52:21:29:4e:8d:29:3f:86:
a9:12:c9:60:8f:e2:0b:9c:19:26:e7:9e:bb:a7:64:
d1:ce:0a:f0:9e:5d:ab:f5:27:7b:4c:b4:4e:f4:85:
44:69:ab:ce:c4:5b:41:62:ed:32:5c:8b:94:3b:b3:
d0:24:50:34:8a:0d:98:d5:66:97:9e:d6:45:b0:b1:
ca:fd:ee:2b:31:4c:86:fa:37:7c:9b:b3:35:95:bf:
25:90:a7:b4:9a:25:b6:0e:87:c8:bc:c1:31:e0:61:
40:39:db:21:92:79:da:6f:23:1d:0c:7c:8d:9d:35:
8d:c7:71:f1:97:56:92:0b:18:a6:a2:6d:17:b7:2e:
4f:61:f4:18:d1:29:29:63:cf:55:48:6d:31:cd:0f:
82:05:42:57:bd:fc:3a:c9:d9:16:e9:fc:c4:61:cb:
5f:5c:40:0a:cc:d0:73:bc:5d:94:65:d8:ea:d7:7b:
99:23:27:fd:d7:9d:72:e2:7f:90:a5:f0:40:eb:c4:
82:78:48:df:90:fd:ab:d5:3e:29:c7:3e:6d:72:1f:
ef:f7:e5:3a:5e:51:01:b4:b6:53:ab:61:44:da:11:
fa:74:9c:37:4c:62:a9:0c:99:ca:ac:b5:bf:09:c3:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FD:0E:04:FD:3E:AF:47:E3:D5:2F:29:E2:74:51:2F:CB:DE:42:16
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Fv0OBP0-r0fj1S8p4nRRL8veQhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.68.0/24
45.67.97.0/24
45.67.99.0/24
45.91.50.0/24
Signature Algorithm: sha256WithRSAEncryption
83:48:5e:60:43:a2:85:b1:ad:c9:41:3c:6b:18:06:ca:e0:ed:
82:a9:fe:af:ad:63:17:94:41:fa:7d:3f:a1:d5:3e:81:f8:6e:
b7:b9:89:a4:a4:56:87:1f:bd:8a:7b:fc:53:ce:75:c6:07:cd:
1f:59:9f:60:4a:db:99:76:e1:9b:aa:6e:86:ca:ae:9c:87:2c:
8b:97:a3:21:86:30:cc:40:95:42:bf:7c:6a:fa:92:de:26:49:
1d:91:b4:2a:7c:cb:00:f4:12:e4:ab:0e:41:c5:9c:14:34:a6:
2a:3c:49:22:95:f4:33:1c:38:78:2e:eb:5e:22:75:f4:84:7d:
0e:de:72:c7:3d:d2:e0:f2:4a:9a:6a:36:b5:6c:ef:5b:64:f8:
89:51:0e:9c:f4:dd:42:21:d7:34:e4:3d:62:29:81:4d:47:3f:
27:5e:e1:61:95:cb:56:d3:65:1e:77:bd:04:5e:d2:1a:e8:c1:
6e:9f:7a:45:56:d5:51:c0:b4:2e:b1:a1:27:e1:43:06:19:f9:
05:be:bb:50:b4:37:01:0f:9e:e4:39:83:e8:f7:3e:9b:62:49:
fc:4c:5f:ea:1d:05:cb:26:d6:ce:43:82:17:75:cb:33:b5:a7:
5d:d7:20:dc:86:2a:1e:e8:1e:c1:f2:e3:69:1a:c6:e9:4d:43:
eb:d6:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:53:50 2024 by rpki-client on console-fra.rpki-client.org