Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8D5FkW4weMVs3tfChHZNPnVQ5c.roa
File: l8D5FkW4weMVs3tfChHZNPnVQ5c.roa (raw, json)
Hash identifier: U0DdNm9XajIr/Njc+zizKg2brPz3aBG7wKKvYJFEr0o=
Subject key identifier: 97:C0:F9:16:45:B8:C1:E3:15:B3:7B:5F:0A:11:D9:34:F9:D5:43:97
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194DBB4326C1A0B857529E682F1777797D5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8D5FkW4weMVs3tfChHZNPnVQ5c.roa
Signing time: Thu 06 Feb 2025 14:40:06 +0000
ROA not before: Thu 06 Feb 2025 14:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 45.8.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:b4:32:6c:1a:0b:85:75:29:e6:82:f1:77:77:97:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 6 14:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c0f91645b8c1e315b37b5f0a11d934f9d54397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:e4:42:bd:b8:8d:b2:8e:9d:1a:b6:fe:90:
16:d8:eb:94:9f:24:6b:dd:26:09:a9:26:2d:f8:a0:
3e:cc:0d:d0:a4:41:a1:55:95:74:08:c3:18:10:95:
ef:25:0a:46:16:3b:ea:fb:d5:72:90:65:12:c2:2d:
af:b1:78:bb:f3:00:ce:ec:78:06:f7:95:d8:fc:85:
d7:65:b8:a5:08:bf:9c:d0:be:ef:58:40:cf:ec:75:
37:5b:63:ab:be:bf:1c:87:e1:14:6f:ce:44:4b:5e:
8a:ae:0d:38:52:a5:b6:5b:cb:e7:0e:19:42:a0:b4:
e5:a7:d6:d6:4d:05:ed:00:ef:31:c1:19:e6:48:cd:
1f:c2:cc:01:95:eb:a0:60:66:f8:9a:55:e6:8b:f8:
82:51:6e:4a:d0:f0:5b:2b:55:3b:b3:b2:3b:cd:99:
b0:d4:65:80:d8:f3:b7:bc:2a:e0:fd:8e:3f:67:ca:
b1:79:1e:33:5e:2c:f4:db:02:37:fc:3f:0d:11:e3:
8f:7e:a0:a4:08:60:18:d2:ce:70:ae:70:e3:7c:2f:
47:1c:cb:f1:49:0c:bf:eb:c5:27:77:70:51:b9:bd:
02:3f:e9:88:b3:1e:60:20:ed:b2:f4:df:15:01:c7:
9a:f6:f9:89:20:de:05:08:45:35:be:2a:56:f9:27:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:F9:16:45:B8:C1:E3:15:B3:7B:5F:0A:11:D9:34:F9:D5:43:97
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/l8D5FkW4weMVs3tfChHZNPnVQ5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ef:6f:d1:78:30:27:1d:3d:c3:de:ab:ab:88:fb:7f:2a:3b:
43:00:0d:6b:52:78:00:4f:5f:ef:af:d0:ad:c0:fe:54:22:73:
4c:2b:b6:45:29:5e:81:6b:1d:74:c0:dc:aa:7d:1a:38:3a:40:
f6:ba:3e:61:74:0a:e1:d6:a1:8d:17:8c:46:13:b3:19:bb:37:
44:96:54:b0:04:1a:7f:c4:4c:ce:93:54:81:7b:15:b3:cd:d1:
b3:9c:5d:74:8c:15:04:be:a1:22:23:d0:8e:d8:5e:9b:60:66:
eb:a9:04:31:f8:6a:1a:35:2a:d0:45:9b:bd:3e:58:af:d6:bc:
08:b7:ff:b6:fd:34:1e:05:af:3a:87:70:ac:3a:11:ef:ee:fb:
19:0f:8f:f3:c7:83:3e:17:5d:0e:e6:b7:03:fc:c2:cb:e1:da:
cb:56:0b:2c:c8:94:1e:19:6b:94:94:72:9f:2d:f4:59:f4:28:
bc:b7:d8:ce:ab:f8:66:04:5b:d4:d8:89:4d:1d:ff:6f:02:0f:
4c:11:6a:64:ab:5e:f5:9c:4e:34:1a:1f:02:ca:5b:f5:72:98:
2d:36:a3:e5:37:27:2d:5b:14:94:03:5e:94:ae:77:58:9c:3d:
b9:e6:b5:0f:be:0d:94:9d:b5:1a:cc:b7:c4:47:b8:6e:da:80:
bc:7d:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:12:46 2025 by rpki-client