Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: GCp5cqZFPDK7fP7HYZEc817rU7CxU67k7JD3RsPT/UA=
Subject key identifier: C7:22:00:C1:BE:21:14:29:7C:C2:13:DD:BC:57:29:68:8E:B0:AA:8A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 71D0A05330DA0F55DAB71E149BD878D450AAC5CE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8881.roa
Signing time: Tue 21 Jan 2025 11:02:21 +0000
ROA not before: Tue 21 Jan 2025 10:57:21 +0000
ROA not after: Tue 20 Jan 2026 11:02:21 +0000
asID: 8881
IP address blocks: 46.202.69.0/24 maxlen: 24
46.202.73.0/24 maxlen: 24
46.203.156.0/24 maxlen: 24
46.203.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d0:a0:53:30:da:0f:55:da:b7:1e:14:9b:d8:78:d4:50:aa:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 21 10:57:21 2025 GMT
Not After : Jan 20 11:02:21 2026 GMT
Subject: CN=C72200C1BE2114297CC213DDBC5729688EB0AA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:1e:52:68:86:37:7e:94:11:76:c8:a3:9b:
f7:5d:ff:75:8d:58:ef:ab:be:97:d5:60:88:a5:15:
ea:2e:e5:a7:94:e8:b1:f6:9d:93:ab:fd:49:68:3d:
27:8d:f8:57:02:07:95:e0:b6:64:60:1d:6b:21:b6:
55:6d:cc:8a:8a:64:df:81:84:38:38:0f:8e:8d:20:
74:2e:e8:2c:c5:9d:93:f4:dd:0f:c4:03:14:c0:4f:
6f:e1:72:a6:5a:74:79:f9:6a:da:e7:3e:1d:ce:84:
e8:b7:4e:75:89:1d:a3:8d:81:ab:53:96:20:23:01:
ab:40:c7:cc:c9:af:46:b4:5f:25:80:73:3e:04:a8:
c1:4e:a1:cd:af:17:d9:ba:40:c1:84:f4:db:76:6a:
fa:0e:b1:8f:c3:59:6f:c4:85:ab:c2:68:b3:76:5f:
51:6a:4e:4a:4e:2e:1c:f8:00:5e:df:bf:fb:7a:60:
bd:55:61:af:17:a9:e2:59:cd:e0:0d:95:7f:65:9b:
c5:a1:d5:a5:a1:ea:d9:95:24:6e:68:78:46:b8:03:
3e:ba:07:db:ef:37:5e:03:b9:e4:e0:c8:a0:92:88:
b9:04:a2:4d:d8:7d:4b:ba:55:dc:0b:ce:3b:d1:a9:
32:dc:9f:7a:a5:d8:53:07:1d:36:4d:44:e1:06:02:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:22:00:C1:BE:21:14:29:7C:C2:13:DD:BC:57:29:68:8E:B0:AA:8A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.69.0/24
46.202.73.0/24
46.203.156.0/24
46.203.227.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f3:09:c3:98:3f:f2:e7:2b:ab:b8:04:bd:d9:fa:f8:23:8c:
99:89:05:5a:c6:74:29:71:8d:21:9f:45:bc:6b:3b:05:92:89:
bd:2c:5d:10:f6:c2:05:a0:9c:27:9f:bd:a1:38:2b:72:74:3c:
bc:4f:65:4f:e6:c6:e1:52:96:58:7d:53:59:d2:2e:ac:d7:ad:
22:6a:d4:c3:94:1f:2f:f8:f6:b5:a3:64:4c:b2:9f:c4:71:11:
0c:1b:7e:6b:58:bc:82:49:a8:5b:5d:b2:83:cf:41:62:95:c0:
b3:de:66:dd:a7:31:51:24:d9:72:06:31:f3:53:04:79:cc:88:
8a:40:56:aa:06:a7:bd:eb:7f:23:d6:3e:00:74:5e:e1:56:16:
4e:e2:20:fa:81:f3:8b:79:95:da:99:fb:0b:91:94:41:bf:a8:
67:e6:ed:54:1c:6b:ed:e7:01:d5:b1:24:81:1d:e3:f5:cf:5f:
f7:8d:2a:4c:a7:a8:91:ba:7e:1a:89:22:11:1f:d3:a0:aa:ee:
22:36:1a:59:c2:cf:6b:1b:f6:93:59:1c:ad:9d:f5:4f:01:2e:
6f:f6:a4:41:c2:e7:69:e2:e2:fe:a0:b8:83:71:16:f7:8b:05:
82:72:01:bc:51:90:e5:3f:66:67:95:3b:f8:e1:38:63:cb:59:
1d:97:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:01:27 2025 by rpki-client