Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/jV7AHNrsYKK0LVYr93CMw9aF-Ss.roa
File: jV7AHNrsYKK0LVYr93CMw9aF-Ss.roa (raw, json)
Hash identifier: Mwgy1DZ6LmfRbPT/OYCrV7JpE5dpQnQIf9ntR3EbWo0=
Subject key identifier: 8D:5E:C0:1C:DA:EC:60:A2:B4:2D:56:2B:F7:70:8C:C3:D6:85:F9:2B
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 018CC56EDAA640642FAE4BDA4363EE0EB5A4
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/jV7AHNrsYKK0LVYr93CMw9aF-Ss.roa
Signing time: Mon 01 Jan 2024 14:30:25 +0000
ROA not before: Mon 01 Jan 2024 14:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15657
IP address blocks: 185.79.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:da:a6:40:64:2f:ae:4b:da:43:63:ee:0e:b5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d5ec01cdaec60a2b42d562bf7708cc3d685f92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:b2:48:13:7a:cd:66:ff:7b:30:d5:29:c9:
d1:b7:4b:9d:3b:9a:f1:df:78:99:34:c7:31:b8:e3:
ac:21:ad:25:37:bc:40:7e:9f:d3:f6:31:04:8d:ba:
b2:a4:cb:b0:3b:bd:f5:76:22:93:d9:c7:4c:87:5b:
1c:04:81:3c:5c:c0:2c:28:fa:72:b1:c3:70:ef:eb:
0c:d6:87:b5:80:9d:8a:5b:a9:61:67:51:94:8d:e2:
41:4e:36:ed:c8:90:63:0e:de:5e:bc:05:18:be:a0:
62:2b:7e:62:2d:2d:c4:74:71:78:5e:2f:5e:1d:e1:
83:e3:dc:fc:f2:27:86:e5:ec:79:01:21:16:29:36:
16:39:f3:82:bb:b9:d4:84:17:3e:2f:1a:48:ca:4b:
69:53:64:bf:8f:00:6b:77:a6:da:ff:40:8f:79:bb:
8d:b7:bf:56:06:6e:c8:12:10:ab:90:12:b6:d4:96:
85:b1:39:fa:13:55:eb:13:2d:47:81:eb:b4:6d:c5:
ea:cb:46:5b:5f:6d:85:78:bb:91:31:29:04:ed:61:
39:7c:7e:55:6a:6c:29:b4:a8:10:11:b3:38:32:38:
ca:34:36:bd:2d:fc:4d:cf:f5:4b:06:90:97:a2:97:
77:69:3e:9f:40:f8:69:e1:b7:30:d4:01:04:a5:11:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5E:C0:1C:DA:EC:60:A2:B4:2D:56:2B:F7:70:8C:C3:D6:85:F9:2B
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/jV7AHNrsYKK0LVYr93CMw9aF-Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:d7:b4:2e:e3:ba:86:b1:2c:3f:a2:69:80:d5:bf:a4:ba:8b:
23:9c:9a:ea:ce:5a:8a:f8:bd:d8:df:73:24:ba:1a:c0:ba:19:
c7:3e:1f:67:04:5f:f8:43:1e:bb:69:05:45:37:a8:bd:cf:49:
0a:80:6d:61:ae:9d:b1:f2:6a:ab:71:68:4a:79:33:e5:60:45:
f4:95:3f:d9:d7:22:7c:6c:5b:6d:ff:4c:83:a7:c3:eb:40:2b:
86:93:10:6c:89:5d:2d:cd:ea:cb:b8:6d:71:78:4c:5e:30:11:
8c:8a:66:91:50:f0:b4:e9:63:a9:f1:e4:d1:d4:cb:43:f4:8e:
48:c0:86:40:66:2e:c1:69:c3:e0:47:ec:ce:9e:5d:40:25:c8:
b4:6c:4d:20:70:a8:e5:2d:72:1a:36:ba:e3:68:09:63:09:93:
9d:48:ed:23:e2:c4:52:77:94:5c:30:34:4c:db:af:ca:99:6b:
3b:19:e1:0f:dc:9e:82:3f:0c:b2:09:6e:27:7c:d6:71:6e:1a:
b4:d4:3f:9d:e2:9b:a5:40:ab:50:a9:4a:de:14:d7:67:8a:9e:
eb:e7:fc:be:e9:19:ab:58:74:a9:1b:2f:e7:48:08:69:f3:98:
02:38:a9:d6:64:8b:80:34:87:16:7d:f5:2e:73:c7:2e:f3:89:
00:64:32:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:32:47 2024 by rpki-client on console-ams.rpki-client.org