Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/mlR8XcTy1SlxaFdoQ31oI1eGLFY.roa
File: mlR8XcTy1SlxaFdoQ31oI1eGLFY.roa (raw, json)
Hash identifier: vxMWG4W9+8gRPK9Vu4qwVZpJXuaeu3SLWH9vTd63/CU=
Subject key identifier: 9A:54:7C:5D:C4:F2:D5:29:71:68:57:68:43:7D:68:23:57:86:2C:56
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 0190618B037B3350A40961EBDB76E737AFEC
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/mlR8XcTy1SlxaFdoQ31oI1eGLFY.roa
Signing time: Sat 29 Jun 2024 01:10:18 +0000
ROA not before: Sat 29 Jun 2024 01:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204641
IP address blocks: 45.80.148.0/24 maxlen: 32
45.80.149.0/24 maxlen: 32
45.80.150.0/24 maxlen: 32
45.80.151.0/24 maxlen: 32
185.244.129.0/24 maxlen: 32
185.244.130.0/24 maxlen: 32
185.244.131.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:61:8b:03:7b:33:50:a4:09:61:eb:db:76:e7:37:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Jun 29 01:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a547c5dc4f2d52971685768437d682357862c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:44:6f:49:f1:4e:b1:1e:fa:67:bc:85:16:09:
a0:f4:bd:f7:01:5f:11:7d:4e:6b:90:ee:d7:f6:0a:
4c:d7:3a:f4:ad:ef:9c:cb:07:ab:e4:57:74:a1:3e:
12:b1:82:40:39:a3:b8:89:0a:66:a6:4d:01:21:64:
8b:1b:15:a1:35:dd:59:cc:c4:76:14:14:c2:f1:6c:
9b:c1:90:5e:1d:be:35:ae:bb:86:d6:24:32:89:16:
10:a6:50:89:3d:93:d0:c9:ee:e9:1d:27:fe:2f:5e:
34:f9:5e:ae:8d:d1:de:ff:f9:c0:76:50:c7:35:f6:
a5:ea:46:80:67:f7:a8:66:f7:33:db:ef:27:c9:44:
86:99:93:c4:12:3e:91:8b:56:8b:ed:fd:e9:14:7e:
4d:1f:e6:df:4d:21:e6:50:f4:88:fc:93:5f:f8:f0:
55:58:f1:b7:8f:78:d4:49:06:af:fe:0c:a4:c5:bc:
7e:47:a0:28:f8:ac:ef:88:25:52:09:5c:88:e0:d5:
4e:59:72:c4:a4:17:69:02:a8:90:79:68:08:08:b2:
76:ed:cc:69:55:b5:04:e8:96:27:6b:aa:61:90:41:
b7:0e:b2:3c:8b:f6:c3:f0:dd:53:5b:6a:03:f4:fe:
11:b9:0f:e7:46:a9:fd:ca:6e:ed:30:68:2a:03:cf:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:7C:5D:C4:F2:D5:29:71:68:57:68:43:7D:68:23:57:86:2C:56
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/mlR8XcTy1SlxaFdoQ31oI1eGLFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.148.0/22
185.244.129.0-185.244.131.255
Signature Algorithm: sha256WithRSAEncryption
5b:2e:05:27:7d:32:38:5d:ff:76:7d:37:f3:08:ed:b0:fd:26:
73:4d:90:fd:ef:98:66:27:8d:f6:97:37:dc:85:27:1e:43:7e:
45:e0:6b:04:d0:42:14:74:fd:0b:70:d8:b0:91:f4:f6:d8:7c:
85:e6:2a:c3:4d:c7:61:a6:45:74:97:b3:9e:7c:98:0e:3e:48:
70:0d:04:e5:d0:06:4a:83:ad:de:8c:cc:84:f9:6d:1f:1c:2d:
54:90:d3:f1:a8:64:7f:7e:e3:03:8a:34:46:bd:a9:9e:3f:ab:
3e:ba:e5:de:e7:08:63:01:4f:dd:98:b5:c8:3f:74:ac:6a:a4:
0d:29:b4:95:78:a3:d2:08:f3:17:3f:b4:b7:9f:a3:47:e1:59:
db:6e:66:57:98:85:34:69:63:a9:78:ee:18:cd:1b:07:a3:bb:
e4:d4:13:cb:58:9c:e9:49:e0:e4:3f:85:ea:38:d7:d8:d5:5f:
96:19:c2:d1:1c:2d:44:48:03:01:08:5a:00:8a:be:cc:36:e5:
b7:bc:6a:d6:a4:f3:28:87:96:7f:09:c0:b9:da:a4:0b:7a:b5:
b4:80:d6:19:8a:a8:a0:e5:44:8f:d4:15:e0:51:e7:27:bf:60:
6a:70:40:18:2b:b1:65:52:9c:1c:09:13:c6:dc:5e:03:c5:76:
b6:d2:83:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:56:02 2024 by rpki-client on console-fra.rpki-client.org