Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/fXqenZxU5Av4ZkBOFD9pNPkV1hs.roa
File: fXqenZxU5Av4ZkBOFD9pNPkV1hs.roa (raw, json)
Hash identifier: 8+9ROSU6L3mkqj8Lbi86jq39ch40Vq8sdn9JZtKpa0U=
Subject key identifier: 7D:7A:9E:9D:9C:54:E4:0B:F8:66:40:4E:14:3F:69:34:F9:15:D6:1B
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 018DA8982E1A7927723E86634637FD5AEA61
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/fXqenZxU5Av4ZkBOFD9pNPkV1hs.roa
Signing time: Wed 14 Feb 2024 17:09:21 +0000
ROA not before: Wed 14 Feb 2024 17:09:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.133.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:98:2e:1a:79:27:72:3e:86:63:46:37:fd:5a:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Feb 14 17:09:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d7a9e9d9c54e40bf866404e143f6934f915d61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:1c:2c:ee:d3:70:99:8c:73:08:2a:af:07:
5d:fa:4e:c5:dd:4f:08:36:dc:cc:aa:3b:97:26:04:
9f:98:c7:dc:29:91:fb:1f:1b:47:fa:5e:26:82:1f:
30:b0:58:e5:98:d9:c7:a2:f6:1e:cf:c4:0f:53:07:
df:50:f5:77:a4:a8:43:d8:bd:28:ea:ba:af:9c:08:
17:99:74:64:bc:01:07:d1:4f:55:e9:42:96:f0:fd:
19:0b:24:a7:e1:e4:2e:1c:5c:98:ba:5f:6e:aa:e3:
4a:0f:14:a7:03:7f:46:6f:7b:ca:e0:98:f2:b2:05:
d2:b2:6f:0e:1b:f5:55:23:95:a0:0a:22:8c:da:30:
ef:75:21:fe:f8:ad:09:a7:f2:32:53:dc:20:b9:60:
9c:e6:2d:7c:ef:96:55:b2:a0:5c:2e:81:fc:3b:25:
4d:60:22:0e:fc:07:c7:d2:d5:12:16:55:d4:da:47:
63:8d:d1:0e:54:bb:16:95:d1:51:41:4b:08:4f:3c:
1c:4d:c4:fe:69:eb:91:b7:f2:32:09:13:3f:0d:b2:
3d:24:1d:b6:ea:2a:d3:27:28:43:ed:53:a0:d8:f0:
ad:cc:c2:bd:6f:8e:2e:d1:c2:10:0a:fe:4a:c2:be:
b0:a5:5f:b4:26:b9:3f:1c:bf:76:66:a6:88:9d:1d:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:9E:9D:9C:54:E4:0B:F8:66:40:4E:14:3F:69:34:F9:15:D6:1B
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/fXqenZxU5Av4ZkBOFD9pNPkV1hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ab:f4:7f:9d:2f:33:9c:82:a7:be:80:b1:c7:86:a2:25:f9:
22:cb:04:4e:ba:fe:9e:33:d2:e1:84:59:37:25:7c:b5:8c:5f:
e9:4f:f9:85:45:13:12:32:40:62:e3:b0:89:e0:e5:b9:8d:06:
79:28:da:22:44:f5:ff:f8:76:68:ed:9b:f7:d1:a0:ac:ed:99:
90:a5:e8:bb:2e:2f:7b:69:b4:8f:ac:64:a6:1e:a9:64:e6:a1:
31:4d:d5:74:cc:d7:b9:da:bf:80:09:52:23:7e:81:ad:f5:40:
cd:a8:76:6a:a9:b6:df:2b:ab:8f:b5:ad:d4:f7:8b:e3:42:6f:
73:a3:50:2a:b2:26:d9:81:d1:ec:3b:68:cd:44:57:0a:1e:5f:
2a:cc:7c:5a:b9:2e:41:5a:ee:2f:d7:bc:d9:27:bc:d6:01:62:
06:a1:94:02:4d:f2:d1:ce:08:33:42:09:8e:fd:e1:4b:f3:c1:
e4:5c:82:6b:c0:e6:f8:5b:8e:a8:62:42:5c:42:a8:79:0f:73:
a6:6d:f1:db:3a:3c:46:1f:54:66:9b:8a:0e:3a:76:51:04:7c:
74:c5:18:e9:dd:b4:eb:63:95:4f:09:7a:1a:e9:da:94:e9:e5:
6d:f0:b2:24:bd:fe:e0:53:6f:9a:f8:3a:ea:9d:d0:04:7d:1e:
43:e6:4c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:20:48 2024 by rpki-client on console-ams.rpki-client.org