Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/gKHzlzbsFKe4jwhtrp76m4rdTUg.roa
File: gKHzlzbsFKe4jwhtrp76m4rdTUg.roa (raw, json)
Hash identifier: /b2LKoj6hsE4fo2A5N/TKPouYgNF0RlxlnpIa1s7VIE=
Subject key identifier: 80:A1:F3:97:36:EC:14:A7:B8:8F:08:6D:AE:9E:FA:9B:8A:DD:4D:48
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 018CC9BC620D14676711A2863FE05B2F5F17
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/gKHzlzbsFKe4jwhtrp76m4rdTUg.roa
Signing time: Tue 02 Jan 2024 10:33:35 +0000
ROA not before: Tue 02 Jan 2024 10:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208408
IP address blocks: 45.138.8.0/24 maxlen: 24
45.138.11.0/24 maxlen: 24
45.138.10.0/24 maxlen: 24
45.138.9.0/24 maxlen: 24
2a0e:aa40:2::/48 maxlen: 48
2a0e:aa40:a::/48 maxlen: 48
2a0e:aa40::/48 maxlen: 48
2a0e:aa40:3::/48 maxlen: 48
2a0e:aa40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:62:0d:14:67:67:11:a2:86:3f:e0:5b:2f:5f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Jan 2 10:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80a1f39736ec14a7b88f086dae9efa9b8add4d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:d6:f6:40:b5:93:61:55:d0:bf:35:1f:68:
13:fa:31:7d:f9:78:70:82:b7:03:59:5b:f5:c7:e9:
e6:62:31:2f:65:b4:0c:00:4d:ea:34:9a:f9:53:23:
c2:cf:da:03:83:10:9b:2c:7f:9b:b4:ab:6a:79:13:
f8:53:68:45:25:da:01:4a:a6:52:40:03:ed:ec:13:
ca:11:31:27:bc:0f:e4:bc:76:ef:13:be:8a:71:24:
f2:78:c7:bc:6e:a5:e7:dd:3e:b4:55:e5:88:f4:c3:
63:27:e8:59:af:41:b6:71:b4:3b:69:40:d2:68:19:
3c:85:fd:89:5e:62:44:8a:f4:d4:75:5f:a9:27:8b:
94:db:dc:ec:94:90:9d:42:99:cd:3f:38:e3:2b:ec:
e4:63:aa:cb:66:40:f0:c2:1b:71:fe:14:a0:f0:7c:
63:a3:f4:e6:26:5b:f1:8d:f6:22:03:80:92:7d:85:
ae:6d:29:fe:03:86:c1:80:e5:d9:03:4f:30:68:f2:
c4:7d:fb:b8:5c:92:6f:57:c0:47:51:18:20:6c:f3:
29:9f:0f:8c:1d:22:e0:26:f0:ec:f9:ce:39:54:b4:
17:c0:c7:ae:63:09:53:12:9f:0c:5c:30:44:d9:d7:
c6:82:53:97:b9:fa:a5:a6:ec:77:d6:52:67:75:7e:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A1:F3:97:36:EC:14:A7:B8:8F:08:6D:AE:9E:FA:9B:8A:DD:4D:48
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/gKHzlzbsFKe4jwhtrp76m4rdTUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.8.0/22
IPv6:
2a0e:aa40::/46
2a0e:aa40:a::/48
Signature Algorithm: sha256WithRSAEncryption
67:74:5a:f6:4f:81:4f:02:95:7a:33:c1:e1:a5:73:14:9e:51:
ab:04:c0:3e:f0:2d:b5:e0:5d:a1:88:2d:e9:fb:f6:ef:58:49:
c2:2c:cb:54:1d:d5:a5:ae:d5:a7:97:16:c5:47:ea:86:83:42:
07:ea:f0:4d:89:03:e1:bb:03:af:9e:f4:e1:fc:03:b9:48:4c:
ec:2c:0f:38:6a:ed:15:ab:36:51:97:be:bb:b2:87:cf:ae:6f:
9d:e5:cf:dc:fb:63:d4:6c:f1:3e:bf:4a:3c:ff:69:f0:02:bf:
e3:38:a7:b3:7e:26:10:20:be:18:55:dd:39:9e:9e:4a:24:aa:
86:19:58:d7:05:73:19:e5:13:e3:0b:f6:ea:72:eb:8b:46:3f:
67:e4:cd:8f:0d:e5:41:7e:4d:f3:2d:d2:62:2e:db:52:eb:2c:
18:90:02:4c:22:e1:7a:5a:5c:5a:a4:64:3f:05:3a:e7:d9:07:
16:87:a3:63:e0:95:9b:88:57:d3:56:d5:08:9a:53:9b:6b:c0:
32:76:60:78:2a:9e:4b:96:82:75:ce:58:ab:e6:5f:29:56:f0:
ed:28:18:29:89:e5:55:d7:8c:9b:7f:cc:70:51:b1:5e:82:62:
f6:fd:1a:ca:b7:81:98:70:20:7f:1c:1a:29:6c:f8:97:67:8e:
6f:0f:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:04:54 2024 by rpki-client on console-ams.rpki-client.org