Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/S9ll03hx71TRRjDWFEsUdv-OZ1E.roa
File: S9ll03hx71TRRjDWFEsUdv-OZ1E.roa (raw, json)
Hash identifier: MPM07AFU8KRaJnTC7IUO9WxQUpILACVLdlGQYe+qZ1s=
Subject key identifier: 4B:D9:65:D3:78:71:EF:54:D1:46:30:D6:14:4B:14:76:FF:8E:67:51
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 018CC56ED81845866B0A69B1CA1528BA80D5
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/S9ll03hx71TRRjDWFEsUdv-OZ1E.roa
Signing time: Mon 01 Jan 2024 14:30:24 +0000
ROA not before: Mon 01 Jan 2024 14:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25389
IP address blocks: 217.12.81.0/24 maxlen: 24
217.12.85.0/24 maxlen: 24
217.12.80.0/24 maxlen: 24
217.12.84.0/24 maxlen: 24
217.12.83.0/24 maxlen: 24
217.12.82.0/24 maxlen: 24
217.12.88.0/24 maxlen: 24
217.12.87.0/24 maxlen: 24
217.12.89.0/24 maxlen: 24
217.12.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d8:18:45:86:6b:0a:69:b1:ca:15:28:ba:80:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bd965d37871ef54d14630d6144b1476ff8e6751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:59:00:2e:b7:02:01:23:95:7b:74:b9:ea:
3a:df:73:3e:32:43:89:11:fa:d2:d5:6d:dc:b5:29:
28:91:17:3c:a7:40:dd:7c:dd:21:5c:6b:46:f0:4a:
44:2e:69:9d:ee:6e:72:65:30:02:49:d2:e2:5a:90:
c2:b2:7e:ec:2e:74:63:0c:30:ee:4f:38:3a:8b:1c:
5b:36:8c:39:b5:0d:e2:48:3b:44:2c:98:2b:ae:bb:
59:b3:6c:b4:59:36:fe:2d:29:fa:71:38:05:a6:57:
3d:14:2e:fc:d6:a9:af:71:d5:0d:ac:aa:f6:8d:df:
d4:d5:0b:c6:0c:e2:ae:c1:21:9a:0f:fc:ab:3e:44:
62:9a:e0:43:27:c8:99:ed:1b:6a:e6:27:cd:8a:a6:
01:e9:a2:19:ed:5d:b3:d2:28:f8:06:af:b3:39:d7:
92:cd:a7:2d:80:4d:ae:06:4c:8d:7d:81:d9:12:e5:
4a:f0:8e:e4:58:08:a9:28:22:c3:a1:44:97:94:6b:
f5:45:e0:7e:0b:f2:8b:3c:76:46:2f:f9:1a:e1:6e:
08:f6:8c:5a:e5:68:d2:de:81:8d:21:8a:2e:bb:0d:
76:2a:ed:e9:4b:ac:17:f3:c4:6b:e9:e0:e6:0b:bc:
e9:d1:2b:ea:e6:ba:d3:7c:e8:1b:3f:34:d1:ad:de:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D9:65:D3:78:71:EF:54:D1:46:30:D6:14:4B:14:76:FF:8E:67:51
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/S9ll03hx71TRRjDWFEsUdv-OZ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.80.0-217.12.89.255
Signature Algorithm: sha256WithRSAEncryption
32:dd:f2:6c:56:17:d5:24:f9:df:40:64:65:04:8e:2f:fb:c6:
3b:57:a7:2d:9e:15:d0:8a:e7:a7:a3:97:74:c5:46:2d:d2:37:
76:03:3b:24:3d:32:ee:2b:16:93:a0:17:57:d9:51:f1:54:6d:
a5:c8:30:6c:19:04:c6:9f:c3:59:cf:91:12:4b:66:2c:ee:1a:
5d:a7:bf:8a:f5:2b:12:94:4a:f7:10:db:f5:6e:f4:e5:c5:ed:
f2:72:64:cc:a7:50:3d:0d:cf:c8:64:aa:ee:67:e6:11:18:62:
c5:8d:e5:e4:fb:68:49:cc:41:02:4d:11:32:06:e0:75:d2:89:
75:f6:5c:27:d1:e4:f9:5c:84:8e:24:7f:46:47:e4:fb:4a:c1:
15:59:3d:c7:98:ff:2b:9f:15:99:25:70:2d:6a:d4:df:0e:df:
23:57:76:e4:22:ef:d0:f0:89:95:a9:b0:04:e9:53:66:f5:56:
55:3c:13:a5:20:a2:16:16:c3:2e:7c:70:17:50:20:86:89:35:
b5:fb:17:ad:1e:c8:c9:aa:2d:be:37:ff:f5:60:df:71:ad:5c:
12:63:a9:37:e5:0a:22:f4:a3:67:36:16:65:63:99:10:3d:2f:
95:21:ab:1b:9a:ab:97:86:2b:8d:42:f8:ed:c2:ff:40:1f:1b:
66:2c:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:59:11 2024 by rpki-client on console-ams.rpki-client.org