Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/IfcwKXg2ZFjsYN_L3GGWcYMTUjk.roa
File: IfcwKXg2ZFjsYN_L3GGWcYMTUjk.roa (raw, json)
Hash identifier: +KDJKfRjpcTWEyKZrvPrC6HSdovbnTaMZOgvpOcOcXQ=
Subject key identifier: 21:F7:30:29:78:36:64:58:EC:60:DF:CB:DC:61:96:71:83:13:52:39
Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial: 01933FD20A0787DB4B33ACB2DEA0A1BD90B7
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/IfcwKXg2ZFjsYN_L3GGWcYMTUjk.roa
Signing time: Mon 18 Nov 2024 15:09:09 +0000
ROA not before: Mon 18 Nov 2024 15:09:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43885
IP address blocks: 185.213.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:d2:0a:07:87:db:4b:33:ac:b2:de:a0:a1:bd:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Validity
Not Before: Nov 18 15:09:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21f7302978366458ec60dfcbdc61967183135239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:0d:df:21:ae:79:a7:ff:2f:89:d4:7b:e1:
79:96:07:96:2f:fc:7c:62:d0:e4:f2:6f:79:86:e2:
43:2d:ae:17:b5:b5:70:50:fa:8b:15:3c:5d:e3:73:
52:62:af:79:a2:6c:b3:93:3c:5f:1b:15:26:8c:db:
28:64:fb:b2:63:f2:73:b9:8e:0c:ac:b1:59:69:de:
92:c6:5b:65:da:c1:83:aa:a5:45:15:44:a1:83:cf:
82:33:eb:7d:b0:b6:96:6e:73:72:e5:4d:6f:04:12:
c1:79:65:a9:4d:85:a8:2d:3b:d7:5f:31:b8:f7:ab:
60:ce:d4:84:68:ec:89:a9:3f:0b:3e:0f:00:3b:b9:
77:3f:d5:8b:8b:08:b3:10:c9:81:af:9a:f6:bd:77:
f5:a8:11:54:ad:0e:e9:b8:d6:b3:b5:09:0f:ed:cd:
f6:29:00:3c:8e:24:6b:48:6c:93:55:f9:22:1b:c0:
19:3e:8c:a0:80:a1:f6:5b:65:a5:be:1e:7e:73:16:
e5:e1:bb:9f:ff:9f:3f:14:f8:a9:dd:c7:a5:5e:99:
06:79:d2:2c:90:f7:13:81:45:4c:fe:ab:68:81:b4:
d4:bb:31:36:3c:07:41:bc:50:35:f2:b5:9f:de:19:
4d:a2:b2:7d:85:73:fe:ec:ba:0b:df:2c:59:87:3a:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F7:30:29:78:36:64:58:EC:60:DF:CB:DC:61:96:71:83:13:52:39
X509v3 Authority Key Identifier:
keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/IfcwKXg2ZFjsYN_L3GGWcYMTUjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.196.0/22
Signature Algorithm: sha256WithRSAEncryption
94:18:79:47:d0:36:0f:37:0b:71:aa:8d:7b:e1:19:27:51:76:
a5:79:f8:ac:12:ad:47:ea:cb:ff:b5:c6:d8:9c:1a:86:73:77:
25:0d:55:88:55:f8:ae:3f:a5:61:31:20:24:62:93:f9:ab:f9:
49:37:78:b7:e0:79:7f:6d:5d:5d:35:e0:d6:db:bf:42:9f:b0:
a3:e8:e5:dd:ba:ca:a5:b8:13:53:54:e4:1c:f7:aa:ca:65:19:
5f:65:e9:08:e4:03:59:c2:e8:34:70:65:0e:71:76:dc:b6:fb:
c1:2b:38:d2:51:d4:8b:ef:01:8e:d6:d7:1a:1c:26:75:c3:4c:
c0:28:4d:5a:e4:0b:59:2f:a5:f3:55:75:c6:4a:9c:fb:76:48:
05:29:ed:b2:79:26:b1:80:f3:dc:9b:7e:54:00:ed:e8:df:37:
33:f6:21:af:fa:d2:f5:d8:7a:f7:c8:03:ac:e0:d1:72:2f:c7:
2e:6a:2a:47:26:83:be:fc:2c:d7:7d:dd:e7:35:89:db:2b:02:
1a:12:fb:5f:a1:39:4e:05:bd:b4:1b:21:c9:95:04:a8:3f:56:
2a:55:58:70:b9:74:1f:b8:d3:62:65:cc:2d:84:45:6f:f7:89:
33:20:ce:7d:a1:71:b2:3f:7a:c1:2a:44:a3:23:3e:0d:f2:68:
ae:bd:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:57 2024 by rpki-client on console-fra.rpki-client.org