Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/k-oFJQZ_63TPEinZjggZcgd6EJ8.roa
File: k-oFJQZ_63TPEinZjggZcgd6EJ8.roa (raw, json)
Hash identifier: KkTpKgNM+VESuHqvSOTmmbD5Drpd04UQPhOFslYqG0A=
Subject key identifier: 93:EA:05:25:06:7F:EB:74:CF:12:29:D9:8E:08:19:72:07:7A:10:9F
Certificate issuer: /CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Certificate serial: 018CC348A159725B3387AA55B1EAEDA88BBF
Authority key identifier: BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/k-oFJQZ_63TPEinZjggZcgd6EJ8.roa
Signing time: Mon 01 Jan 2024 04:29:26 +0000
ROA not before: Mon 01 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202105
IP address blocks: 185.217.11.0/24 maxlen: 24
185.217.8.0/24 maxlen: 24
185.217.9.0/24 maxlen: 24
185.217.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a1:59:72:5b:33:87:aa:55:b1:ea:ed:a8:8b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Validity
Not Before: Jan 1 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93ea0525067feb74cf1229d98e081972077a109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:3f:f0:63:39:46:23:40:8d:ac:41:04:3e:
ae:50:72:0d:07:bb:56:bc:3b:f9:3e:0d:aa:ea:e4:
2c:63:92:30:ca:c9:67:74:c3:89:16:7b:3c:5f:11:
2f:d6:46:3f:05:b3:7e:94:5f:2d:ee:73:ac:6d:29:
c6:5e:64:b7:bb:0e:eb:2f:26:fa:52:0f:1e:ac:5e:
47:eb:ac:2f:97:0d:6a:bc:70:de:4f:19:7e:2f:8f:
fd:4e:dd:6b:d7:01:ae:fc:4a:1a:b1:37:0b:1b:d4:
15:18:29:13:90:22:4c:3a:ce:7e:43:f9:b3:04:15:
ec:ba:7a:05:46:3a:a3:dc:81:ae:00:9a:d6:9d:39:
ed:63:83:77:68:8f:28:c1:92:2c:25:e9:6d:22:c7:
a0:9a:5c:e6:4f:30:82:42:9d:a8:c1:da:5d:f0:89:
38:52:cb:a8:43:ac:57:2b:93:3a:d3:95:d0:33:63:
ce:58:ad:ad:54:c9:d1:e4:28:a0:de:e5:77:23:5b:
3d:77:71:2d:dd:a4:7c:0a:fe:3f:64:8b:0e:4b:c3:
e2:7c:5e:f1:72:fd:fc:36:f8:9e:90:06:53:5b:51:
9b:94:07:d7:a5:54:9f:c9:97:a9:f8:d7:53:ca:fd:
2e:f4:51:1d:87:16:6b:4a:1d:dd:3e:8e:30:1f:22:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:05:25:06:7F:EB:74:CF:12:29:D9:8E:08:19:72:07:7A:10:9F
X509v3 Authority Key Identifier:
keyid:BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/k-oFJQZ_63TPEinZjggZcgd6EJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.8.0/22
Signature Algorithm: sha256WithRSAEncryption
59:86:a9:b0:ca:61:c1:0c:95:ac:e5:ea:ec:e7:29:70:8d:bd:
a1:1a:f1:f4:cd:5c:d7:9c:b7:bb:8a:e7:70:3b:54:89:65:81:
ad:bc:22:c1:3a:39:59:5e:22:3e:61:78:3f:13:ae:65:ae:42:
7c:20:9d:7e:d5:68:c4:ac:42:12:26:8b:f3:6c:3c:37:aa:8c:
74:57:c3:9e:fb:54:a1:21:4e:3c:23:28:de:c8:cb:c0:7f:6f:
46:e0:34:c6:94:a5:74:76:0a:da:77:85:77:ad:bf:f4:dc:ff:
7e:84:62:ec:2c:e1:4f:ca:90:c5:e1:e0:6e:9f:bf:5c:1e:d4:
be:bf:df:58:0a:c1:d9:44:40:ad:4a:c6:77:b9:1a:bf:0c:37:
2d:6e:b0:ca:77:a4:df:24:0c:4f:40:97:f7:92:58:28:0a:f2:
a7:bb:98:76:6e:42:58:0a:89:17:c3:26:88:ff:1c:38:c2:14:
3d:29:52:bf:36:da:1a:f4:11:10:8e:69:47:00:f2:c5:9f:48:
d6:76:5c:8a:44:19:6e:f8:71:4b:36:43:50:f6:5e:c2:8e:93:
01:bc:68:0a:89:3c:37:6b:fb:9a:b9:84:05:a7:4a:16:04:2e:
94:44:da:9e:ce:b5:4e:45:d5:52:2f:e4:78:88:15:54:de:51:
42:b1:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:20:41 2024 by rpki-client on console-fra.rpki-client.org