Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/rXyyMx3BmPt2E26eTCupVk2-0MM.roa
File: rXyyMx3BmPt2E26eTCupVk2-0MM.roa (raw, json)
Hash identifier: 1IMssnO/+1g7mqcI7C3rxucwjF2/CQb0RkfFSCll1Yg=
Subject key identifier: AD:7C:B2:33:1D:C1:98:FB:76:13:6E:9E:4C:2B:A9:56:4D:BE:D0:C3
Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial: 018CC94E60E91A9ABC6A85520C2D336BA7A5
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/rXyyMx3BmPt2E26eTCupVk2-0MM.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136162
IP address blocks: 185.175.100.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:60:e9:1a:9a:bc:6a:85:52:0c:2d:33:6b:a7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad7cb2331dc198fb76136e9e4c2ba9564dbed0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:16:01:53:f3:cf:c3:b0:6e:dd:39:99:7e:b1:
b2:0c:1f:0c:86:c7:83:66:2a:d8:83:c4:39:c3:5f:
30:98:ec:e3:4a:61:2b:45:6b:3e:c0:88:a8:10:9d:
64:a4:ab:21:df:89:ab:df:ca:82:a4:c2:33:59:a1:
87:15:b0:ea:4b:0d:bf:83:7b:ba:1a:ca:96:a8:2d:
41:32:37:15:b2:d7:81:fa:a9:80:f5:22:09:2d:e1:
f9:6e:cb:59:35:89:38:50:02:a9:1c:b1:6f:73:9b:
5a:26:8e:0c:3d:4a:84:8b:6a:c9:e9:4e:b3:41:00:
f4:38:08:98:24:9f:f8:8a:23:46:5b:5d:e8:6d:51:
66:7f:51:b9:32:0d:e9:7d:70:45:b9:55:4d:3c:c7:
ea:0d:c0:30:ee:27:ab:9b:43:d5:96:85:c2:8f:c8:
e7:10:8a:e3:59:6c:36:4a:4b:53:bf:0c:e1:01:fb:
00:dc:4a:52:7d:b5:de:7f:ca:99:49:ec:09:3d:fc:
2e:6d:f7:53:32:46:9c:d8:aa:2b:da:b6:50:b4:50:
9e:cb:46:b2:f0:44:61:e4:7c:84:2f:a2:40:59:0a:
30:e8:52:9f:f6:a5:54:7a:cb:ef:54:5d:ed:0e:28:
3f:96:5c:64:d4:88:72:49:df:d9:cb:9a:15:9e:eb:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7C:B2:33:1D:C1:98:FB:76:13:6E:9E:4C:2B:A9:56:4D:BE:D0:C3
X509v3 Authority Key Identifier:
keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/rXyyMx3BmPt2E26eTCupVk2-0MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
81:61:7f:d2:0a:95:af:c4:01:65:19:27:31:3a:47:b2:ff:4f:
19:7f:97:34:d7:9c:e8:56:23:52:1c:3e:d4:f7:80:7a:de:75:
9b:0a:fa:e0:e6:da:61:08:22:fc:c1:4f:d6:af:98:73:3b:b7:
19:43:17:51:7c:61:70:8c:7b:30:e8:cb:b8:9e:46:18:54:e7:
a5:fd:b5:9c:b7:0e:65:b1:e8:dd:1a:91:83:68:81:2c:7b:7b:
b8:90:64:40:36:07:13:0d:52:ca:ba:d8:ba:ed:74:88:85:c2:
fe:6b:59:a0:98:0d:ed:3e:9b:2e:9b:13:d5:6c:58:8f:dc:05:
2a:0b:78:74:56:2a:ef:cb:d2:f4:f0:e3:23:2d:1c:e5:45:9c:
76:63:b5:79:2b:ae:8f:25:67:1a:02:fa:23:8d:89:04:41:ec:
11:bf:cb:77:45:63:a1:6b:7f:80:3d:c2:bc:cc:88:01:16:27:
fd:1a:9d:c6:7d:a7:e5:85:18:94:8c:58:8a:7e:2f:30:4d:78:
17:65:9e:61:89:f8:78:67:86:b2:f8:59:ca:d1:52:55:22:65:
b7:a4:11:cd:e6:32:7f:c9:1e:9e:95:3f:d5:f0:93:17:b8:57:
6d:d1:cc:ae:0c:6c:48:9f:1f:db:92:07:47:da:20:d0:a9:21:
39:a6:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:24 2024 by rpki-client on console-fra.rpki-client.org