Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/sHFpIwZMNHFqkDAAu39KFyWArbI.roa
File: sHFpIwZMNHFqkDAAu39KFyWArbI.roa (raw, json)
Hash identifier: wNfcyFSU8YPjoLnN2YpL7oe47oplVGqTNk2eNV6uB+Q=
Subject key identifier: B0:71:69:23:06:4C:34:71:6A:90:30:00:BB:7F:4A:17:25:80:AD:B2
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 018CC80126885103E78A7DEF81F7E35BE5D2
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/sHFpIwZMNHFqkDAAu39KFyWArbI.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 185.233.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:26:88:51:03:e7:8a:7d:ef:81:f7:e3:5b:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0716923064c34716a903000bb7f4a172580adb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:13:7d:e3:25:56:db:46:ba:3a:c2:ba:f2:c1:
fd:14:be:30:9e:12:91:00:7e:f5:3b:57:66:19:cb:
29:74:aa:13:70:c5:26:0f:68:0d:1c:94:2e:d6:b8:
51:3c:36:3d:47:aa:a1:9f:2c:d8:48:d5:d5:99:fd:
c8:d5:79:cc:7c:9f:9b:dc:17:5f:38:f0:05:16:d3:
ec:55:3a:b3:ce:68:5e:0b:df:69:d4:2f:bc:23:3a:
be:8f:3d:f3:50:2a:f2:4f:dd:d4:17:c3:93:17:f8:
d4:6b:83:12:24:4c:74:e3:79:93:31:34:8c:e7:b9:
07:05:25:25:43:fe:0f:be:bb:41:d4:6a:b8:67:31:
6c:05:3a:fd:28:21:54:d4:c3:7b:b2:53:43:50:bd:
ad:4d:0a:46:a5:c6:e4:42:16:b5:9b:d8:57:66:82:
17:07:84:9f:33:2f:1c:7c:4a:fa:6a:91:e1:15:e1:
d7:88:5e:0a:20:2c:27:74:7e:94:4d:6a:84:e2:ec:
19:44:58:3e:b4:92:5f:71:78:b1:1e:e5:7a:19:98:
bd:d1:2b:df:67:fe:d7:ea:6c:1d:89:f8:33:14:36:
19:20:19:c5:a6:9a:c9:24:d7:e9:8f:2f:b8:f4:38:
f8:05:22:64:5d:2c:8c:5f:d3:bd:c8:4f:14:0b:6b:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:71:69:23:06:4C:34:71:6A:90:30:00:BB:7F:4A:17:25:80:AD:B2
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/sHFpIwZMNHFqkDAAu39KFyWArbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.133.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d4:ed:02:f1:3e:2d:f8:e2:98:49:8d:74:9a:5d:bc:3d:be:
61:e5:b4:d5:11:6e:15:f8:6a:26:0c:20:d3:d4:9a:52:80:e8:
ed:b8:d5:f8:0b:15:a2:b4:71:d3:62:4d:dd:a6:38:cf:1c:32:
51:87:bf:1a:fd:9b:2e:d5:b4:e2:5e:21:30:ec:e5:14:f0:e4:
95:c9:fb:b8:5e:50:73:ec:19:89:12:2b:55:af:e9:b0:ed:a7:
c8:e7:18:e9:14:18:4b:ad:fc:ea:69:d5:46:ae:4e:49:9f:c6:
3d:20:3a:95:17:67:a9:67:00:5f:4f:a7:e1:37:8b:aa:f4:b2:
fb:d4:5c:6a:2e:2a:92:31:ab:1b:a5:f6:9b:56:0e:00:5b:ee:
12:f3:b8:4e:d4:ba:cb:79:87:1a:fe:38:a0:98:7c:52:de:ff:
6a:06:5f:a2:60:f3:a9:13:17:9f:df:4f:a8:df:62:26:24:ab:
ea:b9:23:69:50:26:e0:81:6b:3f:76:08:6c:3a:07:0c:45:d9:
9e:6d:99:89:0e:42:5d:59:8a:bc:35:d8:d7:50:75:46:04:ec:
60:5a:8b:af:24:29:ef:26:1f:14:d4:25:a5:5c:ba:ea:77:19:
ce:01:6c:a7:12:4d:7f:53:68:0a:6d:61:e6:4d:fa:03:59:f1:
31:eb:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:11:43 2024 by rpki-client on console-fra.rpki-client.org