Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/btdRWIVdlGF-hdEWxEiYsMh-6C0.roa
File: btdRWIVdlGF-hdEWxEiYsMh-6C0.roa (raw, json)
Hash identifier: TmaLTHpuWUdlDyovlqD8W4V3YnyhHPoqylFAmqqkhTU=
Subject key identifier: 6E:D7:51:58:85:5D:94:61:7E:85:D1:16:C4:48:98:B0:C8:7E:E8:2D
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 018CC500B8DE4A288FD122E7DC7F2348FD26
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/btdRWIVdlGF-hdEWxEiYsMh-6C0.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49063
IP address blocks: 185.216.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b8:de:4a:28:8f:d1:22:e7:dc:7f:23:48:fd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ed75158855d94617e85d116c44898b0c87ee82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:87:4b:fb:c6:40:8d:3b:f2:c7:cb:f3:f0:
f5:1b:32:7b:b1:41:bb:34:65:b0:4d:34:cd:92:8f:
11:62:30:8c:a5:45:4c:d4:ab:be:2e:d0:3c:a3:8b:
39:59:12:66:16:21:93:8b:7f:98:a8:26:fc:29:06:
28:7c:0c:35:7f:1b:5b:d7:6b:b4:bd:36:6f:79:1b:
93:22:23:e1:0f:0e:4b:7b:75:9f:40:bd:df:b0:88:
93:89:8c:0e:53:39:48:97:98:32:5c:6e:ae:e8:96:
3e:26:3c:85:0c:9d:5b:27:99:9e:58:5a:85:b3:5a:
c4:9e:8b:34:ae:ce:82:da:9c:a7:51:48:74:d3:1a:
da:82:91:1d:c0:1e:79:14:f7:0f:a7:2e:7a:a1:1d:
b6:fe:74:e7:20:ec:23:a1:70:a7:f8:7a:bd:30:3b:
7b:ba:55:b4:83:92:51:ca:e7:ac:89:c9:b3:9a:19:
41:85:77:e3:60:9c:6b:ee:aa:8b:ff:a5:42:74:26:
d3:5a:4c:1c:4d:f6:58:d6:a9:49:86:5f:b5:09:d4:
bb:17:52:07:52:d8:36:0e:8c:de:f4:7a:e1:eb:7b:
3e:7f:6f:d4:3d:ba:c8:fc:b6:c6:a4:a1:77:7c:cb:
7c:0f:60:21:e5:2d:fc:49:f6:b4:84:67:bc:29:94:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D7:51:58:85:5D:94:61:7E:85:D1:16:C4:48:98:B0:C8:7E:E8:2D
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/btdRWIVdlGF-hdEWxEiYsMh-6C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:28:de:b3:f9:d5:07:b7:17:d7:88:80:54:4d:df:38:35:80:
fb:2d:7d:20:84:a2:97:be:91:9c:c5:98:35:e2:db:d3:9b:ae:
30:14:5c:fe:68:5f:46:cc:6e:03:ad:d6:a3:26:12:e6:3b:c0:
e0:a1:89:92:e2:21:22:f4:51:ab:1e:a1:77:e4:e5:55:8f:7d:
a1:d3:7c:12:15:57:d9:19:83:9f:9f:64:0c:c5:0a:37:8f:de:
b8:aa:10:2b:0e:b3:97:96:d3:b0:15:7b:ea:94:71:aa:79:ff:
ce:f0:c1:aa:f5:42:4e:d8:1b:54:da:76:5d:88:69:cd:f0:69:
3d:82:e4:8a:6a:eb:dc:65:8f:40:9e:57:56:e7:c6:82:26:b4:
a4:f0:5b:b2:7f:cb:62:fd:3d:0d:ec:aa:4e:48:2a:ff:11:7d:
09:23:49:35:59:1a:46:0a:97:c3:0a:7f:54:df:bc:d5:ac:7e:
a3:65:b5:df:76:42:b7:ef:b4:07:f4:4e:a0:56:a0:ab:2e:41:
b1:81:14:86:43:ba:f6:e9:bb:8a:11:42:86:13:3a:30:9f:a6:
03:59:84:fc:90:ae:3f:7a:65:b0:9b:a5:79:d2:9d:6a:24:56:
4d:59:ed:3d:c1:7c:cd:71:74:ac:09:fd:e8:d3:db:6e:68:1c:
01:39:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:28 2024 by rpki-client on console-ams.rpki-client.org