Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/8vXyoh2kRETDr7JPB0gRccIqx50.roa
File: 8vXyoh2kRETDr7JPB0gRccIqx50.roa (raw, json)
Hash identifier: cbBQKTOtpk2Mki9NVKViV8lyB2YMRbyDs09dUDbbZsM=
Subject key identifier: F2:F5:F2:A2:1D:A4:44:44:C3:AF:B2:4F:07:48:11:71:C2:2A:C7:9D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 018CC72728B95539992C46F8E2540C305805
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/8vXyoh2kRETDr7JPB0gRccIqx50.roa
Signing time: Mon 01 Jan 2024 22:31:21 +0000
ROA not before: Mon 01 Jan 2024 22:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 185.85.208.0/22 maxlen: 24
2a0d:9c80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:28:b9:55:39:99:2c:46:f8:e2:54:0c:30:58:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Jan 1 22:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2f5f2a21da44444c3afb24f07481171c22ac79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:5d:e6:40:ef:33:b6:d6:a5:c8:7c:09:0a:
81:e1:7f:78:40:3b:61:f7:3b:c2:69:88:86:2a:ec:
9a:39:46:e1:fc:a8:46:fd:2c:77:9c:e7:19:d8:56:
20:e5:9e:65:46:85:5a:15:77:31:64:1a:f1:2a:94:
94:99:7e:06:41:69:19:a4:bd:ca:7f:01:c4:e1:6e:
ef:f4:56:76:95:a7:96:b6:d2:15:2f:71:74:0b:f6:
03:93:3a:d8:00:29:14:02:bb:be:ac:07:86:6d:aa:
65:58:9c:67:a5:84:d9:52:32:be:66:d5:33:e4:6a:
3b:2d:c2:34:03:25:bc:8d:82:fe:4a:78:2d:40:35:
6f:ce:da:5d:9e:ff:21:18:24:59:ef:8b:cd:62:1c:
32:81:8a:f0:fe:d4:79:8b:20:c4:24:76:3d:b7:70:
39:de:ee:f7:03:1c:d5:22:c5:c6:cf:7b:5a:79:8e:
0d:d9:a4:b7:a2:c6:59:15:e2:a5:54:bb:3f:93:15:
8c:f7:28:1a:09:fe:33:71:8b:77:e2:86:a1:79:65:
7d:8b:63:88:c5:7b:10:0c:8a:71:63:72:f9:f5:36:
99:2c:9d:eb:b4:7b:20:1d:46:56:d6:44:37:70:a8:
c3:77:cc:79:a4:2b:f5:2b:e9:8c:9f:e8:54:44:e5:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F5:F2:A2:1D:A4:44:44:C3:AF:B2:4F:07:48:11:71:C2:2A:C7:9D
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/8vXyoh2kRETDr7JPB0gRccIqx50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.208.0/22
IPv6:
2a0d:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
25:40:6a:de:fc:b0:49:36:c4:46:72:6d:af:e3:15:9d:f8:b0:
e1:d6:bb:99:21:3e:4f:e9:f0:b5:61:5a:a1:01:56:91:3a:a2:
62:28:62:48:9b:1a:74:9a:d5:de:df:b6:94:5b:d2:20:d3:9a:
73:16:63:21:3b:57:48:bf:5a:c7:3e:1b:74:05:51:9c:04:6c:
c0:20:de:87:ac:8f:fe:47:48:58:fd:bb:f7:f5:56:76:5d:c5:
5c:1b:69:46:ec:47:c1:3c:90:63:c5:85:d2:95:c4:fb:a7:db:
1e:e4:26:cd:e5:c0:11:09:c5:c6:1d:23:f5:a0:70:03:64:54:
36:d4:69:2a:74:a8:36:02:d1:74:d2:59:90:3c:7e:15:63:10:
c0:78:cb:37:9f:5f:cd:73:5e:d0:2b:f1:98:4c:67:a5:c1:1b:
89:47:95:8c:26:12:a6:7a:5c:4b:ac:a9:ce:62:54:98:cc:56:
9c:e6:68:18:bc:63:33:bb:58:d7:42:26:0c:96:98:32:d1:6b:
2e:0a:2a:c3:3b:57:df:56:7f:0e:ea:6d:e7:4d:65:fb:e0:45:
b1:00:ba:2d:74:48:0d:10:9d:54:15:cd:42:8c:df:5c:9c:a6:
e9:5d:4e:be:ba:53:dc:96:85:7f:2c:f0:a0:32:40:70:6f:a5:
33:75:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:09:31 2024 by rpki-client on console-fra.rpki-client.org