Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/AF8ZuSp5Q5SBiaIzDtc232grrWg.roa
File: AF8ZuSp5Q5SBiaIzDtc232grrWg.roa (raw, json)
Hash identifier: 56Zihk5xvnu0SDecj/48nJIqti4UQXy5BuD3sDXIbLM=
Subject key identifier: 00:5F:19:B9:2A:79:43:94:81:89:A2:33:0E:D7:36:DF:68:2B:AD:68
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 018E1899436691EB093FF4C97DE94E7DC0B3
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/AF8ZuSp5Q5SBiaIzDtc232grrWg.roa
Signing time: Thu 07 Mar 2024 11:08:01 +0000
ROA not before: Thu 07 Mar 2024 11:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204030
IP address blocks: 185.116.80.0/22 maxlen: 22
2a06:7c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:99:43:66:91:eb:09:3f:f4:c9:7d:e9:4e:7d:c0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Mar 7 11:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=005f19b92a7943948189a2330ed736df682bad68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:ee:5f:24:4b:9d:ac:27:23:0e:71:f6:c7:
47:88:d7:a1:ff:7b:4a:41:16:d9:eb:61:da:7d:f6:
19:82:94:36:82:8d:b1:64:db:86:c9:62:1e:a7:d2:
42:a4:2b:32:31:a4:6d:42:e4:8f:48:2c:c4:22:da:
80:5c:b7:40:f1:ac:5f:a2:45:b6:92:33:6e:53:e6:
74:0c:ac:54:49:a1:0a:91:f4:a0:aa:44:ad:9a:02:
6e:10:94:b6:9b:e2:82:c9:0f:b8:be:c2:51:19:17:
14:f1:ce:9c:4e:06:c3:c8:2e:c5:30:d0:c3:89:4e:
ab:02:0b:a9:4a:1e:a1:72:69:93:48:a8:f1:04:bf:
6e:4f:d3:58:a5:e7:56:78:53:78:1f:2a:42:51:64:
67:0e:27:41:e1:a8:96:3b:c0:ac:2f:47:41:86:af:
47:5b:79:1b:37:44:2c:36:40:98:47:77:f4:5e:ae:
f2:a4:96:ce:7e:6b:55:2d:70:ec:20:1b:92:86:5e:
74:f3:11:a7:46:28:b5:cd:8d:8d:eb:dc:ea:2c:66:
3b:a1:17:c6:09:05:24:7d:2d:47:fc:b5:ed:6f:66:
a7:05:7a:03:fc:c7:c4:e6:73:75:dc:c6:24:55:10:
a0:26:68:00:7c:c8:b5:84:10:a2:38:ad:1d:ed:c6:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:19:B9:2A:79:43:94:81:89:A2:33:0E:D7:36:DF:68:2B:AD:68
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/AF8ZuSp5Q5SBiaIzDtc232grrWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.80.0/22
IPv6:
2a06:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
81:7f:ab:15:ed:c0:52:4f:57:4f:8d:2e:9f:8d:78:5a:19:5a:
be:3d:48:be:a8:12:ad:db:fb:b1:be:65:af:3f:46:a6:a2:90:
0a:db:c8:85:b4:8b:1a:8a:17:64:b7:71:b9:77:40:19:ca:cd:
fd:29:e1:4f:b6:4e:ef:c4:a1:a6:44:34:62:aa:d7:f4:23:59:
7f:ff:fa:de:e8:06:ed:f4:8a:b0:8f:ef:49:31:66:77:07:e0:
f0:ac:aa:38:e7:b1:5a:65:47:e4:49:63:28:93:d7:d5:8a:07:
67:03:33:6d:76:c1:e6:91:54:0d:f3:eb:85:ab:d9:22:26:d9:
3b:65:df:9a:f2:82:5e:67:0b:cd:62:e6:e8:9f:3d:b5:45:19:
1f:55:12:f1:a3:e6:f8:f0:5a:f1:86:5b:7e:2f:d1:63:69:fb:
ab:cf:f8:4c:27:cc:25:97:af:d8:7e:2c:28:35:f7:44:86:42:
e5:bd:fd:ad:8f:92:40:e7:56:13:e4:83:73:da:83:26:5e:30:
8d:a6:ac:25:fc:83:e5:04:34:e4:e6:d0:ee:49:b4:ee:55:89:
85:ef:d9:01:4f:e4:f5:4e:0a:a4:23:3d:6d:4d:81:a8:4a:67:
e3:33:34:46:c2:81:82:80:cb:ac:c7:06:51:74:b1:df:99:4b:
60:8f:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:29 2024 by rpki-client on console-fra.rpki-client.org