Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/_vmzF7rXlHfuayZZmyZTKkhe0Sg.roa
File: _vmzF7rXlHfuayZZmyZTKkhe0Sg.roa (raw, json)
Hash identifier: G2d5hZLKkJN22BLGgQAAKLRlSsFRadMZIhyAdkngxOo=
Subject key identifier: FE:F9:B3:17:BA:D7:94:77:EE:6B:26:59:9B:26:53:2A:48:5E:D1:28
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018CC56E37303CA1AAC3AF67B8FAFC2ED9E5
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/_vmzF7rXlHfuayZZmyZTKkhe0Sg.roa
Signing time: Mon 01 Jan 2024 14:29:43 +0000
ROA not before: Mon 01 Jan 2024 14:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 85.237.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:37:30:3c:a1:aa:c3:af:67:b8:fa:fc:2e:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 1 14:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fef9b317bad79477ee6b26599b26532a485ed128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:88:81:c5:35:5e:aa:58:5e:47:5a:17:b3:
c7:92:6c:15:14:c5:89:61:8c:33:d2:d5:cd:bc:bb:
8d:66:4d:97:d5:c5:56:22:94:aa:58:ac:b3:d0:eb:
d3:6e:21:bd:32:71:cf:72:3f:d4:d2:f9:ee:eb:2f:
e4:c2:64:b0:a5:ae:78:cd:67:53:1c:ee:e5:c0:e1:
da:3d:b0:b4:4f:59:06:3f:c2:c4:16:49:ee:dd:f5:
ff:06:0a:86:77:1f:3f:22:90:ea:15:00:8b:e9:a1:
f9:52:4c:66:37:cd:11:8e:0d:75:4d:da:ea:93:f6:
bf:a2:8d:7a:17:c6:de:75:0b:6a:41:6c:3a:2b:e8:
62:f3:fa:01:f8:e6:41:d5:66:cd:91:4c:32:c1:be:
b1:a1:7f:bc:f4:c9:53:07:c7:9c:ae:e4:a0:ea:2a:
70:8b:9f:5a:60:d7:97:b0:19:29:65:67:d9:72:21:
c2:22:4e:8c:69:10:42:67:06:50:7d:e6:28:95:7e:
a5:d4:19:91:5c:99:78:af:88:8c:55:d0:7b:90:c5:
64:f7:37:46:e9:a3:8c:86:f8:fc:4f:8f:2f:41:41:
da:5b:44:34:b7:1e:30:6c:26:f8:5c:47:69:e1:0a:
e7:e3:e3:f2:99:c1:bd:ce:99:17:5a:78:12:c6:85:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F9:B3:17:BA:D7:94:77:EE:6B:26:59:9B:26:53:2A:48:5E:D1:28
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/_vmzF7rXlHfuayZZmyZTKkhe0Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.71.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f1:dc:53:07:11:d1:23:e7:53:9d:10:09:3e:b0:3d:3d:1c:
da:66:27:11:82:29:f1:37:98:2e:02:bc:91:eb:2a:e0:e4:4c:
08:ea:75:ed:89:23:46:f2:cb:f2:42:17:10:15:fc:ea:b1:03:
40:80:30:54:a5:8d:67:29:40:d9:a5:af:07:e7:4c:39:39:f2:
a8:96:a0:57:57:88:a9:dd:47:a5:34:37:34:b4:31:63:f3:52:
ae:41:4e:fa:c5:f1:0a:70:a6:a2:2c:82:9d:db:b1:3c:c2:9c:
13:4f:9d:72:22:5c:bf:e0:b3:13:69:90:cd:4e:dd:cd:c8:7d:
11:ec:c9:6a:cc:3d:37:b5:14:19:4e:ab:14:db:b4:9a:ca:e4:
2f:43:34:82:97:fc:3d:6b:68:a5:f6:1e:11:45:d2:f9:35:b9:
eb:0e:d7:5c:3e:6f:8f:7e:b3:5b:e2:b1:73:99:9e:ff:8e:53:
75:cb:08:34:d2:85:05:cd:42:d5:f0:ad:66:3b:9e:01:55:f0:
74:e6:ed:f5:db:75:22:3a:c6:8c:20:e6:f2:47:b8:51:4e:3e:
1b:04:33:7c:ec:4c:f3:c2:ba:00:37:3c:88:bb:a3:59:2f:ac:
bd:f5:8a:ce:fa:1f:8d:2c:68:5f:9a:94:a6:6a:d5:81:da:e6:
ae:90:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:18 2024 by rpki-client on console-fra.rpki-client.org