Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8v8ixTQh9meH96hlUWbGdOMzduo.roa
File: 8v8ixTQh9meH96hlUWbGdOMzduo.roa (raw, json)
Hash identifier: tFZPCzNCcoZRb25EMrpPm6Z8Oy034sPFDp+Zgl3juQo=
Subject key identifier: F2:FF:22:C5:34:21:F6:67:87:F7:A8:65:51:66:C6:74:E3:33:76:EA
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01903B940619EE8027BACC51272BE414EE58
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8v8ixTQh9meH96hlUWbGdOMzduo.roa
Signing time: Fri 21 Jun 2024 16:14:34 +0000
ROA not before: Fri 21 Jun 2024 16:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 5.57.33.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
185.212.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:94:06:19:ee:80:27:ba:cc:51:27:2b:e4:14:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 21 16:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2ff22c53421f66787f7a8655166c674e33376ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:9a:9f:2f:67:96:4e:d1:44:54:8c:70:b6:
99:dd:29:63:28:83:50:f7:bb:f4:b2:3e:45:7a:97:
e1:fd:2b:19:95:38:d0:ef:2f:8b:ec:42:df:8f:0f:
fe:74:52:68:07:b6:43:b2:e4:c6:77:ab:95:f4:f2:
5d:e5:ee:3e:84:5e:f3:14:17:8d:03:46:9b:6e:da:
6d:66:71:bf:2d:87:b5:75:53:7e:28:8a:36:6a:eb:
64:fe:86:90:a9:f5:d7:c8:bb:02:fd:b5:21:de:fa:
79:30:9f:39:bc:fa:83:af:73:e3:3c:56:f0:a2:90:
84:6d:07:9b:0f:2f:4d:7c:1d:ec:24:f6:c7:5c:2f:
66:0f:be:9e:e8:37:14:b6:10:8c:12:c7:09:ee:fe:
ba:4f:c0:a3:a0:76:6e:98:db:62:33:b1:49:10:bf:
a3:4e:b5:55:25:5d:bc:33:30:35:48:8a:28:68:64:
d6:62:dd:98:8a:ea:3e:74:31:5c:93:1b:a2:6b:e9:
27:d9:4f:42:6d:a0:06:0b:c3:93:b5:7d:77:fa:86:
95:b3:5d:c9:83:3f:9a:aa:6e:e9:21:4b:b6:7a:4e:
9f:53:8d:b8:22:c7:05:e6:4f:9e:ef:16:8c:fc:41:
cc:21:da:b2:b3:4d:33:8b:15:31:7c:f2:1f:72:e1:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:22:C5:34:21:F6:67:87:F7:A8:65:51:66:C6:74:E3:33:76:EA
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8v8ixTQh9meH96hlUWbGdOMzduo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
185.26.32.0/23
185.212.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c2:12:07:fe:bd:dd:0a:2d:f8:29:fd:5d:2f:8a:72:9b:90:
60:6d:5b:cf:c0:62:4a:d3:3c:9a:8e:10:21:d1:9c:96:ee:9c:
47:1e:8b:6e:a2:1d:3a:1f:95:23:66:8d:6b:d7:d6:9a:92:ed:
ff:e4:61:e0:3d:36:5d:a4:3a:dc:35:9b:cd:2d:42:6b:49:22:
1a:f3:40:b5:e3:d8:28:21:5f:01:31:6c:e6:f3:8b:ff:5f:c8:
fa:b1:46:6d:36:36:e0:27:66:3d:9b:65:2d:fe:a0:e7:d6:2f:
92:6e:96:96:a9:39:c6:c9:05:6f:b4:51:73:85:17:59:87:8f:
7a:0a:a7:a1:d9:b7:64:95:97:56:52:e5:c6:3d:7d:a3:b2:d8:
79:44:f7:9f:a4:af:59:bb:76:c4:8b:b5:89:b4:c4:58:12:89:
19:27:46:ae:74:fd:92:78:01:32:d3:b1:fb:f8:d9:88:c8:4f:
ad:95:35:e0:bb:e6:fe:42:dd:b5:20:8c:0f:b0:2c:09:74:b4:
45:82:ca:84:ed:c0:d3:ce:9f:6f:c9:26:51:5c:d1:9d:3b:88:
5b:82:6b:7c:0b:7b:f7:2b:ff:9b:24:a2:16:61:8a:bf:05:ee:
32:fa:c3:2f:74:4f:f7:cf:81:d5:8b:18:b4:68:29:5c:b6:b7:
b0:db:da:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:49 2024 by rpki-client on console-fra.rpki-client.org