Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8jDikwSkE3xSdeK8JKtQpaVefUk.roa
File: 8jDikwSkE3xSdeK8JKtQpaVefUk.roa (raw, json)
Hash identifier: wK5K/r3EIlGl2M+Sotqm8/+xUAZaoWhLduH444dcRUk=
Subject key identifier: F2:30:E2:93:04:A4:13:7C:52:75:E2:BC:24:AB:50:A5:A5:5E:7D:49
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A45700BC6157788E111E29C9E6C09
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8jDikwSkE3xSdeK8JKtQpaVefUk.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 45.138.211.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:45:70:0b:c6:15:77:88:e1:11:e2:9c:9e:6c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f230e29304a4137c5275e2bc24ab50a5a55e7d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:3d:f6:dc:05:b3:d2:2a:4e:63:9a:2c:ae:
ca:dd:c4:fc:3f:5b:7d:3c:0f:ad:aa:1b:81:0c:30:
43:05:d1:62:50:9b:84:ff:41:3d:6e:f0:60:bd:5e:
d5:30:1a:cb:ad:21:39:82:1d:d9:5c:39:17:71:5a:
36:8a:17:de:4f:fa:e3:49:71:9d:ab:d2:91:a9:49:
8b:10:dd:2f:ea:c8:c3:21:fb:b5:37:9d:66:e5:5a:
a2:ce:62:c3:13:98:4f:bb:9e:f2:67:34:89:1e:6f:
74:8f:3d:a6:7a:b2:ea:65:f7:e0:86:9f:20:89:4e:
0d:b0:42:5e:02:c6:02:09:e7:64:10:09:1b:fa:ea:
64:21:66:a3:e6:79:d9:59:3e:3f:9f:17:0d:d2:66:
10:cb:79:fd:1e:b0:8a:52:77:bb:0f:af:35:b5:f2:
15:8f:a5:99:24:e2:09:f1:8b:d0:55:00:93:c2:55:
43:3d:82:f3:2f:1e:21:c3:a6:a4:60:88:77:60:85:
1c:0b:e3:8c:2b:ca:a0:93:07:db:ab:3d:bf:ff:4b:
6b:00:0f:9a:75:b1:8f:a5:bd:ef:2e:a9:9d:b7:20:
bd:41:f0:b1:72:7a:11:f7:a5:17:a6:b8:c8:c3:74:
52:2b:ff:2c:ed:c0:ae:b0:26:03:97:25:6c:4f:8b:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:30:E2:93:04:A4:13:7C:52:75:E2:BC:24:AB:50:A5:A5:5E:7D:49
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/8jDikwSkE3xSdeK8JKtQpaVefUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e5:ae:03:e8:9f:e8:00:c9:45:70:10:81:cf:fe:53:f2:79:
82:f8:c7:2a:93:16:7d:ab:42:bf:3e:3a:43:fa:03:d6:94:eb:
9a:ea:2c:7c:71:3f:40:d7:3d:ae:58:29:f1:df:70:af:c3:6f:
20:7e:1c:32:e9:94:5e:95:f2:4d:2f:b2:3a:e9:4b:68:8c:d4:
35:d4:28:41:7a:fb:27:fb:c5:0e:ad:a0:0e:42:d5:6e:4e:f5:
66:c8:de:c4:4c:77:38:85:ac:a6:a6:56:9e:18:f8:79:40:ba:
c1:f8:b9:e3:77:90:c8:07:bb:f3:da:d8:3d:8c:86:43:5a:f3:
89:c2:4f:7b:49:37:ed:fb:93:18:9c:f0:5b:95:df:6d:03:cb:
14:e1:33:c7:f1:99:67:f0:6d:50:e5:a6:3a:bc:32:04:6d:e7:
65:5d:ab:b1:1a:7e:11:7b:96:d7:99:80:24:89:e8:63:8d:1b:
1d:a4:8a:40:f0:40:3c:b7:fd:1f:0f:38:14:05:96:16:ac:1e:
39:f7:48:95:59:10:08:1d:3f:6e:32:37:dd:4c:63:bc:2b:d4:
02:f1:8f:5f:60:3a:fe:7f:98:93:e7:de:e7:29:9a:fb:c2:d1:
82:3c:e1:43:09:b1:5a:9c:6f:e6:99:5f:6f:0b:1c:7e:a0:f6:
b3:4b:85:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:32 2025 by rpki-client