Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/8OuJmUhF148eQvfsKCvHSBy3Un4.roa
File: 8OuJmUhF148eQvfsKCvHSBy3Un4.roa (raw, json)
Hash identifier: YjvDbL0PmQtTFnYaDr7ATuEuK70pl1aSOc9TuE5pf6E=
Subject key identifier: F0:EB:89:99:48:45:D7:8F:1E:42:F7:EC:28:2B:C7:48:1C:B7:52:7E
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 018CC5007D17A9F0FF174A2AEDC705863C6A
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/8OuJmUhF148eQvfsKCvHSBy3Un4.roa
Signing time: Mon 01 Jan 2024 12:29:52 +0000
ROA not before: Mon 01 Jan 2024 12:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212009
IP address blocks: 45.9.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7d:17:a9:f0:ff:17:4a:2a:ed:c7:05:86:3c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Jan 1 12:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0eb89994845d78f1e42f7ec282bc7481cb7527e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:bd:9b:ac:6e:dc:bf:00:06:cf:bc:c1:3b:
0e:33:62:0e:5d:8f:1f:1f:98:7d:2d:49:ae:46:a1:
0e:f5:25:e8:7e:b5:27:e4:53:fd:e1:85:ce:93:d9:
a5:66:b8:2b:2d:ab:71:84:37:f4:54:ba:c4:d9:ae:
02:ed:53:e0:1b:55:82:1a:9b:6b:36:3b:d7:63:3c:
b2:cc:b8:5d:89:8e:7f:cb:72:84:96:c0:84:0b:48:
61:0e:03:57:a2:a8:88:06:53:bb:19:78:82:96:6e:
37:63:8e:6b:7a:47:f9:c4:9a:dd:2e:52:14:ef:0e:
42:29:53:c9:a2:b8:70:c3:15:6d:fd:2a:a1:54:0e:
2b:d5:3d:0b:a9:0a:cb:01:e4:b0:e9:55:cb:72:f0:
e8:17:f9:6b:05:0a:1b:5c:b6:4a:f1:cc:f2:3e:3e:
fb:d8:65:ec:6f:5c:18:a1:3a:ac:72:54:04:2e:1f:
91:1b:c6:c7:af:e4:40:65:2d:54:41:c5:2c:14:fe:
31:7a:e6:ac:e8:66:cc:79:0e:9d:58:5e:57:d1:11:
f2:d2:44:c3:5a:6a:ad:12:8e:5e:79:5d:42:5e:27:
77:24:40:df:c0:0e:36:ff:d9:f8:d1:82:70:2b:a4:
63:25:a3:00:6b:41:44:51:e4:33:1b:73:b6:4e:e8:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EB:89:99:48:45:D7:8F:1E:42:F7:EC:28:2B:C7:48:1C:B7:52:7E
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/8OuJmUhF148eQvfsKCvHSBy3Un4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.77.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f4:c2:60:c5:fd:b3:46:8c:38:f7:d5:94:05:e9:5f:9a:bd:
b2:c6:bc:af:35:44:2e:0a:20:5f:98:ae:76:a0:33:8f:db:41:
ca:91:7f:db:3a:fb:4f:c5:a0:98:6d:77:a6:c9:65:ee:e1:d6:
3a:a5:9b:56:ed:e1:9e:c0:19:73:4e:5b:41:25:94:d2:63:d6:
80:11:5a:68:1f:ef:6c:b0:45:41:94:46:5a:3f:c3:a7:f3:2b:
37:88:f4:6d:26:59:5d:84:a1:73:3e:12:e4:5b:77:83:61:75:
52:32:59:45:85:76:11:d8:c6:d6:cf:ea:99:50:51:09:fd:b2:
56:1b:52:26:09:11:2a:f6:0d:2d:c5:05:3f:b2:1a:7f:36:49:
1a:2d:90:57:d0:a2:d2:fa:a9:a8:1f:a7:b1:92:8f:78:fd:cc:
86:1f:1e:9d:25:80:ed:1b:66:23:f9:6b:d5:b9:a8:13:89:1e:
48:ac:1c:cb:cd:5e:e2:5a:59:dd:9e:fb:c1:8e:51:72:22:5e:
94:3c:38:a1:9c:ea:7e:d5:0b:f3:93:6d:5b:37:99:28:ab:61:
d9:b5:50:29:26:ab:4c:60:0d:40:6e:42:25:31:c8:bb:4e:d7:
16:74:1c:e8:91:9f:d9:61:c1:eb:4f:e4:f3:0d:c8:d4:2f:52:
7b:b8:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:10:39 2024 by rpki-client on console-fra.rpki-client.org