Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/8nAXpHriN2Oa8EaSX65gPaSZ--Q.roa
File: 8nAXpHriN2Oa8EaSX65gPaSZ--Q.roa (raw, json)
Hash identifier: Gn16ZLM+IDBDgLsQ4bo32+kNBrOguDWRTsTMHIXuwWA=
Subject key identifier: F2:70:17:A4:7A:E2:37:63:9A:F0:46:92:5F:AE:60:3D:A4:99:FB:E4
Certificate issuer: /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial: 018CCA284E8FCD92D0FD94DE6C791F972D26
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/8nAXpHriN2Oa8EaSX65gPaSZ--Q.roa
Signing time: Tue 02 Jan 2024 12:31:28 +0000
ROA not before: Tue 02 Jan 2024 12:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2589
IP address blocks: 85.119.96.0/21 maxlen: 24
178.251.168.0/21 maxlen: 24
185.21.20.0/22 maxlen: 24
2a00:ea40::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:4e:8f:cd:92:d0:fd:94:de:6c:79:1f:97:2d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Validity
Not Before: Jan 2 12:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f27017a47ae237639af046925fae603da499fbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:69:ec:d8:3f:97:40:83:b9:58:ce:23:68:
04:f8:1f:2d:da:08:9e:e8:a0:08:68:2a:d5:23:e7:
4e:cb:a7:3f:86:75:2c:10:db:07:6f:7a:f3:88:2f:
d3:89:d9:ae:93:f5:c5:39:c5:11:83:66:e5:17:e4:
51:3b:0a:6a:93:43:70:fa:c6:1c:01:e1:5a:68:63:
36:ad:1f:c1:d1:39:61:49:f8:c7:b4:f3:07:39:4e:
a8:62:02:31:57:b0:b4:14:0d:a1:1e:5e:07:1f:08:
ae:96:dd:da:d8:d5:8b:7a:9c:14:e0:88:39:72:c0:
cd:f0:ac:3a:c8:93:ea:9c:81:2c:5d:20:e0:4e:90:
6d:8d:8b:d6:4f:51:3d:11:37:85:29:55:38:ec:9e:
2d:f0:f0:23:20:c2:84:f6:67:e0:78:be:cb:8b:ee:
a1:45:fc:bd:40:05:ee:ff:19:06:b4:94:ff:40:e0:
fa:51:29:c5:22:23:28:c9:6d:e1:f3:70:f8:99:f7:
18:4d:35:b7:85:a2:a5:4e:16:77:77:d9:c9:de:e4:
97:d4:ee:29:22:7f:05:9e:88:71:ee:61:02:e7:6f:
59:76:da:cd:67:d3:25:f1:c0:18:51:29:61:21:d3:
e6:19:fc:d3:e4:80:ae:67:27:b7:ca:5f:90:b6:6c:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:17:A4:7A:E2:37:63:9A:F0:46:92:5F:AE:60:3D:A4:99:FB:E4
X509v3 Authority Key Identifier:
keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/8nAXpHriN2Oa8EaSX65gPaSZ--Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.96.0/21
178.251.168.0/21
185.21.20.0/22
IPv6:
2a00:ea40::/32
Signature Algorithm: sha256WithRSAEncryption
08:ca:67:85:7e:a5:31:b7:2f:76:7b:5f:fe:d9:63:2a:79:a8:
5d:a0:da:6e:ae:ff:d8:3c:c7:d1:08:2d:c9:00:a7:c7:74:2a:
ff:c2:86:d0:54:98:ea:9b:e5:7e:38:da:67:bb:17:ba:d0:88:
64:d1:17:d4:9b:5a:01:d4:62:79:e0:97:b5:6e:13:b1:24:16:
f3:f2:cd:2a:35:70:e5:50:f1:5d:9f:63:bd:ae:9b:23:2a:8d:
56:9f:96:b4:a9:fc:81:5c:e6:ca:10:98:3e:dc:e9:ad:e4:22:
dd:c8:67:e8:75:fb:a3:ed:06:cf:3d:d6:48:4f:2f:f1:3c:36:
81:6a:8d:5f:d9:54:27:5f:65:e5:aa:a2:83:ea:91:fe:dd:df:
a6:dd:6c:5a:47:7a:dd:54:71:29:be:70:d9:fc:54:5e:51:7a:
7b:a0:e7:8c:2e:72:80:2c:17:07:7a:72:d6:48:1c:da:4c:47:
16:88:33:f0:08:22:7a:42:d0:e9:f2:06:f8:f9:db:a1:07:d7:
57:52:3f:25:46:c1:9d:43:64:e9:db:a7:1b:0c:5f:c2:5a:42:
49:46:11:c7:92:b3:06:e7:a0:58:7b:24:83:07:29:59:94:17:
3b:7d:5d:de:e5:03:90:39:ac:5e:0d:c8:63:64:f9:54:a7:a9:
d5:c6:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:59 2024 by rpki-client on console-ams.rpki-client.org