Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/GIIn6gB4WGyrYi8kevc6logItv8.roa
File: GIIn6gB4WGyrYi8kevc6logItv8.roa (raw, json)
Hash identifier: eSiKQ5MZghqoynGvXHrSXL8lZ1c2qiggIYyLtEJ6EOs=
Subject key identifier: 18:82:27:EA:00:78:58:6C:AB:62:2F:24:7A:F7:3A:96:88:08:B6:FF
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 018CC4250DEA011EF570407B60C795670E1B
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/GIIn6gB4WGyrYi8kevc6logItv8.roa
Signing time: Mon 01 Jan 2024 08:30:11 +0000
ROA not before: Mon 01 Jan 2024 08:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208905
IP address blocks: 45.80.88.0/23 maxlen: 23
45.80.89.0/24 maxlen: 24
45.80.88.0/22 maxlen: 22
45.80.88.0/24 maxlen: 24
45.80.90.0/23 maxlen: 23
45.80.90.0/24 maxlen: 24
45.80.91.0/24 maxlen: 24
78.138.56.0/24 maxlen: 24
78.138.57.0/24 maxlen: 24
78.138.56.0/23 maxlen: 23
78.138.60.0/24 maxlen: 24
78.138.59.0/24 maxlen: 24
2a0e:9cc0::/32 maxlen: 32
2a0e:9cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:0d:ea:01:1e:f5:70:40:7b:60:c7:95:67:0e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Jan 1 08:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=188227ea0078586cab622f247af73a968808b6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:1d:17:69:62:b7:9b:e5:fc:41:8e:e8:41:
f2:22:7f:7c:91:be:35:a4:38:08:08:7f:e6:9f:84:
74:76:63:c4:30:58:be:42:ce:52:09:3a:c6:14:b1:
c1:03:0c:cb:ce:a4:0b:b0:cb:fe:e9:f7:0d:93:19:
c5:55:de:da:19:53:1b:71:e4:76:6f:3a:74:cc:3d:
e9:5b:d4:28:da:c3:27:1f:71:0d:1b:b4:dc:8f:54:
79:18:85:11:fc:00:66:eb:fc:46:4d:18:84:14:a5:
6b:e6:a9:7a:93:f5:f7:9b:d0:bf:f6:38:fc:cd:bf:
41:cd:3f:0a:34:27:cb:d8:bf:76:c6:99:e3:f8:af:
2b:68:d2:37:47:ee:02:d9:fc:80:7c:51:e2:11:d6:
5b:0e:2c:49:3e:6b:91:ea:62:12:e1:76:9d:ae:5a:
8c:c0:61:57:1a:c5:b2:37:aa:07:8b:e5:80:ea:28:
ce:47:42:99:94:32:5f:cd:95:40:ec:ab:40:6b:01:
b3:58:25:ff:9e:a5:ea:07:df:24:41:90:0a:e6:60:
34:e6:e8:73:4b:f9:ac:be:0d:b4:7e:50:4f:8b:87:
db:95:12:36:6c:69:19:01:32:82:d6:81:6c:47:c5:
ee:c3:c0:30:b4:d5:84:bc:af:b3:ac:58:73:ae:9c:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:27:EA:00:78:58:6C:AB:62:2F:24:7A:F7:3A:96:88:08:B6:FF
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/GIIn6gB4WGyrYi8kevc6logItv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.88.0/22
78.138.56.0/23
78.138.59.0-78.138.60.255
IPv6:
2a0e:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
45:06:6f:86:22:a7:26:70:bd:38:1a:06:b8:4a:68:c0:9f:cd:
c4:79:55:39:49:93:cb:97:02:75:da:4b:7b:dc:d2:f9:2f:fe:
29:5c:39:ab:bf:84:b0:65:95:02:8b:24:5b:6d:bc:03:e6:46:
87:b7:4f:db:18:90:a0:41:02:c9:46:02:88:5a:f8:e3:e6:98:
21:f9:be:c2:02:6c:af:72:8c:63:95:3e:dc:bf:fc:b3:00:d4:
05:29:b0:ac:ca:b7:ee:21:ad:c0:36:ce:cc:28:29:8b:34:b3:
9b:2e:b8:20:be:51:f7:ce:18:ee:a4:c8:e6:d6:09:8d:05:f3:
5e:37:53:02:b8:62:2f:04:0e:6b:a0:08:4a:c6:36:7c:13:6b:
ab:ff:02:39:e8:7f:d9:aa:50:38:6f:fc:6b:37:bf:09:0c:df:
61:ad:6b:d8:e2:58:a6:2d:21:2b:76:6e:c2:73:ac:6b:72:d0:
2e:4e:52:22:99:53:9e:f7:84:24:91:aa:8e:b4:72:8f:bf:5e:
4b:a4:0b:2a:6d:43:98:83:99:11:d5:8a:f7:f5:20:4a:2e:ff:
63:0b:c8:85:45:73:17:d4:03:89:97:be:a4:b7:c3:b4:5a:79:
67:b4:49:68:8b:49:89:2b:ff:e3:c5:79:28:88:c6:a5:0f:6e:
96:59:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:41 2024 by rpki-client on console-ams.rpki-client.org