Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5tkx-XydFwIhqZusREBZrICKWo0.roa
File: 5tkx-XydFwIhqZusREBZrICKWo0.roa (raw, json)
Hash identifier: YHvf8ZI6X3G75FihbDI6iy5GLB6fxyewom96l2JYuCA=
Subject key identifier: E6:D9:31:F9:7C:9D:17:02:21:A9:9B:AC:44:40:59:AC:80:8A:5A:8D
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 018CC794A2414E04540CE11575786E1E07C5
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5tkx-XydFwIhqZusREBZrICKWo0.roa
Signing time: Tue 02 Jan 2024 00:30:55 +0000
ROA not before: Tue 02 Jan 2024 00:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204130
IP address blocks: 185.47.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a2:41:4e:04:54:0c:e1:15:75:78:6e:1e:07:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 00:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6d931f97c9d170221a99bac444059ac808a5a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:82:a2:a7:ff:81:a0:88:91:4d:32:e6:5e:
f5:e1:29:fd:ce:27:1a:92:6f:97:22:a1:1b:80:2a:
3b:f3:d4:d5:f0:ea:59:a5:c6:1b:1c:76:87:67:5e:
5f:44:df:af:b5:4a:ab:76:2b:3a:3c:2e:71:0e:15:
62:a2:65:0a:13:76:30:71:ff:73:ef:61:90:48:2e:
7f:4c:6f:38:6c:6b:8a:50:a6:0d:41:a2:44:43:58:
6b:cc:68:e1:05:29:79:4a:7d:98:78:05:e4:39:77:
9a:e9:6f:bd:1c:0f:b2:80:92:83:67:e1:de:34:c6:
33:7e:8d:63:1a:dd:fc:1f:f7:89:fc:a2:b2:b9:eb:
b5:70:60:57:3d:5b:c8:23:cd:3c:c0:d8:d9:a9:89:
65:18:ad:23:9f:e4:4e:1b:7f:52:84:29:85:5c:52:
a6:83:9b:a4:f3:ec:6d:7d:98:6e:c9:f1:60:de:db:
78:cf:f3:3f:f6:22:f6:4c:23:05:11:d2:59:65:f3:
29:4f:44:93:78:1c:31:32:e4:5f:0e:36:b7:01:47:
82:fc:11:51:ec:6b:10:30:2b:fe:9a:d0:15:76:cc:
55:7b:24:08:e4:8b:35:66:02:28:1e:4b:ac:ee:78:
e6:67:9d:4e:db:d2:b6:de:1a:11:6c:9e:9d:70:76:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D9:31:F9:7C:9D:17:02:21:A9:9B:AC:44:40:59:AC:80:8A:5A:8D
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/5tkx-XydFwIhqZusREBZrICKWo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.8.0/24
Signature Algorithm: sha256WithRSAEncryption
94:55:45:e3:5b:20:50:d9:47:3e:6f:15:23:55:32:f7:17:a5:
a0:1a:80:78:9d:cf:4a:14:54:cf:d9:3e:5f:15:5d:fb:44:c3:
f3:12:a6:6e:19:45:e0:1e:24:ed:1f:a2:3b:48:b5:f1:e3:38:
95:54:a1:5e:11:11:f2:94:9c:70:48:85:91:43:b2:41:79:4a:
bc:8d:7e:72:7a:f9:bf:bc:10:01:4a:65:ce:7e:f1:4f:eb:66:
cd:4b:cb:ef:40:10:b1:47:1a:fe:24:e4:83:28:66:a3:5d:55:
6b:f3:2c:12:42:61:5e:c8:d6:08:10:46:a3:5e:a2:d7:cf:48:
ba:f4:23:ff:6d:57:91:57:16:87:eb:6d:36:d2:21:bc:48:f6:
da:59:3e:93:43:40:4c:ec:d1:63:a6:f2:a4:9d:c8:a7:0f:3c:
61:ee:4f:bf:03:7d:60:db:79:1d:db:05:90:c4:6f:a2:a2:ca:
69:89:f5:2c:e3:bc:c6:27:a1:9b:dc:f6:43:de:b3:ca:cb:90:
af:53:f2:63:94:3b:e9:a7:37:8e:a7:26:ba:5a:87:ef:0b:45:
ef:83:28:5e:8e:a1:bf:d2:bb:aa:8e:95:d8:42:fb:61:ce:2f:
8c:99:8e:b0:b5:77:a6:59:7d:d4:0f:b5:4a:1b:d1:69:20:3f:
5e:eb:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:10:48 2024 by rpki-client on console-fra.rpki-client.org