Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/se8wFkZr30Poku4uEerH3kq_vvQ.roa
File: se8wFkZr30Poku4uEerH3kq_vvQ.roa (raw, json)
Hash identifier: bzxF5nW/AptESovdbKG0swLCmwMxXQ6+iARfdZMzlh8=
Subject key identifier: B1:EF:30:16:46:6B:DF:43:E8:92:EE:2E:11:EA:C7:DE:4A:BF:BE:F4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018D18A08E63350DEDA71DB55C499B39E4A6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/se8wFkZr30Poku4uEerH3kq_vvQ.roa
Signing time: Wed 17 Jan 2024 18:13:11 +0000
ROA not before: Wed 17 Jan 2024 18:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 5.180.33.0/24 maxlen: 24
85.209.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:a0:8e:63:35:0d:ed:a7:1d:b5:5c:49:9b:39:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 17 18:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1ef3016466bdf43e892ee2e11eac7de4abfbef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:80:3d:e1:b1:97:78:0b:ab:e7:bb:d9:48:
2e:12:7e:d1:9d:4c:6e:5d:ad:b5:f4:15:16:f2:4a:
42:46:d9:06:17:2e:f9:c2:98:e7:87:d0:82:52:7a:
a6:87:6b:3c:d3:84:bf:fa:ae:f1:5a:c8:68:22:6a:
89:7b:91:c9:29:1b:e7:89:26:14:bf:8a:4d:be:dd:
e7:4c:ef:e3:7c:9b:da:00:33:0b:85:5d:cb:42:15:
b4:0f:d6:c1:1d:df:43:ab:a0:9c:3a:51:46:10:e2:
03:cd:c3:0b:82:01:48:c8:fb:55:a0:78:44:50:02:
b6:a5:4f:d2:52:56:1f:74:01:93:22:07:66:af:9c:
d6:ad:70:31:ba:4c:ca:78:b4:1a:75:cc:bf:78:ed:
b4:5e:5b:71:05:52:ce:e1:d8:3b:ed:41:69:ad:07:
46:68:9b:19:c7:55:06:dc:7c:1c:fa:fb:cd:1f:fb:
81:f4:6a:65:4d:be:bc:04:a7:54:13:3b:02:af:ef:
db:4d:95:53:a0:e7:3d:c7:77:84:4f:fe:d4:f5:ca:
62:38:db:e1:6f:90:84:94:27:87:2d:52:42:e0:01:
a1:3d:2d:3c:3a:15:ba:80:ca:08:cf:df:e8:f6:da:
68:fc:d4:35:b1:f0:6f:6a:29:f1:fc:c6:d0:05:53:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EF:30:16:46:6B:DF:43:E8:92:EE:2E:11:EA:C7:DE:4A:BF:BE:F4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/se8wFkZr30Poku4uEerH3kq_vvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0/24
85.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1a:bb:15:b8:c4:a4:61:ff:a4:70:5e:3f:85:0f:ff:6c:f0:
4c:95:62:9c:ea:d2:ec:74:1b:78:6b:bd:03:71:69:37:38:50:
6b:4e:ca:b5:c5:a6:aa:e8:46:79:f1:d7:be:19:62:46:2e:c4:
98:a3:b6:34:7f:80:d3:de:ee:f1:c4:99:53:d5:dd:64:51:de:
38:6f:4c:c7:34:d5:f3:68:05:9a:7c:aa:ad:09:2f:4b:aa:6f:
df:72:a8:e0:f4:c4:b7:b1:bc:65:ba:a1:31:c0:00:03:ef:d7:
9a:b0:9b:12:77:03:53:85:64:e2:3a:f6:79:c7:5b:ff:c9:47:
2a:cb:cc:08:93:af:c1:8f:e8:5a:28:5e:2b:44:9e:c2:5b:fd:
1f:b4:82:46:13:9a:49:30:26:37:fc:50:32:d8:fd:57:4b:e9:
e2:60:4b:ba:0a:d2:8d:3c:1e:b2:2d:f0:a7:f6:53:41:7a:d0:
62:21:c5:6b:ec:82:0d:aa:7e:80:bf:9e:10:78:84:fe:ae:1f:
f6:9a:13:b2:95:3e:85:15:c3:02:42:9c:d3:d8:62:d0:49:33:
99:b1:ae:58:37:6d:7c:e5:88:75:e0:0c:d4:48:11:ec:d9:30:
39:a5:26:f9:b3:e2:5d:18:85:41:48:44:3a:3d:fd:b0:24:79:
a2:62:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:42:43 2024 by rpki-client on console-ams.rpki-client.org