Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/1-ydd1TGcB2MGi2bRwAUpyfdXeS0.roa
File: 1-ydd1TGcB2MGi2bRwAUpyfdXeS0.roa (raw, json)
Hash identifier: 45PEvfIfy7tudo6dFyib3an+JLs7jSdh/8kWtD8397A=
Subject key identifier: FB:27:5D:D5:31:9C:07:63:06:8B:66:D1:C0:05:29:C9:F7:57:79:2D
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 01925253878B62BB53B0003F4B86DBCFBAB3
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/1-ydd1TGcB2MGi2bRwAUpyfdXeS0.roa
Signing time: Thu 03 Oct 2024 12:20:58 +0000
ROA not before: Thu 03 Oct 2024 12:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12552
IP address blocks: 185.134.100.0/22 maxlen: 22
2a06:ecc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:53:87:8b:62:bb:53:b0:00:3f:4b:86:db:cf:ba:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Oct 3 12:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb275dd5319c0763068b66d1c00529c9f757792d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:9c:80:25:02:aa:a3:89:86:b1:ee:88:aa:
c2:ed:be:8c:aa:87:b1:f8:fe:f1:1e:da:bd:ac:bd:
cf:b8:ef:a5:d2:e7:b3:a6:02:e5:70:08:5b:14:d5:
66:d7:5a:26:e5:ab:ee:c4:bc:dd:1d:c1:08:e9:76:
27:26:c7:37:07:90:0e:1b:fa:d4:f1:d8:01:e8:b5:
56:bf:4d:bf:72:dd:c5:2f:cc:21:79:81:e0:0a:f4:
77:b5:67:d8:cb:70:5d:b3:d2:41:86:c4:dd:13:6b:
cd:e8:2d:c2:14:7b:e9:22:7b:c1:55:5e:3c:10:72:
ec:26:a9:e4:3b:60:93:80:c0:24:86:3e:51:2b:62:
e8:a2:5a:6c:23:23:29:51:a0:9f:1a:1a:f9:dd:82:
e0:82:36:92:b9:d2:e9:3f:a6:91:83:6f:f0:1d:da:
64:44:58:67:f2:da:f8:24:22:67:7c:f8:8b:16:2e:
aa:18:28:1d:a0:98:a1:3c:fe:cd:5d:08:c9:5c:52:
c4:c3:a7:4a:de:55:e3:43:f9:e4:14:f2:82:e3:78:
0b:4d:fb:c7:4a:7f:3b:52:54:16:fe:41:95:19:40:
8f:c2:42:e3:9f:8d:fe:d8:15:ec:6c:d2:a6:4a:aa:
6c:a1:bd:7d:48:32:f9:1e:9b:6c:5b:f0:26:04:e5:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:27:5D:D5:31:9C:07:63:06:8B:66:D1:C0:05:29:C9:F7:57:79:2D
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/1-ydd1TGcB2MGi2bRwAUpyfdXeS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.100.0/22
IPv6:
2a06:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
97:e9:61:57:a8:f2:79:fa:8f:5a:bc:2e:f7:d6:a0:64:96:b9:
58:b5:d8:58:91:69:58:ef:be:6c:31:6d:5c:d3:5a:d3:83:09:
4e:59:54:3b:81:7d:fb:f3:09:28:67:83:4f:69:2c:83:e6:a9:
d8:55:ec:6c:7a:f7:07:38:ae:47:a4:0f:88:2d:83:c7:43:1f:
05:12:7e:a5:ba:39:07:83:b4:6e:71:f4:11:b7:9f:21:26:1d:
49:21:03:99:bc:86:d2:47:47:1e:f3:05:82:31:3d:1f:39:1d:
4a:55:d6:97:f9:03:ef:a0:01:66:5c:3d:5c:cf:e8:48:7d:85:
92:76:ea:46:0b:38:f2:e1:2e:b8:dd:a3:ef:bc:eb:8a:28:45:
33:2a:42:73:a4:5d:21:4f:8d:70:ec:5b:17:06:02:a6:25:b7:
7d:dc:8c:54:46:bb:e6:9e:c2:18:7a:59:3c:a5:0c:35:ab:8d:
8c:45:03:75:6c:2a:f2:61:ce:17:0e:50:ae:a9:99:0d:e2:12:
d5:55:a1:3d:27:56:8a:f2:4d:74:53:5d:f8:c3:80:9a:09:e7:
f9:e3:a8:ef:af:67:c9:70:58:d4:54:21:f5:5a:e9:ba:2e:86:
ab:88:8f:c7:50:72:1b:e5:f2:0b:52:7f:ed:31:8e:ed:b6:81:
aa:c7:6a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:56 2024 by rpki-client on console-ams.rpki-client.org