Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/suw4yIf7sqD9_2hZvww8OlT0ED0.roa
File: suw4yIf7sqD9_2hZvww8OlT0ED0.roa (raw, json)
Hash identifier: 8N5NVnwXcCzmlVNN/HCpemxkA/L4MCEhvW2Cj0RNfeE=
Subject key identifier: B2:EC:38:C8:87:FB:B2:A0:FD:FF:68:59:BF:0C:3C:3A:54:F4:10:3D
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 018CC4245A49BAE67473B1219E8BD6C94973
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/suw4yIf7sqD9_2hZvww8OlT0ED0.roa
Signing time: Mon 01 Jan 2024 08:29:25 +0000
ROA not before: Mon 01 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49447
IP address blocks: 45.9.148.0/24 maxlen: 24
45.9.150.0/23 maxlen: 23
45.9.149.0/24 maxlen: 24
2a0e:fa00:1::/48 maxlen: 48
2a0e:fa00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5a:49:ba:e6:74:73:b1:21:9e:8b:d6:c9:49:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2ec38c887fbb2a0fdff6859bf0c3c3a54f4103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:fe:4f:08:6c:ec:1e:12:b8:a8:4e:e6:61:
7b:72:87:73:11:5c:48:c3:68:e0:68:19:f7:56:48:
0c:3b:e6:8a:bc:22:a2:f9:e3:4a:a2:b6:e6:08:85:
6b:1a:6d:f3:6c:07:3a:40:34:0a:37:ec:f9:3d:65:
dc:05:7c:bc:b1:c1:63:c7:e1:ea:d3:78:ed:0a:31:
25:49:84:02:45:6d:04:7e:3a:a1:90:1e:a2:d4:5d:
4c:b5:a1:c9:c3:fd:0d:c4:df:05:1e:dd:40:8e:7c:
be:a0:3c:db:bf:df:b8:cb:b6:12:6f:91:66:52:8d:
c6:3f:94:36:db:f3:95:4b:cd:70:03:7d:d9:ad:45:
1a:82:7d:89:bd:5d:22:2d:0d:0f:2c:33:92:fb:56:
d6:08:0e:24:c5:6b:1d:ed:fe:8d:fc:54:e4:ca:be:
2a:cf:98:d5:68:d4:8f:db:08:60:85:a2:cd:86:c8:
63:c0:cd:53:0c:c5:66:66:1b:ab:2a:c1:02:39:5f:
40:33:08:60:28:a4:c6:db:a8:41:54:32:72:6e:1f:
24:7c:5a:8a:b5:bb:a7:86:63:24:a1:f2:d7:5d:d9:
4c:ec:9a:10:7c:f3:2a:26:22:64:8a:84:f5:33:bd:
28:f6:06:4e:2a:b7:72:ca:48:72:9d:cc:8d:16:80:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:38:C8:87:FB:B2:A0:FD:FF:68:59:BF:0C:3C:3A:54:F4:10:3D
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/suw4yIf7sqD9_2hZvww8OlT0ED0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.148.0/22
IPv6:
2a0e:fa00::/47
Signature Algorithm: sha256WithRSAEncryption
10:9b:6d:de:f1:a3:67:53:d7:60:08:38:a6:95:2e:76:22:fd:
74:eb:e4:6e:77:ff:f4:7b:3b:3c:0d:06:ae:03:f9:8d:c8:8c:
0f:8b:c0:e3:19:e7:41:0c:9c:27:c6:54:9c:7e:b9:60:29:42:
cb:1e:52:1d:09:2d:45:38:1b:be:07:db:2d:8e:07:6c:78:0b:
c8:84:d8:6d:41:06:ba:87:c7:3d:93:05:24:87:68:f0:f8:46:
a9:10:38:ba:2f:21:a7:7a:81:06:34:c1:f5:dc:5b:96:6b:b2:
85:c2:97:3c:f0:98:65:a4:ee:51:de:89:39:5d:14:51:15:a3:
78:a6:87:c3:86:5b:ec:89:ab:6b:ef:44:75:87:35:cc:88:b3:
b1:b6:61:25:fc:6b:06:11:12:22:40:ea:dc:6d:f4:ce:91:aa:
bd:91:b9:ea:64:f5:4d:84:f2:e5:cb:aa:22:f1:7c:20:fc:67:
7d:07:d5:1a:5b:a0:6e:fa:bc:3a:48:d1:79:01:8a:17:7a:f9:
56:71:5f:3b:51:5d:c5:aa:90:96:32:50:0a:58:1c:d1:07:8c:
8a:06:9c:a9:99:bd:70:ff:1d:fe:40:50:50:b0:6f:75:53:58:
30:ae:e5:78:bb:d5:36:10:06:9c:ed:dd:83:65:78:79:2d:64:
fc:8d:5e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:23:21 2024 by rpki-client on console-fra.rpki-client.org