Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/u1sfdYEmKGqZLmw1LMUOZk10zn8.roa
File: u1sfdYEmKGqZLmw1LMUOZk10zn8.roa (raw, json)
Hash identifier: xTtdFiEAIRfpPnhKAqhRLvvrt8feeBsI/8jprbcdJWs=
Subject key identifier: BB:5B:1F:75:81:26:28:6A:99:2E:6C:35:2C:C5:0E:66:4D:74:CE:7F
Certificate issuer: /CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Certificate serial: 018CC425610BEC2DED572BF64DB49199F5E4
Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/u1sfdYEmKGqZLmw1LMUOZk10zn8.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209048
IP address blocks: 45.8.244.0/24 maxlen: 24
45.8.246.0/24 maxlen: 24
45.8.245.0/24 maxlen: 24
45.8.244.0/22 maxlen: 22
45.8.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:61:0b:ec:2d:ed:57:2b:f6:4d:b4:91:99:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb5b1f758126286a992e6c352cc50e664d74ce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fd:b2:6f:32:ae:48:7d:30:96:fd:d5:6c:fa:
a6:4e:ee:d8:ae:c4:ea:d2:46:29:29:cc:8f:ad:33:
23:fa:12:f9:84:3b:9f:d5:2e:72:6b:b6:f3:a6:6d:
fc:8f:11:9d:79:9a:e8:94:6d:80:23:e1:f9:e7:e4:
66:da:e8:b6:4b:73:c3:f8:74:c5:50:54:93:09:36:
2d:d2:5f:51:14:31:36:58:a0:95:e0:c9:59:f9:e0:
dc:ab:d4:44:53:71:76:fd:6a:9d:ae:2f:d6:e4:f9:
79:42:a4:22:b3:4e:33:f8:df:10:70:77:4b:bf:3d:
fa:97:06:df:ac:0c:d8:51:4a:9b:82:83:11:9f:32:
b0:05:03:10:e4:8a:b9:dd:2e:53:d1:16:54:ff:3e:
34:f6:3c:ce:6c:d8:dd:3f:4c:ef:bc:56:30:75:8c:
88:74:47:38:16:c8:ac:f9:4b:40:12:9d:17:42:90:
e3:15:3d:09:f3:63:dc:04:3f:c1:6c:7d:64:bb:ef:
1e:12:da:da:60:15:8b:cc:ac:11:f6:1a:78:6c:25:
f8:29:fc:12:fe:92:d5:68:68:80:4b:4b:f5:ac:f7:
70:f9:f3:68:80:e9:9d:78:a5:aa:29:cc:4a:87:e1:
cc:d4:8c:f1:48:66:7e:e0:20:6e:bd:31:eb:ce:2e:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:1F:75:81:26:28:6A:99:2E:6C:35:2C:C5:0E:66:4D:74:CE:7F
X509v3 Authority Key Identifier:
keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/u1sfdYEmKGqZLmw1LMUOZk10zn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.244.0/22
Signature Algorithm: sha256WithRSAEncryption
46:6d:5d:8e:f3:24:5a:52:6f:e9:c5:37:f3:63:ee:96:6d:99:
ea:3e:ed:a7:df:bc:37:cf:32:2e:ab:eb:42:08:a6:fe:61:85:
ea:2e:bf:d4:0e:83:ba:50:4c:87:08:fe:4e:7a:a3:ad:a8:58:
7b:fb:58:5f:00:0b:f1:65:56:b4:68:b9:a0:b3:f9:db:dd:aa:
64:35:05:71:6f:5b:d4:ab:09:62:2b:98:ed:9c:fb:46:9b:60:
0e:a8:39:d6:84:8b:76:3e:19:f6:8d:b9:89:38:1f:a0:03:00:
00:70:bf:57:c9:08:1b:08:a6:d8:a3:12:27:dc:4c:8e:66:50:
38:ec:e0:9f:1e:aa:34:b8:2b:f2:99:cb:6d:a9:08:78:2d:93:
49:48:cc:de:d1:49:8e:9f:1a:72:e3:0a:8a:08:e7:8d:2e:7b:
92:ae:e2:4b:f5:e7:34:3e:4e:d5:32:e6:65:61:0a:ad:74:e7:
c1:ed:f9:27:14:a2:d1:81:25:3d:bb:26:74:cf:5e:d4:a0:d2:
eb:98:94:b5:10:fa:eb:ce:96:86:01:b9:2e:6f:d0:43:e0:a3:
51:14:f0:e0:b4:ba:25:11:3a:cc:a1:3b:be:a7:44:50:81:7f:
19:3a:d8:73:8a:a0:5a:7f:94:76:f6:06:30:73:f1:d6:3a:6c:
5a:b2:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:28:30 2024 by rpki-client on console-fra.rpki-client.org