Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-I3qnAOvfhfVsxH1xXpD5cIl918.roa
File: 1-I3qnAOvfhfVsxH1xXpD5cIl918.roa (raw, json)
Hash identifier: hhkl6UzgcMeqp5ibI0LxsLbvTliehtKFpENfEfo9uxE=
Subject key identifier: F8:8D:EA:9C:03:AF:7E:17:D5:B3:11:F5:C5:7A:43:E5:C2:25:F7:5F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CC79521CCAD4D61BD18579038CC3CD983
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-I3qnAOvfhfVsxH1xXpD5cIl918.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211376
IP address blocks: 45.131.1.114/32 maxlen: 32
194.116.228.174/32 maxlen: 32
2a0f:b700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:21:cc:ad:4d:61:bd:18:57:90:38:cc:3c:d9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f88dea9c03af7e17d5b311f5c57a43e5c225f75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:26:74:83:9e:54:ef:c6:52:8f:d4:fc:03:
ae:88:67:fa:0e:75:61:3f:37:98:d3:c7:27:9f:ee:
17:de:3b:06:c6:43:da:71:c0:97:2e:35:d4:58:bf:
07:e4:c5:bb:c0:62:38:a7:bc:05:2a:5b:85:12:3e:
d3:5e:25:82:e8:b9:67:e0:7b:64:11:46:79:8c:30:
b6:c2:09:23:88:a9:bc:53:53:49:27:b0:5a:52:cf:
69:b3:0c:83:83:b0:af:a1:73:ea:08:1c:fe:d9:bf:
eb:0d:96:38:f1:df:b5:5b:1e:8f:08:87:50:1e:e9:
fa:9f:61:22:aa:69:a9:86:1e:6b:b1:9d:9c:0f:ba:
99:d0:05:1c:a5:93:45:87:7b:33:54:83:0a:83:98:
b3:83:81:52:ef:77:89:d3:79:f5:79:07:be:8a:be:
15:dd:58:da:91:93:c3:8a:4a:be:45:7c:7e:fd:e5:
e2:7f:d7:25:48:d2:a0:51:7e:dd:42:ca:7c:e7:2e:
06:35:30:a5:02:66:7f:cc:f7:f6:ac:7b:b8:24:20:
11:df:46:be:c5:0d:04:4d:c2:c4:5e:a3:ab:b5:5f:
17:d3:e8:88:5f:74:27:07:b7:42:d7:03:6a:ba:bd:
7b:75:29:8b:21:46:d2:13:fe:f0:c9:6b:0b:19:f5:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:EA:9C:03:AF:7E:17:D5:B3:11:F5:C5:7A:43:E5:C2:25:F7:5F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-I3qnAOvfhfVsxH1xXpD5cIl918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.1.114/32
194.116.228.174/32
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
6f:5c:9b:56:e5:eb:1f:08:a3:25:cd:c5:12:81:d9:f8:26:b6:
50:f5:c6:86:62:d6:19:46:cc:da:b6:70:4a:df:56:43:8f:83:
0d:8b:c8:0c:47:0e:6d:3e:e1:52:aa:d5:70:a4:04:42:5e:cb:
ff:fc:39:11:39:61:b8:bb:a1:9f:5c:6d:fe:1d:46:48:02:76:
6c:67:67:68:77:4d:3c:8e:c8:57:28:2f:3b:9a:ed:43:15:3d:
3f:49:41:30:92:68:86:80:02:0b:64:61:ee:29:e1:08:0e:d7:
53:33:59:15:10:ba:18:4f:38:c3:f2:a5:c3:94:8f:01:1e:00:
71:b4:2d:e6:0a:77:a1:c8:80:07:ea:cd:ac:33:39:91:d3:b3:
a9:eb:48:f4:e6:ca:60:a9:ee:a5:dd:a1:ff:55:b9:bc:63:95:
5e:f2:62:68:b3:c5:b7:df:41:13:06:93:20:49:3a:12:ff:c7:
57:93:2b:6b:69:b7:6f:05:04:5e:19:f5:23:b4:32:fb:cd:6c:
9e:1f:d8:ac:dd:60:79:fc:83:fb:27:a5:8f:a6:48:ce:b2:c8:
cb:d3:90:f3:13:45:53:ec:0c:2f:4a:05:d6:e2:e5:a6:00:5c:
26:e6:67:ff:55:8c:81:03:c6:f1:b8:12:f8:fb:37:57:c8:a4:
f0:0c:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:32:46 2024 by rpki-client on console-ams.rpki-client.org