Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9eEzaPQoCOdRd8n2pD4LltpcoY.roa
File: f9eEzaPQoCOdRd8n2pD4LltpcoY.roa (raw, json)
Hash identifier: Euse0HvAJg2CSY9txSwiEDGMN+4vWJtFaYUXCkmhFKE=
Subject key identifier: 7F:D7:84:CD:A3:D0:A0:23:9D:45:DF:27:DA:90:F8:2E:5B:69:72:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF7B62EC8132CCC2FC9AF3B46D31F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9eEzaPQoCOdRd8n2pD4LltpcoY.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 83.219.96.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f7:b6:2e:c8:13:2c:cc:2f:c9:af:3b:46:d3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fd784cda3d0a0239d45df27da90f82e5b697286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:7b:b2:93:2c:48:55:0b:17:3b:7d:1a:09:
6b:4f:9a:bb:f1:2d:aa:ff:25:63:2d:9b:aa:c3:c7:
d5:be:5e:f8:16:21:cd:4b:a2:83:2e:9c:81:be:e0:
31:38:03:d5:92:a8:6b:cb:89:26:4f:d8:0a:6a:45:
47:ec:40:5c:e3:14:e6:1b:6d:3e:d5:87:a3:38:a5:
33:9e:7e:85:5b:e6:f5:5a:93:24:8e:ed:4d:d1:e8:
16:9d:9f:04:f1:ce:28:6c:dc:6e:eb:2b:bb:e9:e5:
04:ae:a6:f9:c0:0c:71:89:d6:32:23:61:87:1b:5a:
aa:34:ee:92:25:67:18:e1:8b:34:d4:36:3d:59:12:
5c:64:1f:ef:2a:fc:fd:8b:c1:28:80:53:61:2b:86:
a3:11:56:13:cc:c8:83:f9:b6:2c:bf:81:ac:7f:81:
5a:29:d9:bd:29:75:48:e9:ec:b6:f2:cf:0e:0f:8b:
ae:e5:5c:cc:20:48:47:f3:0a:c5:1a:16:1c:9a:5c:
8a:a2:18:11:e7:69:40:c4:ed:38:cc:77:e7:1c:ea:
0d:d8:57:eb:ff:04:60:3b:59:5e:15:61:73:20:24:
60:2e:17:19:eb:a0:07:63:28:11:2d:53:cf:df:1e:
58:d1:7a:78:f3:34:24:50:5c:f0:c0:16:f2:fd:93:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D7:84:CD:A3:D0:A0:23:9D:45:DF:27:DA:90:F8:2E:5B:69:72:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f9eEzaPQoCOdRd8n2pD4LltpcoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.85.0/24
83.219.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:59:68:cf:02:c6:43:cd:53:0c:84:51:b1:c3:c1:a7:6c:b2:
b5:24:7d:fe:f4:fa:0d:fc:f7:a5:1f:cb:95:3d:d5:0a:aa:5b:
10:3f:b5:49:4f:ac:74:13:9a:7e:97:a7:a3:94:34:7c:91:ff:
97:ce:5c:07:63:8a:80:0c:df:bb:ab:35:70:8b:98:1f:97:98:
d8:55:52:89:53:e9:0a:d9:7d:8e:32:b9:d8:69:67:62:2a:32:
ba:d3:73:fd:a8:33:d9:67:7a:0f:0c:6c:f8:a5:e6:dd:1c:b9:
7c:ae:f1:cd:cf:f2:32:70:21:40:71:ec:92:a2:86:62:fd:b4:
48:8c:1d:3b:97:8a:8b:81:69:b4:8f:82:98:7b:aa:e2:da:ab:
b4:be:43:d0:c6:c9:ce:85:53:44:7d:17:31:eb:98:c9:dc:c3:
a3:8a:c1:ba:e4:2b:1d:48:6c:44:63:29:94:1e:0d:d6:26:e9:
09:8e:55:94:57:9a:ad:c6:6b:db:62:0c:32:3b:2f:c6:b5:5d:
09:4c:b3:03:8b:78:a0:25:79:8f:8d:07:57:a5:5a:31:4a:fb:
75:71:53:1f:27:87:ec:54:db:74:44:12:10:22:c1:bf:1d:cd:
83:b3:4d:e8:b9:bc:c6:0d:a2:23:7e:1b:c8:8f:37:00:36:ee:
f8:c9:c6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:48 2024 by rpki-client on console-fra.rpki-client.org