Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/8InkRh5Wj50wupapEt3xMMDv2FM.roa
File: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (raw, json)
Hash identifier: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=
Subject key identifier: F0:89:E4:46:1E:56:8F:9D:30:BA:96:A9:12:DD:F1:30:C0:EF:D8:53
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 01942444B636B252AD0C8369D3AC0701E54B
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/8InkRh5Wj50wupapEt3xMMDv2FM.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197415
IP address blocks: 45.146.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b6:36:b2:52:ad:0c:83:69:d3:ac:07:01:e5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f089e4461e568f9d30ba96a912ddf130c0efd853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:e8:18:ad:3a:e1:ad:5b:86:8b:f8:29:a3:
ae:7e:8a:f0:0a:fd:ea:cd:95:1f:a0:fd:6e:f0:ed:
2c:cc:5d:63:12:7c:5e:b7:bf:66:18:a2:ea:16:23:
66:4e:2e:4b:58:29:61:3b:7b:83:8d:44:1d:3b:da:
31:96:dd:a8:6d:7d:2e:5c:24:ed:d9:13:90:22:b5:
dc:82:b2:8a:86:c0:6a:00:fc:7b:41:f5:7b:a6:81:
58:3c:63:83:b8:ae:a3:b0:87:8f:dc:12:ef:78:a6:
63:87:9d:c5:19:73:03:43:c5:7c:f3:c1:96:94:e6:
93:e4:c1:fe:c6:f5:c2:a2:77:9d:fa:44:d1:9b:19:
1f:85:96:59:ba:96:92:d8:7d:33:78:e3:b9:f5:4d:
b3:66:df:1c:3e:f6:4e:83:58:c3:58:b9:dc:de:ec:
02:4c:ce:49:6e:a5:1d:34:fe:c7:89:72:0d:d9:c3:
cb:43:c0:3d:37:87:f3:84:7c:2e:3a:4e:a3:d6:79:
a9:94:77:18:93:33:1a:8e:78:e8:57:98:81:c7:4d:
ee:b9:4b:37:49:e6:fb:ca:ba:8a:09:9f:14:fa:a0:
44:71:80:8a:2d:be:50:41:5c:e3:24:cd:1a:d7:cd:
d1:9f:cc:8d:b2:ba:86:ce:4b:f7:18:6d:a1:91:e3:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:E4:46:1E:56:8F:9D:30:BA:96:A9:12:DD:F1:30:C0:EF:D8:53
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/8InkRh5Wj50wupapEt3xMMDv2FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.96.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:52:de:7a:65:ce:3a:9d:d5:11:74:ce:6d:46:8c:3c:42:c3:
c7:79:8c:86:2d:58:a8:a9:37:ad:6f:d6:19:c1:db:e4:54:e3:
1a:f1:67:c3:6f:e5:b0:70:61:b6:8f:d4:a7:f6:26:82:75:b6:
9d:17:a3:90:df:e0:6b:1f:29:18:d5:cc:20:0c:94:f2:fa:c4:
35:01:1f:3d:c4:7a:ba:5e:8d:4c:32:83:fb:2e:90:68:a9:bf:
4f:ae:c8:d6:f7:69:45:0c:d2:e7:04:3e:cd:7b:e1:0d:6d:cb:
f0:26:46:99:81:87:e8:83:df:c7:d0:e7:cb:fe:c4:e9:c1:e1:
44:ea:08:5e:2a:8d:77:19:e2:be:61:0e:87:64:00:4c:06:01:
90:93:54:5b:87:2e:ac:4f:20:31:6d:c2:ca:cb:54:ee:6a:a3:
77:56:3e:16:79:31:97:c5:9e:45:ee:1a:8f:dd:b3:69:38:ba:
f9:6b:1b:10:93:29:f9:3f:56:ad:b7:ba:b1:4d:c0:9e:cb:f9:
41:2d:6e:54:73:eb:e2:4a:a5:90:5c:40:95:5e:3a:70:a2:40:
e9:22:a9:04:e2:2c:6d:6b:eb:e1:8d:33:56:ba:3f:25:89:91:
bd:2c:ba:b0:f3:71:85:c2:e5:a6:90:df:ba:8c:c2:fa:6e:8b:
33:1c:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:41 2025 by rpki-client