Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/rfFzN7rRO6aUpt2Wq43LSx26XhE.roa
File: rfFzN7rRO6aUpt2Wq43LSx26XhE.roa (raw, json)
Hash identifier: U2GiQkLpLNe85nOb+Fqx/ymnHjb1gsTOhnTYCu4UA5I=
Subject key identifier: AD:F1:73:37:BA:D1:3B:A6:94:A6:DD:96:AB:8D:CB:4B:1D:BA:5E:11
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 019270CB1BF4DCC44D7FFC2889A649AEA1FA
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/rfFzN7rRO6aUpt2Wq43LSx26XhE.roa
Signing time: Wed 09 Oct 2024 10:20:11 +0000
ROA not before: Wed 09 Oct 2024 10:20:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 185.233.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:cb:1b:f4:dc:c4:4d:7f:fc:28:89:a6:49:ae:a1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Oct 9 10:20:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adf17337bad13ba694a6dd96ab8dcb4b1dba5e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:36:22:55:aa:33:36:ad:05:eb:5e:e7:c4:
3c:6a:a4:2b:f5:82:62:7f:ef:cf:fe:2c:fc:0b:b8:
c8:ee:d0:36:63:82:c8:0a:37:c9:5c:f5:84:6e:a7:
76:86:20:32:bb:b6:90:e5:a8:49:d8:ce:fc:b2:cc:
41:0c:87:7c:26:25:62:e9:06:8f:a2:74:12:32:e6:
51:99:2a:fe:4c:af:ce:e4:1d:17:d7:46:81:dd:f8:
91:60:f3:a1:51:6a:8e:df:9d:fa:c1:72:63:52:ab:
7b:33:42:4e:01:e3:d3:95:63:01:1f:fe:1d:98:d6:
0b:95:1d:06:60:91:8b:96:67:d8:cb:dd:ee:ab:7f:
ec:56:00:2d:a8:f6:f4:be:bd:57:eb:19:95:78:10:
d8:b3:e5:0c:88:44:8d:e9:da:3f:45:2a:0e:93:75:
04:32:b5:0e:f3:19:84:bc:44:58:0f:f6:59:d0:aa:
23:1c:e6:f7:b1:f0:60:6c:4c:e0:37:bb:97:4f:da:
ca:be:8b:84:04:80:f6:fd:ea:95:5c:c8:b0:93:02:
ef:8a:27:c0:6f:fd:55:b7:89:7a:f0:0e:fb:72:34:
8a:2c:7e:8b:d1:14:70:ea:7e:ec:79:ca:60:07:0a:
60:09:69:39:a8:7d:f7:e3:a7:d1:f6:f1:fe:71:ed:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F1:73:37:BA:D1:3B:A6:94:A6:DD:96:AB:8D:CB:4B:1D:BA:5E:11
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/rfFzN7rRO6aUpt2Wq43LSx26XhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:83:19:07:bf:66:54:e1:4a:68:b5:63:dc:d4:2c:3d:44:44:
b6:04:8c:9f:f1:30:90:d9:fb:bb:a8:e4:84:1b:61:11:44:ae:
ac:39:a6:2e:98:bc:5c:0e:bf:86:5d:92:49:85:f4:6c:5b:39:
b3:4a:94:55:33:40:a4:ad:3a:de:34:d9:84:a0:00:7c:e2:ab:
64:63:5b:71:59:be:2f:16:eb:dc:bb:94:82:db:7d:1d:7c:66:
95:bc:b8:78:c0:f7:1b:67:e8:0b:6c:25:56:5f:85:ca:61:5a:
d6:4f:4e:e2:07:64:40:6c:2a:94:2a:6d:2f:68:40:88:46:49:
0c:c1:72:7f:1d:a7:19:3d:45:52:26:96:0c:4d:9d:b7:74:be:
02:f0:95:f0:1c:c2:8a:d5:1d:54:e3:bb:f2:c5:f5:8e:25:de:
39:1e:b9:7e:f8:73:ef:8f:ce:d5:da:a1:b7:7a:53:2d:8d:f1:
54:84:df:8c:81:35:92:97:33:e5:2d:9d:97:01:89:bf:26:17:
af:a4:fb:7f:8b:de:5b:7f:a5:37:74:31:8c:d3:54:58:d1:4f:
7d:2e:7c:ac:ab:a5:e4:b2:6f:ea:cf:a2:ff:cd:ad:92:b5:ed:
ef:15:1e:c8:6f:6b:fd:f0:d6:22:cf:96:84:55:d2:37:d7:da:
31:5c:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:58 2024 by rpki-client on console-fra.rpki-client.org