Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DV8lW8Cxsl4VSQKPcoVilKovNO0.roa
File: DV8lW8Cxsl4VSQKPcoVilKovNO0.roa (raw, json)
Hash identifier: xSy/6FT465SnA85udPM6ru//kGmZISOeeu8xiULaeLQ=
Subject key identifier: 0D:5F:25:5B:C0:B1:B2:5E:15:49:02:8F:72:85:62:94:AA:2F:34:ED
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B9B00A0272A8541BB1EB08507B2AF
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DV8lW8Cxsl4VSQKPcoVilKovNO0.roa
Signing time: Mon 01 Jan 2024 18:31:32 +0000
ROA not before: Mon 01 Jan 2024 18:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209579
IP address blocks: 85.202.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:9b:00:a0:27:2a:85:41:bb:1e:b0:85:07:b2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d5f255bc0b1b25e1549028f72856294aa2f34ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:27:15:72:b9:76:3d:b7:20:e5:8b:e6:72:
c5:13:e5:fa:79:f0:11:97:8b:a2:b0:ad:87:51:93:
41:3b:e7:84:04:7c:3e:58:15:f6:4c:db:45:ae:04:
23:a1:c0:ec:c1:f8:c6:d2:18:c8:2f:a8:35:b9:05:
50:25:13:c6:46:87:aa:7c:1b:ca:ef:72:d3:10:1d:
07:f8:d4:26:ff:fb:ad:02:16:0b:44:29:49:be:cc:
75:99:7d:15:a7:60:c1:91:76:40:2f:8f:25:69:96:
f1:98:86:54:d1:1b:c3:45:1b:68:c4:95:0a:af:1f:
f9:d3:c2:ba:33:aa:70:f3:03:2f:c5:da:88:6d:07:
d9:fa:af:ab:6d:5b:a3:43:ca:09:4c:8d:cb:9c:91:
eb:79:00:ae:59:5d:6e:9b:b3:ce:b5:b9:ee:37:07:
07:05:f8:35:e5:cb:53:ad:76:8f:db:12:63:b8:94:
c8:ed:91:6d:4e:c0:bd:1c:cb:c3:b6:f3:1b:e2:57:
c2:e5:aa:37:be:39:3b:ba:d6:6e:e4:70:bf:ea:cf:
c8:2a:df:0b:7d:60:14:0e:88:3d:1c:2b:72:b4:58:
31:4a:7a:ca:2e:78:70:77:78:20:79:e6:5c:23:d0:
fb:92:7e:48:98:fb:17:de:7b:af:ce:00:53:aa:53:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:25:5B:C0:B1:B2:5E:15:49:02:8F:72:85:62:94:AA:2F:34:ED
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DV8lW8Cxsl4VSQKPcoVilKovNO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b1:68:4c:1a:88:31:86:9a:f1:a8:ba:27:d4:b5:b0:a0:6f:
a3:08:20:38:81:2c:79:6e:38:91:b2:bc:8c:93:bf:05:51:f2:
16:2b:47:fe:73:3f:e2:8e:36:c2:8b:59:45:f3:9a:9c:28:4a:
b1:06:dd:56:b4:47:44:bf:fa:a5:5b:21:af:1a:e5:21:df:5b:
8b:f8:b5:40:09:65:00:1b:9b:70:64:dc:c4:51:39:2f:72:19:
b7:4d:58:45:8a:f5:22:53:86:71:78:9c:23:45:71:77:af:77:
96:11:60:d1:63:7c:aa:13:8d:af:c4:57:97:50:8e:8a:fe:58:
96:c3:e2:56:32:a9:94:4a:0f:ea:e2:b2:4f:b1:19:c0:04:d0:
a9:f0:6f:59:b0:fb:cb:9a:93:76:c5:2b:e9:16:da:63:da:6b:
a9:05:5a:b1:4d:90:c0:2a:11:13:74:32:71:80:e4:32:6f:93:
61:9c:20:54:e4:53:2d:2c:0e:aa:ee:35:f3:be:08:78:98:7b:
7e:ce:72:69:30:0d:29:bc:ab:3c:2f:b7:e2:fe:e1:0d:c5:34:
4e:f9:4b:b5:4f:e6:1f:ff:82:66:eb:1b:c4:60:32:74:9c:35:
25:f9:f9:a5:fc:7d:06:3e:01:ef:bc:3d:a1:90:f7:ec:77:63:
d6:44:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org