Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/tmxrzZ5MgMlJ8tanA-chsWmM8fI.roa
File: tmxrzZ5MgMlJ8tanA-chsWmM8fI.roa (raw, json)
Hash identifier: 9K4WD5XizRugcGCyL67DDIv5yut3bxD0jLIbwl/9Gyk=
Subject key identifier: B6:6C:6B:CD:9E:4C:80:C9:49:F2:D6:A7:03:E7:21:B1:69:8C:F1:F2
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 018CC2DABF02114146187BC22C4C10D033B5
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/tmxrzZ5MgMlJ8tanA-chsWmM8fI.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211559
IP address blocks: 185.25.14.0/23 maxlen: 23
185.25.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bf:02:11:41:46:18:7b:c2:2c:4c:10:d0:33:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b66c6bcd9e4c80c949f2d6a703e721b1698cf1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:e7:2f:f3:38:9a:8d:75:2d:5b:79:e1:db:
7e:60:93:ec:20:6a:e5:4e:2d:7b:16:04:b5:7e:e7:
3c:8d:ea:cc:ca:10:9d:2d:cc:61:9b:f4:5c:77:17:
33:aa:7a:3e:a6:a6:b2:d3:b5:31:81:3c:b5:84:49:
cb:a4:cd:ad:85:9d:53:8c:6f:be:89:9b:61:5a:fb:
9c:d3:eb:5b:13:22:53:72:7a:fa:5f:19:81:ea:76:
49:9c:31:f8:9f:13:36:ad:7e:53:9f:80:f5:be:e9:
d2:15:01:e4:c1:f1:4a:dd:74:9c:59:63:26:92:dd:
40:79:aa:82:ec:ed:d4:6d:90:55:b0:48:a2:42:27:
ea:f2:6f:ac:fa:7a:c0:88:8e:f6:a6:5b:95:39:b0:
cb:d9:d7:98:31:4b:18:20:70:1a:b9:27:df:a1:8a:
33:66:c0:bb:db:6f:b5:50:ff:27:41:7d:ba:de:6f:
e3:fb:13:f5:89:41:2d:a5:3a:cd:3a:45:51:11:a4:
90:70:51:bb:13:dd:fa:b5:ff:05:2e:1f:1b:78:a8:
93:a5:1b:e2:bd:7a:db:44:16:66:32:fb:c3:c4:a8:
92:71:9a:ed:01:f0:3b:d7:0b:af:51:09:e2:76:61:
6d:9d:b4:ef:c0:38:00:a8:4f:23:f3:b3:8b:5d:d1:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:6B:CD:9E:4C:80:C9:49:F2:D6:A7:03:E7:21:B1:69:8C:F1:F2
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/tmxrzZ5MgMlJ8tanA-chsWmM8fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.12.0/22
Signature Algorithm: sha256WithRSAEncryption
20:31:0c:d5:cf:e3:47:bf:33:35:55:54:9d:77:6f:5a:13:5d:
af:10:8e:92:ac:b0:ce:3f:34:ff:e6:a8:45:2f:44:16:3c:f2:
a7:bb:9f:0a:5c:4c:31:6e:40:7c:e1:b8:09:74:db:76:82:80:
3a:ab:f8:ff:37:ae:3f:2d:8a:94:76:8e:7f:52:76:38:3b:9f:
28:fd:1e:56:27:c3:b7:e8:4f:b4:c6:92:27:4e:4e:64:5e:24:
c9:9c:dc:f0:1e:0a:7d:03:d8:79:8d:4e:bd:cf:ac:47:eb:c9:
ca:67:4e:83:54:a5:2f:78:58:32:da:71:64:fa:43:df:12:48:
13:49:32:e5:b0:07:58:72:84:1a:45:4b:eb:c7:db:31:53:41:
45:cd:f7:c2:7c:54:42:e7:16:ee:01:d3:b9:8a:da:d3:74:22:
9d:ad:b2:aa:93:c9:af:83:3b:77:e0:14:e0:77:2a:a4:c7:40:
7d:34:80:bc:7e:4e:87:b2:f1:6c:84:f6:36:c1:e1:64:ca:32:
d4:4e:23:e5:ea:d6:10:4c:15:cb:9e:a3:60:45:43:9c:a7:a8:
bc:98:6c:c8:ed:3c:0f:7e:c4:50:64:f9:29:65:6d:71:b5:b5:
62:c0:2c:91:e9:c7:95:9c:9d:76:15:38:e1:ac:30:27:97:6b:
fd:e0:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:52 2024 by rpki-client on console-fra.rpki-client.org