Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/FxUZvD8XFpdJfi1fmNxXebG9v08.roa
File: FxUZvD8XFpdJfi1fmNxXebG9v08.roa (raw, json)
Hash identifier: Edsa5j/Tw6PJZuJnBBhs7tcTBkz0loMDN8vVYLMGoKk=
Subject key identifier: 17:15:19:BC:3F:17:16:97:49:7E:2D:5F:98:DC:57:79:B1:BD:BF:4F
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 018D6432A274C1E657B3D608F8F0F7FECFD4
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/FxUZvD8XFpdJfi1fmNxXebG9v08.roa
Signing time: Thu 01 Feb 2024 10:24:16 +0000
ROA not before: Thu 01 Feb 2024 10:24:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51658
IP address blocks: 185.202.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:32:a2:74:c1:e6:57:b3:d6:08:f8:f0:f7:fe:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Feb 1 10:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=171519bc3f171697497e2d5f98dc5779b1bdbf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:f6:37:47:39:d4:b4:a9:be:47:c4:27:75:
a2:c0:01:28:ea:ae:6c:ee:52:6e:38:e3:88:f8:5a:
60:cd:e4:25:06:ea:52:a2:6c:44:c9:38:50:bc:ac:
51:d8:92:ec:76:b0:ae:a2:31:c0:ce:4f:46:df:17:
a5:86:6e:95:cf:d3:bc:7a:1d:f9:6c:ce:b0:3f:23:
00:a8:a1:44:31:b1:4e:0b:bd:40:fe:02:1d:88:c7:
cc:e2:ba:e3:a4:f5:b2:c8:6d:99:9e:0a:33:0e:40:
32:97:24:31:9d:15:b9:4c:24:98:1f:c3:19:44:f7:
e9:4f:39:ea:d0:88:ee:4b:99:f1:0c:e8:c7:a7:bb:
7b:69:30:50:ee:97:98:1c:69:20:a9:02:76:7d:c1:
e6:0a:2d:31:65:26:e8:fe:e8:9f:c4:c7:8f:08:cc:
eb:88:88:8f:01:d0:85:27:9f:16:39:a7:96:a1:ff:
18:f4:4e:9f:52:17:59:d7:2e:47:67:35:55:bc:d4:
45:77:1b:3f:87:da:4d:ca:5d:8e:13:a0:e8:08:29:
7a:a2:df:f1:7c:87:41:f1:ee:eb:d8:9f:89:d5:aa:
0d:71:57:79:9f:7e:72:42:ec:85:bd:00:50:cf:66:
3a:84:27:62:60:64:cb:4a:f6:da:9b:8c:d9:e1:3e:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:19:BC:3F:17:16:97:49:7E:2D:5F:98:DC:57:79:B1:BD:BF:4F
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/FxUZvD8XFpdJfi1fmNxXebG9v08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.133.0/24
Signature Algorithm: sha256WithRSAEncryption
63:26:75:4c:6c:53:5a:e0:d0:76:27:d5:74:de:9d:87:d6:29:
31:97:50:8d:e8:3e:46:89:f0:43:29:d8:4a:ba:ca:1f:9b:2c:
13:31:2f:3e:71:f1:3c:5b:8f:93:e1:57:51:af:67:61:8c:3f:
48:19:6c:52:49:0a:92:5f:4b:da:8f:c7:f1:dc:de:b1:62:e0:
b9:2a:c2:01:86:ca:1d:dd:44:84:53:31:e4:a8:7a:aa:39:bb:
d1:ef:3d:99:8f:f3:5c:2a:ad:c4:30:99:a1:3b:78:47:24:ad:
48:33:76:12:b9:f7:61:57:a3:5a:f7:8f:09:b6:a8:15:a7:ab:
6f:e5:ff:ef:3b:f2:0e:06:6e:9a:70:56:a7:ee:8a:6a:ad:f0:
fd:b0:2d:06:f8:b1:b0:72:72:ac:65:02:9c:a9:19:99:b8:58:
ff:67:16:72:ce:b3:1b:7b:7b:10:6e:9f:7a:11:2c:ec:30:48:
94:f5:5f:29:0d:d9:f1:44:e5:a2:9b:36:cf:8e:32:b0:72:8e:
a5:89:68:a0:a6:67:87:2f:b0:a1:a9:56:92:cb:d3:3d:df:65:
82:0b:a7:98:ed:b3:af:51:0c:01:e6:80:a7:7c:b2:6c:70:62:
8e:a6:14:af:00:5f:06:75:e5:54:01:cb:25:e3:9a:bf:84:d8:
bb:4c:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:58 2024 by rpki-client on console-ams.rpki-client.org