Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/orxVdghea9mwQ8zY0A5_l0f1b8k.roa
File: orxVdghea9mwQ8zY0A5_l0f1b8k.roa (raw, json)
Hash identifier: HXCOeSwfgdbIyCT3uMZ0wfGajmJikjQrQtk1t0JFH5U=
Subject key identifier: A2:BC:55:76:08:5E:6B:D9:B0:43:CC:D8:D0:0E:7F:97:47:F5:6F:C9
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01926C6EAAE0548B55E17AF55979A8E57C51
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/orxVdghea9mwQ8zY0A5_l0f1b8k.roa
Signing time: Tue 08 Oct 2024 14:00:44 +0000
ROA not before: Tue 08 Oct 2024 14:00:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212496
IP address blocks: 85.92.109.0/24 maxlen: 24
185.166.199.0/24 maxlen: 24
195.80.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:6e:aa:e0:54:8b:55:e1:7a:f5:59:79:a8:e5:7c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Oct 8 14:00:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2bc5576085e6bd9b043ccd8d00e7f9747f56fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:f3:ad:07:25:94:a1:04:3f:c5:ff:73:09:
ae:38:bb:7e:de:b5:e9:37:bb:9a:1e:db:5b:4c:62:
ed:97:70:6d:b9:50:74:09:df:c9:21:38:36:85:c1:
3f:8c:ce:2c:5f:97:47:70:90:09:73:86:42:94:30:
4a:59:97:a7:6c:8f:6b:d9:f7:39:67:4b:e5:bf:c4:
9c:1e:2c:b7:fd:f3:58:98:46:3b:e9:e1:cc:1f:9b:
9d:28:3e:40:c6:39:54:39:b0:1f:fe:4a:c0:ce:d7:
c7:80:75:35:0c:7f:a1:f7:1f:95:d3:21:ca:3d:cb:
79:e5:af:19:db:af:e2:3d:b2:cb:82:01:f9:ba:32:
c7:3e:c7:f0:1d:b2:d4:53:5e:6b:37:cf:22:07:90:
6e:ab:fd:97:22:48:52:c2:ad:bb:fe:48:d1:4d:3f:
53:d7:dd:40:e5:16:0d:ed:fa:ca:08:f1:51:d1:61:
85:de:99:88:50:b5:12:91:ff:dd:55:d0:71:4e:9c:
63:71:95:35:ca:d3:47:df:6d:16:39:08:03:17:0e:
60:76:b3:6c:7c:67:b3:cc:27:c2:c9:e2:0f:d5:6b:
a8:44:35:93:c0:0a:df:95:f6:9d:78:67:cf:40:c0:
e2:92:23:04:6b:52:0e:fd:1f:34:cb:4b:18:ba:bf:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:55:76:08:5E:6B:D9:B0:43:CC:D8:D0:0E:7F:97:47:F5:6F:C9
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/orxVdghea9mwQ8zY0A5_l0f1b8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.109.0/24
185.166.199.0/24
195.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6d:4c:04:bd:31:02:22:ae:7e:b8:3a:51:dc:c8:e5:97:e5:
ce:25:0b:af:e1:9f:c5:c3:63:d7:84:b6:a7:10:97:a8:67:99:
e6:56:66:dc:94:94:90:7f:88:40:8d:36:51:8e:dc:59:e2:ce:
fe:63:cc:31:c9:ec:ec:37:8b:7e:07:63:c4:8a:8e:ee:98:64:
7d:8c:79:94:d7:49:79:3d:63:f2:73:6f:29:94:be:51:a8:1c:
da:23:21:4b:dd:c2:ec:10:fe:bb:99:35:9a:3d:3b:62:d4:74:
b5:55:2c:16:57:61:a7:2d:29:44:49:43:cf:fd:d2:c8:78:73:
62:65:27:92:4b:d9:53:fe:13:45:34:03:92:5e:46:cf:ed:9d:
6c:ed:93:d3:6d:40:f2:65:6e:ee:a3:e0:3c:c8:69:a9:37:32:
93:2f:c3:2f:a1:54:82:29:17:90:6e:2e:e1:be:4e:01:4a:7b:
d1:a3:61:41:b7:96:09:8b:f7:90:1b:fd:06:e5:8b:cd:c2:54:
d8:1b:94:e0:6c:93:ef:70:95:e1:b6:52:54:05:b6:78:d1:6a:
88:1d:31:91:68:c2:0c:88:17:2a:c5:45:d5:6c:3d:cf:f6:d7:
a5:d8:fa:6a:09:6c:22:3d:71:57:cc:76:df:ed:be:93:4d:63:
26:cd:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:21:53 2024 by rpki-client on console-fra.rpki-client.org