Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/W8Opg65_2wR-JA58GOzlJUoKcXQ.roa
File: W8Opg65_2wR-JA58GOzlJUoKcXQ.roa (raw, json)
Hash identifier: 9Fsi69aJX2w2OmjBUU/9RFDuwipaQ5b7QCHg7sCnJj0=
Subject key identifier: 5B:C3:A9:83:AE:7F:DB:04:7E:24:0E:7C:18:EC:E5:25:4A:0A:71:74
Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial: 018CC492E01867080ECE550951E51344B6E3
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/W8Opg65_2wR-JA58GOzlJUoKcXQ.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209053
IP address blocks: 45.8.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e0:18:67:08:0e:ce:55:09:51:e5:13:44:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bc3a983ae7fdb047e240e7c18ece5254a0a7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:76:f0:d8:99:21:0a:bb:b1:67:2f:d0:45:
d0:e4:0a:32:79:c9:8f:db:90:33:35:4c:4c:b2:7d:
ec:ef:a1:bd:45:24:d5:2d:87:5f:43:c7:b8:d3:6b:
4a:59:33:03:3f:d9:cb:1e:df:c0:00:9e:8d:26:43:
53:9a:8b:c4:05:fb:5a:cb:2b:97:71:f1:52:62:97:
92:dc:5a:99:67:0f:20:59:89:2e:9b:36:4a:e1:fe:
5b:7f:0b:60:eb:52:2e:8c:7d:c7:b8:ff:a1:71:3f:
90:71:05:a9:3a:7b:ed:a0:a1:d2:72:50:c0:f3:8a:
45:fb:b1:33:eb:fa:d3:d7:5f:73:f8:10:e4:8d:34:
5d:77:36:6d:5e:0e:84:9e:7b:bd:82:8d:01:58:c0:
20:64:56:dc:75:f3:0f:77:e9:61:0d:fc:f0:aa:de:
8d:64:ca:40:f9:d5:95:7b:c9:1d:4b:ca:23:07:b1:
93:17:68:6a:ff:ad:3f:68:d3:80:f8:22:ea:0f:37:
fb:86:ad:4e:69:4e:d4:8d:b4:d7:91:2e:bb:18:32:
24:e5:a0:6f:68:d8:59:df:c6:17:88:43:b8:a1:8d:
84:99:ec:db:20:7f:df:5c:b4:35:01:cd:5d:1e:1e:
24:79:c4:15:06:8a:ea:fd:2f:d0:5c:a1:fb:c0:c2:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C3:A9:83:AE:7F:DB:04:7E:24:0E:7C:18:EC:E5:25:4A:0A:71:74
X509v3 Authority Key Identifier:
keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/W8Opg65_2wR-JA58GOzlJUoKcXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.232.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a9:cc:ab:99:63:e1:19:a9:6b:df:5e:45:39:f6:4d:12:d9:
3f:78:94:9c:d6:a8:a3:3f:e2:da:dc:99:01:e2:93:a8:e4:c2:
06:55:b8:ab:0a:16:b3:58:2d:f5:a8:8f:ff:e5:4a:65:bc:e8:
47:f9:fb:58:34:50:7b:6b:47:98:00:6a:af:e4:2b:6e:97:92:
b4:ba:92:dc:95:f3:c6:b7:b5:a3:d0:4b:d0:94:34:6d:96:6d:
77:8e:5b:4f:20:95:bc:0a:2d:3c:a5:10:26:97:88:f3:a4:2b:
1b:20:a4:e6:d3:0f:84:30:92:e0:1a:55:0e:5a:e5:44:b1:c2:
e0:c4:b5:fe:3c:04:b8:0d:ad:72:2f:53:a1:90:b4:2c:42:4f:
d4:48:75:84:46:7f:dd:28:9a:69:2e:1e:3f:02:1d:9e:85:b7:
77:92:28:e4:5e:01:9c:34:2d:11:10:24:e6:0d:8f:da:ba:89:
fb:cc:8a:df:81:16:4e:01:87:c3:a9:c9:08:be:e8:9e:9e:6a:
47:8b:5f:d1:55:68:2c:c3:78:d7:27:f0:f5:f2:e7:43:cd:20:
56:6e:f3:27:74:a3:83:74:de:7f:76:c0:c8:0b:01:6d:bb:fc:
9e:3a:80:cd:0c:94:91:38:fa:33:b5:02:54:db:e5:43:67:f2:
95:93:01:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 10:02:06 2024 by rpki-client on console-ams.rpki-client.org