Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/vU4fjWyLqeUa8NsKzAutKvzHro8.roa
File: vU4fjWyLqeUa8NsKzAutKvzHro8.roa (raw, json)
Hash identifier: BFiwuaBg3U5tb7rvU9ZX4dDrWdawYz9WTpzLkXi1izE=
Subject key identifier: BD:4E:1F:8D:6C:8B:A9:E5:1A:F0:DB:0A:CC:0B:AD:2A:FC:C7:AE:8F
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC72762CC875E95C4F81518DC9AFFBB51
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/vU4fjWyLqeUa8NsKzAutKvzHro8.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24756
IP address blocks: 85.219.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:62:cc:87:5e:95:c4:f8:15:18:dc:9a:ff:bb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd4e1f8d6c8ba9e51af0db0acc0bad2afcc7ae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:6a:c4:e9:5c:4d:9c:fa:3c:f0:42:2f:f4:
af:31:4c:8a:1c:b6:76:4f:1d:4b:f4:5f:a5:d0:0e:
b8:fc:38:ee:fe:3a:3d:d1:4c:08:6e:37:67:73:2a:
c3:27:e4:82:56:1f:cc:ee:a9:e9:1a:12:33:34:c8:
86:fc:37:81:d6:2c:b5:6c:15:ab:be:e8:21:51:6d:
d9:6a:8b:84:2f:0c:1d:bc:0a:f8:04:da:59:c0:85:
6b:b0:d8:e6:f0:4f:74:9e:b0:65:70:36:c9:a5:0f:
ec:08:44:0e:45:04:c5:e0:3e:3d:70:86:5d:dd:d0:
4b:c1:c4:90:b8:cb:05:e0:4a:49:2c:d2:bf:80:f0:
d6:5a:a1:76:f0:9c:b3:03:89:cf:b2:6e:44:10:87:
3a:5a:c1:42:ad:d4:4d:53:37:e0:83:b1:72:a5:c7:
11:d0:57:bf:35:3b:e5:4c:5a:cf:1b:e7:e2:18:9a:
85:98:47:fb:85:41:8d:01:5a:eb:41:6f:dc:86:70:
16:42:f7:72:5d:a5:f8:2b:a1:5f:8e:f2:84:d0:53:
6f:c1:d4:57:21:69:1d:59:07:43:27:ef:c5:8e:ba:
9a:43:70:29:94:fb:64:aa:cd:71:64:17:76:f3:7b:
a8:ee:d3:14:e6:3d:60:bb:57:ca:90:15:65:11:d7:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:1F:8D:6C:8B:A9:E5:1A:F0:DB:0A:CC:0B:AD:2A:FC:C7:AE:8F
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/vU4fjWyLqeUa8NsKzAutKvzHro8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c4:a4:a7:77:73:4a:88:a5:8a:5d:4f:72:7e:12:82:f6:6e:
b1:aa:88:2e:aa:01:bf:da:59:05:5b:68:9e:19:75:47:45:5e:
a8:ba:ac:8f:39:c5:a5:88:dc:51:2a:85:33:46:fa:af:8d:29:
d9:57:f3:54:63:92:e1:19:95:a6:60:98:55:94:77:21:f0:54:
a5:2b:a9:6f:ca:2a:5e:1c:b5:05:02:92:3b:52:d7:76:df:a1:
fc:e5:ba:1a:63:9e:29:c0:07:21:cb:ce:08:86:06:9e:2b:18:
18:45:1e:1d:0b:4d:59:7a:f3:46:5e:d1:e8:21:f8:49:99:f6:
d6:0b:a7:0c:7e:6b:b4:19:4b:9d:fd:d5:e4:0f:b4:aa:31:7f:
98:9f:7b:b5:09:94:59:fe:74:68:bc:ea:ba:03:db:4e:a0:64:
81:ac:cb:7e:ee:76:88:18:ea:67:7d:5f:d6:a2:97:96:b4:e2:
cd:e4:c1:40:12:f7:8c:35:ee:7a:93:5d:03:a7:60:5c:9f:15:
35:37:67:70:6c:d1:d4:41:aa:57:30:94:f7:91:b5:a1:4d:c1:
81:ed:32:67:34:51:89:13:34:4e:12:ec:aa:26:8d:08:c8:21:
0e:fe:75:84:2f:7a:f8:d5:3b:41:9a:07:31:f5:6d:28:35:81:
5a:e3:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:11:45 2024 by rpki-client on console-fra.rpki-client.org