Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/_fEDiCBOvcQQlrbRd4oMNGt_e9w.roa
File: _fEDiCBOvcQQlrbRd4oMNGt_e9w.roa (raw, json)
Hash identifier: mclo5c/hC1HuJgRNl9GVraP0B54KwHtdZOJtZV5jaOc=
Subject key identifier: FD:F1:03:88:20:4E:BD:C4:10:96:B6:D1:77:8A:0C:34:6B:7F:7B:DC
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 018FC4EE9B2125AF6726240952AE6DB617C9
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/_fEDiCBOvcQQlrbRd4oMNGt_e9w.roa
Signing time: Wed 29 May 2024 15:18:42 +0000
ROA not before: Wed 29 May 2024 15:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203485
IP address blocks: 185.133.92.0/22 maxlen: 24
2a05:40::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:ee:9b:21:25:af:67:26:24:09:52:ae:6d:b6:17:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: May 29 15:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdf10388204ebdc41096b6d1778a0c346b7f7bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:a6:05:6c:33:de:7d:76:81:c3:93:e3:9a:
0a:58:19:26:7f:73:8f:cf:1b:58:d4:58:2a:64:06:
e9:1c:f5:3a:d1:50:30:b1:05:2c:ef:04:5d:61:97:
5c:b7:78:bc:86:37:11:df:ca:58:ed:50:42:46:6e:
cd:1b:66:db:ba:8c:9a:3e:b8:8f:68:d6:98:66:91:
f7:75:7e:f5:52:ce:eb:83:61:ca:3c:d3:24:84:09:
8b:0c:9d:7d:70:e3:21:ff:6e:20:48:ed:17:83:8c:
8e:4e:d7:48:95:6c:2f:ce:35:11:26:20:7f:ff:78:
5c:a1:dd:e0:9d:ef:a0:98:d6:5e:3e:11:77:c1:d4:
17:3d:1c:84:46:ad:f4:75:b6:72:03:8e:2a:8f:5a:
0d:84:d8:e8:b9:6d:7c:3d:e7:14:c0:9e:3b:3a:42:
49:bf:c2:4e:f8:ba:63:5f:4d:7a:89:7f:e9:93:4e:
b9:2b:a6:85:61:82:5a:8c:a4:c8:d1:5c:7c:e0:a4:
af:d0:74:03:88:e2:88:7f:0e:ce:e7:52:a1:e2:b7:
7a:be:a5:8a:87:da:d8:d3:bd:35:78:1a:17:30:17:
a1:ba:7f:8c:17:d5:e6:43:09:47:bb:5f:e3:f7:d0:
0c:ff:b8:09:45:eb:7d:9b:02:b4:5e:84:80:36:81:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F1:03:88:20:4E:BD:C4:10:96:B6:D1:77:8A:0C:34:6B:7F:7B:DC
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/_fEDiCBOvcQQlrbRd4oMNGt_e9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.92.0/22
IPv6:
2a05:40::/29
Signature Algorithm: sha256WithRSAEncryption
02:b4:1c:b2:a8:46:08:89:02:0f:fa:99:17:00:60:61:2b:ca:
87:17:51:c9:3e:32:34:39:4f:bd:fb:dd:f2:9d:00:4b:49:6c:
3f:51:6c:ef:93:f2:90:bf:ae:d6:46:6f:ce:9e:6c:be:2c:e6:
1a:88:70:8b:39:d7:5c:46:a1:b7:57:37:91:d9:4c:06:2a:69:
4e:17:16:2b:86:f2:58:7e:ed:69:9f:5c:17:72:9d:79:c5:b0:
a6:b4:a8:82:5a:59:72:23:79:34:33:a4:07:76:78:d0:74:ac:
55:ff:9c:5a:cd:f3:14:c4:ac:c8:df:42:78:28:2a:f5:06:0b:
43:23:93:ea:ce:b2:1e:8b:d1:d8:90:6c:1b:f4:1d:86:e8:a7:
a2:c0:2b:11:43:d9:05:ea:f7:bc:09:fb:7a:a8:6d:95:27:44:
52:85:13:eb:de:cd:05:52:89:71:22:fe:42:b1:9e:d2:4d:e8:
69:9d:3c:2f:12:e9:ea:c1:09:0a:fa:10:85:fb:2d:7d:d2:8a:
88:50:01:d6:cb:99:c5:f1:59:0d:0c:e4:44:0d:a7:fa:49:bd:
65:cb:97:e1:a8:e8:6f:8c:4e:c5:d4:4d:03:a1:6d:e8:20:95:
da:57:fc:1b:50:f9:c9:69:89:49:04:6e:3a:bf:0c:1f:19:61:
e7:9f:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:18:29 2024 by rpki-client on console-fra.rpki-client.org