Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/IZ29QgZUHa7tXB8BwcpaOA0c4es.roa
File: IZ29QgZUHa7tXB8BwcpaOA0c4es.roa (raw, json)
Hash identifier: xrlqbRDBvxfVcLnuQELbzFze3AreVDDDCF5zvQxQ1TE=
Subject key identifier: 21:9D:BD:42:06:54:1D:AE:ED:5C:1F:01:C1:CA:5A:38:0D:1C:E1:EB
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018F572A8A5AAB562A85D9B271027B4B2806
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/IZ29QgZUHa7tXB8BwcpaOA0c4es.roa
Signing time: Wed 08 May 2024 07:45:56 +0000
ROA not before: Wed 08 May 2024 07:45:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 185.240.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:2a:8a:5a:ab:56:2a:85:d9:b2:71:02:7b:4b:28:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: May 8 07:45:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=219dbd4206541daeed5c1f01c1ca5a380d1ce1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e7:91:2b:04:ac:f9:03:59:41:d6:b1:69:3d:
fc:00:1d:29:19:6f:a5:6a:1f:0d:81:40:82:13:e3:
54:80:fe:0e:34:3b:ff:0a:b6:95:f3:55:55:ef:ef:
87:76:5c:a5:72:99:c4:9f:15:43:2f:d9:30:a5:d1:
71:b8:4b:84:68:32:4c:7a:1b:d8:ec:75:66:38:9e:
02:16:af:da:41:90:6e:18:b6:d1:0c:41:2e:44:72:
ab:87:23:94:0e:d6:36:58:79:c9:f8:b4:94:76:a7:
10:5d:98:db:1c:04:64:47:7f:88:a4:93:02:7a:98:
ba:b8:58:d7:7f:75:d7:18:a2:50:af:d3:b6:4d:3c:
bf:97:72:59:fe:4f:d5:7c:71:02:a3:e8:7e:c1:45:
68:06:3d:d3:8c:2e:6a:ef:9f:0a:be:58:ba:19:7e:
5c:fa:e6:a2:b8:87:20:eb:e3:d5:93:d3:6c:e5:d9:
b3:c6:f7:72:22:9b:77:33:31:7e:74:a2:41:a2:7d:
e6:50:db:8a:f1:e8:a2:9b:b8:c7:2a:05:cd:08:91:
67:7b:6f:55:7a:b2:59:84:db:ba:3c:26:2f:2e:7e:
ef:4a:cb:e8:4f:48:69:02:a7:ea:8e:39:aa:4b:4d:
e4:76:f8:53:b6:3f:b5:f3:fc:71:9f:33:ad:bc:6a:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9D:BD:42:06:54:1D:AE:ED:5C:1F:01:C1:CA:5A:38:0D:1C:E1:EB
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/IZ29QgZUHa7tXB8BwcpaOA0c4es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.132.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9c:f4:fd:b0:21:6f:66:4d:a6:3a:ec:b6:26:46:18:32:16:
37:e0:3e:4c:30:c5:cf:32:87:5c:71:74:7e:41:40:d8:4b:e6:
f6:68:4e:0d:59:f7:4f:0a:28:84:4f:d0:b1:60:3b:05:3d:6b:
4a:d6:ba:d5:6a:d6:44:0e:d6:2f:13:3a:0c:be:fe:ed:80:45:
f8:98:c0:c5:67:7a:af:2a:43:eb:9d:74:66:6c:95:f1:ce:7c:
cd:8f:87:33:f2:f2:c7:e2:9c:10:7d:1b:98:fe:ff:4f:a1:3f:
5c:d0:d0:ee:26:7b:dd:69:79:3e:6f:c4:5e:42:f4:c1:31:82:
99:ef:1c:9c:6d:41:02:e1:01:d9:99:27:65:57:aa:72:ab:f0:
14:52:fd:dd:0b:88:0a:7b:c2:18:7a:40:54:79:cf:86:47:3c:
65:85:e9:50:eb:0c:ec:8b:5d:4d:3f:ce:52:56:2a:52:d5:78:
ec:2b:d0:c8:60:3c:c2:f1:7d:d5:9b:05:b5:8f:f0:33:b9:28:
fb:a4:b3:9a:dc:bb:d2:cd:2a:6c:bb:06:8d:24:a9:0b:46:18:
4d:fe:b5:f3:8a:cf:b4:18:f6:fd:14:ef:af:0b:ee:33:03:50:
aa:1c:f3:43:f6:5c:b5:dc:58:32:d6:01:d3:67:e9:47:22:de:
9d:ec:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:43:42 2024 by rpki-client on console-ams.rpki-client.org