Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/flwHV8FyFh_2mpmPgxMU_fg9YJY.roa
File: flwHV8FyFh_2mpmPgxMU_fg9YJY.roa (raw, json)
Hash identifier: YIXACqAoYJtfrLGw6xw5Epdu4HqJvIe098ckIMLoCLY=
Subject key identifier: 7E:5C:07:57:C1:72:16:1F:F6:9A:99:8F:83:13:14:FD:F8:3D:60:96
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E749C9EB0CEAA9496D1FF557A0120AB8E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/flwHV8FyFh_2mpmPgxMU_fg9YJY.roa
Signing time: Mon 25 Mar 2024 07:56:44 +0000
ROA not before: Mon 25 Mar 2024 07:56:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 85.209.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:9c:9e:b0:ce:aa:94:96:d1:ff:55:7a:01:20:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 25 07:56:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e5c0757c172161ff69a998f831314fdf83d6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:4e:15:af:2f:71:45:51:d7:48:35:46:2d:
9b:61:e7:fc:51:22:ce:26:8a:b9:95:bc:fb:60:12:
4b:44:3b:4f:90:13:84:eb:83:11:3b:9f:4b:9b:36:
be:1d:4f:af:fa:6e:57:6b:0d:48:b9:95:a7:02:99:
4f:2a:c7:c9:cd:15:d0:42:81:ca:b7:d1:1e:de:9e:
23:c1:33:e4:0e:49:0f:3c:17:d5:ab:4e:e1:c9:99:
85:86:a8:39:b1:ee:78:e3:0a:ac:b6:54:08:49:3d:
62:c7:3b:71:bb:86:69:1e:d5:7d:c5:34:56:e1:ef:
dc:67:29:46:bd:50:d6:7f:70:25:6d:bf:57:89:b9:
a2:a3:27:fc:25:93:ee:6a:bb:df:68:47:cd:f1:42:
3c:a8:f6:26:b2:d0:ac:25:2d:21:9c:da:e2:11:c8:
bb:73:27:1d:7e:de:22:3e:b0:05:5e:e2:c1:af:db:
fa:41:92:2c:da:54:de:6e:ce:3f:25:e7:42:1c:54:
9e:bc:00:a5:de:dc:3b:0b:20:55:1d:63:4e:45:5c:
24:4f:e7:36:7a:46:16:6f:cf:c5:01:51:50:07:42:
b9:4b:3f:b1:7e:16:9b:83:fa:b2:e8:30:f3:26:88:
21:32:ef:36:41:cb:04:7a:00:ca:7a:fb:28:7c:be:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:07:57:C1:72:16:1F:F6:9A:99:8F:83:13:14:FD:F8:3D:60:96
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/flwHV8FyFh_2mpmPgxMU_fg9YJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:93:ea:a2:20:96:87:b3:f7:7f:97:07:c0:59:9b:34:a5:02:
b8:0e:32:dd:28:a0:50:60:6e:39:b2:e2:92:7f:da:a8:8b:9e:
d9:62:8a:1f:02:2f:0d:7e:7b:ea:bb:8f:92:b3:dd:a8:00:f7:
99:38:9d:58:a8:57:5a:e2:b9:8d:57:4b:c6:39:76:c5:8f:33:
b2:9f:ce:d7:7c:d4:d2:1f:77:f1:d4:8f:6d:2f:cf:80:99:aa:
94:70:fa:13:87:33:e2:b2:f0:79:dc:40:61:c3:e2:ac:df:4a:
19:95:72:2b:ff:7f:c6:25:4c:e1:e6:6b:9f:7e:69:93:b5:31:
37:31:b8:b1:82:10:03:40:8b:30:66:04:fd:43:a5:ab:ba:a2:
30:0c:29:10:74:23:13:cd:ae:f6:22:ee:a4:5d:37:0a:84:7e:
e0:eb:6e:9b:7f:70:ab:80:61:07:00:6a:83:a5:d9:72:de:fe:
ce:8f:54:c4:de:8f:76:97:7e:e7:6a:9c:09:70:93:3c:87:f2:
a6:bd:ae:09:da:f0:82:39:50:5e:b3:27:6a:e1:c6:8c:ae:9d:
82:10:27:7e:42:e7:1b:38:9f:f8:47:3a:07:47:d0:00:69:fc:
9f:23:09:c4:9f:6a:f7:1a:5d:53:69:8d:12:f7:f3:5d:6d:48:
66:c8:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:39 2024 by rpki-client on console-ams.rpki-client.org