Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/8BVq6sCa0Jyr3-NkhtxboYS-I0E.roa
File: 8BVq6sCa0Jyr3-NkhtxboYS-I0E.roa (raw, json)
Hash identifier: IKYFQw1mn7ImCe17M/aik74vHDDkmU11JTog51gXIM8=
Subject key identifier: F0:15:6A:EA:C0:9A:D0:9C:AB:DF:E3:64:86:DC:5B:A1:84:BE:23:41
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 018CC87139FDDA3E859340DC0317A7E7ABA4
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/8BVq6sCa0Jyr3-NkhtxboYS-I0E.roa
Signing time: Tue 02 Jan 2024 04:31:52 +0000
ROA not before: Tue 02 Jan 2024 04:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47775
IP address blocks: 213.5.105.0/24 maxlen: 24
213.5.104.0/24 maxlen: 24
213.5.104.0/22 maxlen: 22
213.5.104.0/23 maxlen: 23
213.5.106.0/24 maxlen: 24
213.5.106.0/23 maxlen: 23
213.5.107.0/24 maxlen: 24
2a02:1c8:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:39:fd:da:3e:85:93:40:dc:03:17:a7:e7:ab:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 2 04:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0156aeac09ad09cabdfe36486dc5ba184be2341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:d0:9f:b3:2c:19:0b:a0:6b:84:2b:a9:f9:
f4:77:ad:d6:d0:16:5f:29:35:3c:e0:b1:f5:49:c0:
90:10:fd:61:c3:f0:cd:99:d1:95:16:5e:5f:8c:cc:
94:75:29:f5:dc:8f:b4:fd:e1:59:ed:0c:46:8b:94:
87:1a:e2:44:10:35:8a:3a:f1:ba:89:e1:11:a7:e1:
85:5e:d9:1e:5f:3d:d4:d3:67:4b:ff:12:88:0e:53:
95:52:3c:a6:ff:ac:00:15:a1:28:8a:35:c1:93:6e:
2d:b7:a0:ca:11:f3:b7:1b:7a:2d:35:24:c9:b2:23:
21:df:45:98:d0:cf:81:32:78:fc:b9:23:64:b1:41:
1e:4e:76:7d:a4:fe:65:68:60:49:35:e5:8f:8a:1b:
31:04:46:1b:04:22:40:da:c4:d9:53:26:f0:c4:9c:
22:ad:ff:fd:24:50:13:3c:70:21:af:41:f5:d8:1f:
d5:ab:5a:90:27:66:fe:19:f9:89:d8:de:e7:64:2a:
f2:c8:5a:16:3e:bf:2e:9c:87:59:8c:9c:47:e5:1e:
30:9d:9c:ea:39:38:51:3d:c3:6b:b1:07:77:0f:c3:
74:e1:a3:ea:14:02:09:86:57:c3:8c:89:cb:99:8c:
ec:44:4e:9c:65:e7:b0:06:1c:29:87:84:c4:6d:c3:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:6A:EA:C0:9A:D0:9C:AB:DF:E3:64:86:DC:5B:A1:84:BE:23:41
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/8BVq6sCa0Jyr3-NkhtxboYS-I0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.104.0/22
IPv6:
2a02:1c8:5::/48
Signature Algorithm: sha256WithRSAEncryption
52:94:6b:e5:f1:9f:9c:b8:91:ec:2d:29:78:68:0f:d5:93:16:
98:88:e3:ff:f4:7f:13:d7:7b:33:c6:41:68:b8:03:cf:44:ef:
81:f2:2f:f0:c2:f8:15:de:f7:81:28:cb:54:20:5e:2f:6b:79:
f2:24:35:f7:9b:b5:18:0d:ab:e5:d1:a3:13:0c:9b:73:c3:0f:
1d:f8:82:48:99:cd:f8:8d:ff:47:19:b7:1a:21:04:e9:90:ac:
8e:0b:d0:d6:40:37:f2:7b:df:c1:7c:54:f7:ff:ae:0d:7b:b2:
7f:aa:36:86:f7:ad:a1:54:99:56:93:00:b6:d3:6e:ee:af:d0:
ac:82:03:c6:da:fe:13:36:94:b4:c1:78:84:51:06:f7:ce:01:
a4:6e:e6:fb:28:ac:2e:89:28:36:12:4e:3a:5d:cb:74:78:0d:
34:ac:be:8f:31:ba:ee:fb:92:4e:26:95:33:27:1a:85:d6:06:
8a:2d:73:1a:2f:9e:2b:08:89:00:3b:ca:25:08:9d:9e:15:b9:
ab:83:92:dd:45:5e:49:cd:65:55:74:5e:ce:b4:8b:4c:af:45:
6c:27:dc:85:67:f9:7c:8b:f7:bb:b5:83:d8:d7:d2:77:21:7b:
a6:45:f6:40:96:4a:d4:11:12:50:be:72:ab:7e:a6:6e:49:28:
97:b2:85:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:00:09 2024 by rpki-client on console-ams.rpki-client.org