Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/8ED_x4934iZzCn59jN1jCACASy4.roa
File: 8ED_x4934iZzCn59jN1jCACASy4.roa (raw, json)
Hash identifier: 7SRe4+WpEwsgqIDLqsWyPRe41x0e2v9knMpPH7RfQFg=
Subject key identifier: F0:40:FF:C7:8F:77:E2:26:73:0A:7E:7D:8C:DD:63:08:00:80:4B:2E
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 018D652713F72C172233AE0E5A225F64BFF6
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/8ED_x4934iZzCn59jN1jCACASy4.roa
Signing time: Thu 01 Feb 2024 14:51:16 +0000
ROA not before: Thu 01 Feb 2024 14:51:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200533
IP address blocks: 185.225.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:27:13:f7:2c:17:22:33:ae:0e:5a:22:5f:64:bf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Feb 1 14:51:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f040ffc78f77e226730a7e7d8cdd630800804b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:3b:72:96:8d:81:d6:10:03:7b:84:9c:84:
00:93:18:94:7e:2d:c5:1f:5d:8e:d1:0c:17:31:6b:
4d:fb:3b:62:ee:1f:a3:0c:da:77:62:58:8e:d8:0a:
73:94:1d:35:94:e7:3f:fb:35:5d:e1:fe:96:5b:3f:
06:96:2d:12:fb:0f:a1:58:1b:8b:a7:75:3d:d3:b2:
37:03:99:25:bf:29:7c:5c:55:a7:62:dc:40:5e:52:
8f:8b:53:aa:e2:36:57:a5:98:d2:a6:c7:4a:cc:c5:
b2:bb:36:66:1c:f7:03:5e:7d:7e:6c:d2:9c:07:77:
0c:2e:4c:28:4c:3d:1b:ea:8e:b3:3d:a3:9f:c5:22:
9b:bc:c2:52:97:9a:ab:b3:5d:21:da:c8:a8:7d:66:
26:9a:cb:e2:72:81:f8:cd:73:08:c3:6a:29:db:c8:
38:1a:09:1f:c3:73:5f:b2:63:d8:ca:b2:5d:75:2f:
86:92:e1:02:67:78:22:a2:e2:2c:3e:f0:1d:98:09:
f5:04:a9:af:78:a6:8d:92:4b:dd:9f:9f:d0:72:69:
72:52:f5:53:a9:af:bb:5d:f6:76:ed:8b:23:1d:f1:
cd:a8:6a:e4:18:49:8e:05:bb:83:25:fa:16:00:da:
e9:3f:dc:bb:a6:a8:b5:17:14:4e:9b:24:5b:97:3b:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:40:FF:C7:8F:77:E2:26:73:0A:7E:7D:8C:DD:63:08:00:80:4B:2E
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/8ED_x4934iZzCn59jN1jCACASy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0b:0b:1d:f2:85:6b:39:59:47:63:57:3c:16:d5:2d:a7:39:
d9:ec:4c:2e:ba:a0:7e:33:fa:cb:2f:f8:bc:99:fe:6e:94:46:
18:07:8e:f9:41:bd:3d:aa:be:39:14:64:1f:52:34:31:5f:71:
8d:5f:43:17:ed:0d:15:8a:21:6e:7a:58:21:85:ef:79:f9:f3:
ea:5b:0b:7a:27:78:1b:28:00:16:bc:91:45:f5:3e:bd:d3:8b:
99:6b:64:d6:e3:e3:08:f3:d2:88:f4:8d:2d:08:da:a7:a6:06:
ce:a0:96:19:e5:dd:da:b4:4a:68:90:6d:c6:07:2d:3b:bb:c5:
fd:2e:36:6e:d9:03:59:15:61:9d:ad:dd:c8:a6:01:09:db:47:
44:30:65:b4:af:a4:de:db:1f:4f:ce:bb:a8:67:96:a3:79:a4:
dd:e6:2c:9f:53:dd:a4:c3:fa:87:0b:1e:bd:74:91:51:c5:9c:
2f:3b:68:93:0d:5f:69:12:fc:21:cc:fb:0e:b4:30:07:74:dd:
44:cc:b9:9c:5e:4e:f7:4c:d9:2b:62:bd:47:7a:e9:eb:8d:84:
a5:59:bf:1a:d6:a8:96:9e:31:7c:b1:6a:89:af:04:cb:b8:da:
af:f2:58:74:96:b8:16:00:b5:f7:21:d7:01:34:34:17:0b:cc:
b3:cc:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:34:58 2024 by rpki-client on console-fra.rpki-client.org