Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/8EgsfRmJh9mHd5U9GquCG9McXqI.roa
File: 8EgsfRmJh9mHd5U9GquCG9McXqI.roa (raw, json)
Hash identifier: c3jDLvgwF8HnCVIIswwp+CNpVMNwV3FNVM2JKP/Eoww=
Subject key identifier: F0:48:2C:7D:19:89:87:D9:87:77:95:3D:1A:AB:82:1B:D3:1C:5E:A2
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018CC56EF4521E2ACD30E2E78D70C0861FF1
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/8EgsfRmJh9mHd5U9GquCG9McXqI.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59463
IP address blocks: 109.160.62.0/24 maxlen: 24
109.160.17.0/24 maxlen: 24
109.160.16.0/24 maxlen: 24
109.160.16.0/21 maxlen: 21
109.160.21.0/24 maxlen: 24
109.160.23.0/24 maxlen: 24
109.160.22.0/24 maxlen: 24
109.160.18.0/24 maxlen: 24
109.160.20.0/24 maxlen: 24
109.160.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f4:52:1e:2a:cd:30:e2:e7:8d:70:c0:86:1f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0482c7d198987d98777953d1aab821bd31c5ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:34:87:1c:09:d8:31:9a:64:d3:72:ce:f3:
8a:b5:79:6f:2a:18:0a:b8:6f:e1:55:ac:53:b2:5d:
3b:7b:bf:a5:54:d7:52:0e:ea:67:ce:64:46:7c:4d:
05:29:14:9b:5b:11:84:46:3d:eb:90:16:13:19:a0:
e6:f9:6d:dc:f4:6b:c7:68:e9:b7:35:68:03:b3:9e:
a1:0b:3c:b2:52:ba:56:fa:c7:2d:85:8a:d0:03:77:
df:c5:27:dd:61:15:34:ea:29:4f:a6:e0:4f:e4:e2:
93:81:f9:25:2d:c0:79:d8:20:30:36:11:b3:c5:25:
9a:74:64:ed:c3:1c:71:23:36:92:ca:96:2c:95:a7:
4f:19:5d:f5:c1:71:28:ff:dc:d3:56:14:ad:20:22:
bd:ab:82:a6:99:84:c5:72:5c:d5:17:a5:c7:6c:44:
23:db:59:6f:c0:50:86:dd:2e:a0:98:48:f2:01:69:
d8:33:34:23:b6:28:ea:c8:e2:28:36:75:89:e6:27:
0f:9e:b3:08:51:40:38:f9:bb:2c:c2:01:f4:cc:a7:
5b:74:06:9d:5d:a4:fa:e8:cf:22:d2:53:8f:5a:94:
41:13:c6:01:39:82:ed:ac:1c:0a:f0:b0:fd:7a:73:
a3:1b:8a:29:e3:53:76:46:c3:b6:93:1b:a4:22:ea:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:48:2C:7D:19:89:87:D9:87:77:95:3D:1A:AB:82:1B:D3:1C:5E:A2
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/8EgsfRmJh9mHd5U9GquCG9McXqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.16.0/21
109.160.62.0/24
Signature Algorithm: sha256WithRSAEncryption
28:eb:bc:ff:3b:89:7e:43:0b:43:a3:c7:ff:e5:99:9d:a5:4e:
0c:35:d3:94:d9:1d:6b:dc:19:5a:e7:6e:81:f7:5a:57:4b:ae:
f7:ee:9a:31:22:1c:f1:b6:40:a3:db:c1:d0:f9:74:73:73:6e:
3d:e8:4c:6a:ba:5e:1d:4e:28:4b:d2:ab:dd:cc:0e:e0:29:f2:
91:9c:37:c7:5e:91:5f:38:52:2f:93:10:75:5a:90:19:16:39:
36:2f:ff:27:57:ab:ef:8e:58:39:a1:84:61:80:17:12:e6:67:
c1:55:e6:31:07:cd:de:7d:2c:a3:12:10:97:5c:74:3f:d4:e3:
14:56:a3:7d:bb:c8:87:9b:94:1b:84:0f:20:5d:1c:0b:4c:0e:
1b:31:01:23:95:66:87:9a:8c:9a:39:a5:17:a4:7d:24:b9:75:
89:13:d4:31:37:b8:3a:27:8a:8a:8e:52:e5:c7:89:db:7e:f5:
e9:64:e1:f3:44:bc:8c:0d:24:ae:33:ce:cf:ee:39:48:b6:52:
5f:77:b5:0e:c0:ac:2b:d0:fd:0e:3a:44:5c:1b:e3:9b:5c:e8:
20:cb:05:95:93:2d:90:84:fc:b8:3f:58:bc:55:38:ca:aa:94:
ea:36:2e:cb:06:af:9f:29:30:b9:a0:56:15:ff:a5:8a:2b:67:
ab:d1:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 09:15:16 2024 by rpki-client on console-fra.rpki-client.org