Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/TOMl8RhMLcjd841rjNvTKhMvsfc.roa
File: TOMl8RhMLcjd841rjNvTKhMvsfc.roa (raw, json)
Hash identifier: jw1t+XHX+OZQwL0EEZ/quZJ227VPPfB7LkVYvByBKI0=
Subject key identifier: 4C:E3:25:F1:18:4C:2D:C8:DD:F3:8D:6B:8C:DB:D3:2A:13:2F:B1:F7
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 018CC424753064443FDB3E43720FD2CD190D
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/TOMl8RhMLcjd841rjNvTKhMvsfc.roa
Signing time: Mon 01 Jan 2024 08:29:32 +0000
ROA not before: Mon 01 Jan 2024 08:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49103
IP address blocks: 45.15.248.0/22 maxlen: 24
45.86.196.0/24 maxlen: 24
45.86.196.0/22 maxlen: 24
45.86.199.0/24 maxlen: 24
45.132.168.0/22 maxlen: 24
45.86.198.0/24 maxlen: 24
45.86.197.0/24 maxlen: 24
45.156.196.0/24 maxlen: 24
45.156.199.0/24 maxlen: 24
45.156.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:75:30:64:44:3f:db:3e:43:72:0f:d2:cd:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jan 1 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ce325f1184c2dc8ddf38d6b8cdbd32a132fb1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:f9:ab:b7:c2:a3:ce:da:b7:72:83:18:25:
ed:42:52:67:fc:2d:48:c7:2f:fe:5a:bf:09:4e:b6:
d3:34:13:37:48:c4:db:67:4c:d4:41:79:2b:49:9a:
5b:ff:bd:f5:87:37:d7:bc:61:31:76:63:71:ca:c2:
69:8f:92:5c:9d:a5:82:8f:fe:ea:bd:3a:ec:27:a6:
f1:59:ca:7b:99:f5:dc:00:1f:dc:03:3a:81:4a:72:
92:5a:db:48:74:86:e7:b5:23:3e:81:fd:7e:81:c9:
86:3f:23:d1:3c:31:40:30:1e:53:84:61:b8:9e:9e:
e3:b7:a1:70:3e:73:5d:1f:2d:34:bb:6d:1c:83:e9:
0c:9d:cb:a0:c5:02:2a:9d:1d:63:e6:8e:57:8d:26:
c6:11:4d:61:7d:fe:cc:75:d8:52:2b:3c:eb:d8:8d:
78:a4:ff:2e:f1:c1:1f:46:1d:a1:6d:5b:69:cb:14:
68:c9:26:5a:bf:39:f8:61:97:0c:0d:62:fa:94:9f:
96:e9:f2:a3:87:cd:f8:75:69:e6:8a:c2:e1:a6:86:
a9:bc:85:6e:85:8a:7d:78:21:0a:91:59:80:82:b5:
54:7f:89:ed:dd:3a:d5:17:3a:4a:00:a9:1f:e6:49:
50:da:d9:6e:b4:74:ed:d1:31:e3:45:ac:98:57:97:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E3:25:F1:18:4C:2D:C8:DD:F3:8D:6B:8C:DB:D3:2A:13:2F:B1:F7
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/TOMl8RhMLcjd841rjNvTKhMvsfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.248.0/22
45.86.196.0/22
45.132.168.0/22
45.156.196.0/24
45.156.198.0/23
Signature Algorithm: sha256WithRSAEncryption
64:a6:1a:18:4d:96:fe:6d:eb:d7:30:d4:6d:9f:0c:44:64:4d:
96:5d:80:f0:6e:13:5c:1f:a4:f1:5b:34:dd:07:42:d7:9f:ba:
ee:eb:4e:e5:cc:df:f8:9c:c6:24:29:8c:d9:32:77:92:68:e1:
93:12:30:a5:2e:d2:b3:97:b6:40:1a:b7:2e:28:e5:31:6a:b3:
2d:9e:ea:a0:47:0f:35:12:b0:a4:67:60:ea:6d:5c:f0:9f:73:
c4:7f:8d:0c:55:53:47:15:46:b9:0f:e6:71:6d:ed:31:1e:c3:
6b:78:aa:bf:dd:74:08:ec:d4:55:41:e0:07:da:fe:a4:77:32:
cf:04:06:dd:92:fc:65:1f:93:6a:fe:cd:2e:ff:0b:07:81:18:
7b:1d:30:8d:3e:a5:bf:6b:35:60:ad:83:12:96:58:b1:eb:21:
02:87:26:0a:4a:19:96:34:4c:0b:d3:25:8c:ed:be:f8:40:70:
e3:29:b0:2f:e8:17:4a:24:a5:b4:dd:67:1c:e6:72:7e:04:46:
f4:ab:a5:f5:9e:f2:1a:9d:4f:fa:3e:95:de:b7:80:ee:15:45:
2e:fb:03:50:1a:55:04:8c:cd:a9:56:42:3f:42:6e:89:9c:62:
db:86:70:a4:56:85:3f:b5:05:0b:27:a5:62:db:c2:17:62:43:
18:93:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:22:38 2024 by rpki-client on console-fra.rpki-client.org