Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/25fDYiozCriyzQrJc7xSlHgy3uA.roa
File: 25fDYiozCriyzQrJc7xSlHgy3uA.roa (raw, json)
Hash identifier: GCnslpnW5X5r0fPTW1oNmrNykT1lPryfTDj+EgFiTU4=
Subject key identifier: DB:97:C3:62:2A:33:0A:B8:B2:CD:0A:C9:73:BC:52:94:78:32:DE:E0
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 018CC5007A0A35255C92D5A99D971792581F
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/25fDYiozCriyzQrJc7xSlHgy3uA.roa
Signing time: Mon 01 Jan 2024 12:29:51 +0000
ROA not before: Mon 01 Jan 2024 12:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212693
IP address blocks: 213.185.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 13:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7a:0a:35:25:5c:92:d5:a9:9d:97:17:92:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Jan 1 12:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db97c3622a330ab8b2cd0ac973bc52947832dee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:f8:5a:ed:ee:83:9b:5f:78:bd:8e:a6:49:
8a:f3:b7:f6:ff:97:b0:f2:85:71:2f:78:59:08:6a:
92:0f:48:f2:ed:ce:5e:c3:51:6a:fc:d1:57:f7:09:
b5:9f:9c:2a:62:89:41:82:10:f3:b1:ed:69:23:63:
b9:e3:bd:11:51:d3:5d:86:40:15:47:eb:45:f1:9b:
51:0e:71:b2:d1:b6:39:72:ce:0c:c8:b4:1f:2c:63:
b2:63:5c:fe:01:ef:f2:fa:62:85:6f:ed:ca:11:03:
94:71:8a:25:e9:a9:46:91:78:de:bc:44:ec:a0:32:
92:0a:c0:6c:fd:d5:ee:46:03:4c:65:96:92:bd:af:
4a:af:2b:df:ef:bb:37:5a:30:f4:9a:ff:38:85:5d:
d5:d2:a1:65:c1:8f:4f:b4:c5:f3:a4:21:e4:54:9a:
eb:7e:34:cc:f4:da:56:f0:9a:08:30:a8:1b:00:e2:
0b:26:6b:12:5e:86:81:20:f2:b6:9f:ed:f8:4b:ef:
58:60:9f:db:16:25:fd:33:08:bf:58:7c:04:8d:16:
db:f7:28:35:c8:e5:33:83:74:77:48:60:e7:c1:98:
85:1f:8c:ca:3e:51:6a:b8:45:a4:6d:4c:db:06:90:
6f:d8:f8:f5:a0:b2:e2:cd:26:83:1a:44:27:de:34:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:97:C3:62:2A:33:0A:B8:B2:CD:0A:C9:73:BC:52:94:78:32:DE:E0
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/25fDYiozCriyzQrJc7xSlHgy3uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.64.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7f:c6:a7:58:c1:0a:19:e7:af:da:8b:65:8f:5d:a6:a1:91:
8a:fb:ae:98:aa:21:2b:d2:be:31:20:b9:65:b2:fe:85:9f:be:
0a:ee:25:36:8e:44:85:18:f5:ea:bd:ae:8d:93:03:c0:04:83:
f7:d5:84:1a:50:b9:65:83:cb:59:89:c1:e6:1f:b5:df:c7:66:
f7:73:86:f4:4c:75:8b:4a:fa:97:79:32:71:3d:ee:24:52:1a:
aa:1a:8a:80:c6:b5:07:6e:4d:6a:cb:8c:65:3d:44:52:64:86:
4a:3c:0d:66:b2:a4:fa:dd:12:94:ea:6e:9c:c8:e9:e8:18:82:
f4:29:76:1b:4b:5b:f2:c5:7a:cd:4b:eb:69:cf:b5:87:0c:c2:
82:23:ea:d7:33:50:2f:12:73:c0:d6:e2:35:6e:2d:cd:e1:68:
2c:db:70:40:14:3f:84:65:00:43:6e:83:3b:cd:fa:b2:27:41:
c3:da:26:8c:61:3a:48:c3:c9:e5:43:e6:14:2e:6c:19:2b:00:
f0:87:52:69:ec:bb:cd:0c:0a:c7:92:65:73:07:35:95:96:15:
45:59:e0:fe:a1:a8:38:cf:80:69:9c:d0:3d:6a:85:93:ed:80:
ee:55:fd:0f:6f:3d:31:6d:96:80:d1:1d:93:63:ce:1f:29:44:
5b:1a:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:43:54 2024 by rpki-client on console-ams.rpki-client.org