Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SsUZjyUIdnKBpHLxklVQIMUMZic.roa
File: SsUZjyUIdnKBpHLxklVQIMUMZic.roa (raw, json)
Hash identifier: x/aBfkBHGN0mjm+xeHLu2GRYMtGKZOIcN38mPr2N1/k=
Subject key identifier: 4A:C5:19:8F:25:08:76:72:81:A4:72:F1:92:55:50:20:C5:0C:66:27
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019146686754C2B8F7F92045634DC7F12861
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SsUZjyUIdnKBpHLxklVQIMUMZic.roa
Signing time: Mon 12 Aug 2024 11:45:32 +0000
ROA not before: Mon 12 Aug 2024 11:45:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199425
IP address blocks: 85.209.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:68:67:54:c2:b8:f7:f9:20:45:63:4d:c7:f1:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 12 11:45:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ac5198f2508767281a472f192555020c50c6627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:34:0d:eb:bb:db:94:dd:6b:0d:d9:3b:e8:
da:2d:70:e7:7e:1d:41:d9:74:b7:55:43:37:db:a3:
e5:52:51:af:ab:69:e0:2f:7c:f1:a7:d3:5d:be:28:
f9:77:bd:93:7b:3a:c0:e4:e7:9b:e5:af:6e:7b:6a:
13:4d:12:dc:bd:1d:e1:94:6b:7a:72:f6:b5:2e:43:
79:55:20:3c:70:e7:d9:6d:69:ec:55:eb:46:fe:2f:
3d:ab:a6:22:fe:05:d7:56:52:78:d6:56:19:72:e2:
21:78:e0:27:ba:1e:66:d2:5e:37:30:3f:29:b3:dd:
e6:0c:cd:2a:ac:64:3f:4c:91:78:9a:38:14:87:25:
76:03:04:28:41:96:7a:c2:59:35:91:00:55:10:fc:
44:30:04:9c:87:4c:56:e0:38:1d:0a:20:69:f0:60:
55:4d:39:ec:4a:0b:a6:1f:2a:f9:d1:46:19:cb:86:
f7:b4:50:d9:c4:b9:97:b3:6a:30:6a:69:e8:62:25:
7f:2d:01:bb:7f:ad:78:b2:d5:9d:8f:07:58:d8:85:
ad:2a:57:40:b9:65:c1:65:37:a3:36:74:9e:e1:1e:
41:14:63:89:45:bf:c1:c8:b7:84:0c:cf:7d:55:68:
ce:18:8a:a5:51:08:5f:5e:b8:a9:0d:2d:cf:21:b9:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:19:8F:25:08:76:72:81:A4:72:F1:92:55:50:20:C5:0C:66:27
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SsUZjyUIdnKBpHLxklVQIMUMZic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4e:7a:23:32:5d:73:c9:83:85:f2:c1:4d:5f:a7:a2:8b:06:
b1:dd:64:d6:92:a9:76:4c:da:46:ce:07:4d:ff:59:0e:96:2b:
d2:76:29:d0:b1:2a:6d:f6:80:4d:d5:7b:5a:21:f4:39:4f:5b:
b1:1d:b2:11:35:51:12:24:52:95:33:9d:8d:4e:64:a2:bd:02:
37:24:71:a5:6e:4b:3a:8a:74:a4:7b:27:a0:c8:0e:2f:25:c0:
6a:5b:6e:a1:77:a6:dd:93:7c:bb:1b:d7:55:71:58:ba:ba:40:
6a:f0:32:65:c2:40:02:2f:f0:c4:4f:78:92:2b:5c:19:d0:30:
ef:38:d3:34:2b:77:77:d4:8a:2b:60:b9:4e:4a:64:93:61:b6:
77:ca:f3:1c:fe:f8:f2:1a:59:1c:26:96:3f:41:c7:f2:77:96:
34:6d:d7:bb:aa:49:95:a7:a0:b2:68:22:ac:61:fc:1e:2c:66:
ea:17:30:37:6d:55:85:aa:0c:16:10:cd:19:47:7f:85:8a:d9:
89:18:92:3f:55:64:2a:db:e7:96:eb:93:03:5c:22:d9:86:4a:
5c:5c:fe:1f:0a:3f:3d:87:8a:ef:0a:c9:9e:0b:57:d9:80:3d:
88:5b:56:8c:77:4b:f5:7b:a8:1e:bc:a7:bf:b6:ef:2a:f5:d0:
20:9b:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:52 2024 by rpki-client on console-fra.rpki-client.org