Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iVIgZ5vS74VbpgFmWz4VR5WkQ3I.roa
File: iVIgZ5vS74VbpgFmWz4VR5WkQ3I.roa (raw, json)
Hash identifier: WdkoZMxiZqYYzsccz6LFctI0Deilf7aZtNOKHaoeCRA=
Subject key identifier: 89:52:20:67:9B:D2:EF:85:5B:A6:01:66:5B:3E:15:47:95:A4:43:72
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A4F954F5A570209FDD7C7CF0AA8F6
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iVIgZ5vS74VbpgFmWz4VR5WkQ3I.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56382
IP address blocks: 185.133.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4f:95:4f:5a:57:02:09:fd:d7:c7:cf:0a:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=895220679bd2ef855ba601665b3e154795a44372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:01:33:cb:5c:bc:b5:3f:b5:c1:f7:56:d4:
30:fa:25:7f:97:2c:4c:d4:32:0c:b7:61:22:f0:aa:
8d:23:f5:6b:bb:c4:b5:f7:08:83:40:de:eb:6d:41:
a7:14:33:91:33:96:d0:91:73:eb:de:31:05:8f:02:
31:39:cf:73:fc:0e:5b:ea:c9:86:b6:92:79:bf:98:
a2:0e:42:ac:f9:90:89:78:3f:3e:4a:94:9f:79:ba:
86:fb:5a:ee:54:61:84:8b:3a:98:ff:20:8d:6a:2e:
83:ce:09:51:f9:2f:9d:fd:14:90:d8:40:a1:6c:11:
8b:ab:2f:ce:cc:fe:a7:4b:1b:5e:a3:d6:58:a5:2a:
f3:f8:d3:c0:eb:df:9b:1e:2f:5b:ce:84:d9:ed:eb:
af:6f:5d:3b:cc:67:93:4a:e7:c0:a6:d4:94:1f:a8:
bc:5a:cc:8f:67:ab:a3:92:6a:12:2d:08:fb:a2:8b:
47:89:33:ba:88:c0:70:4d:88:d6:06:ac:a4:95:6e:
e2:b1:c9:15:90:9c:8b:f6:e9:a6:d3:f4:17:c1:40:
08:4f:92:ab:af:6d:11:a5:8f:00:87:62:25:c8:a7:
16:fb:83:2e:81:0a:4d:34:0d:19:87:62:02:d2:ae:
fd:95:a4:e2:a8:8f:3b:52:ab:bf:ef:46:9b:fc:e6:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:20:67:9B:D2:EF:85:5B:A6:01:66:5B:3E:15:47:95:A4:43:72
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iVIgZ5vS74VbpgFmWz4VR5WkQ3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:1f:09:37:01:f7:d2:56:35:d2:2f:70:b1:17:8b:fd:f4:15:
87:a0:83:1c:69:21:c5:14:c5:de:ee:34:89:f6:8d:6f:93:af:
c7:1f:6a:20:46:fd:bb:64:3b:af:0b:97:bf:69:21:a1:3a:f7:
2d:44:86:96:4d:a8:b5:97:43:51:3e:bc:1e:a1:2d:55:10:e7:
a6:e5:ca:53:87:a1:13:6b:48:fa:f4:6b:9b:45:36:31:73:83:
8d:27:26:12:20:a1:b6:3c:50:cf:31:45:29:ac:1f:8a:aa:4f:
da:5b:ff:eb:f0:fb:02:d8:96:19:65:2c:7c:74:ce:3f:ea:32:
74:6c:75:fa:41:02:06:c4:7d:6a:67:17:52:8c:bd:91:2f:79:
11:66:10:21:d6:b9:e9:fc:c5:a8:75:3a:a4:ba:58:f3:0b:87:
a6:17:0a:1b:9f:6e:74:4a:ef:74:2b:2e:12:a3:60:29:d4:ee:
7b:08:64:68:a9:e8:27:41:56:4e:3c:5f:93:f7:7b:f4:1d:45:
23:f4:7b:c1:9b:f3:b2:c2:11:67:03:68:93:4f:6b:65:9b:ef:
b3:c0:03:1a:38:84:47:81:19:9d:25:b9:a9:e9:53:94:f6:c8:
99:25:8b:20:28:c4:f1:ab:99:22:0d:65:ac:a6:43:ae:35:87:
04:be:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:37:01 2024 by rpki-client on console-fra.rpki-client.org