Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6wLWgERpFEYV3tJnTs7c4eQ3DHs.roa
File: 6wLWgERpFEYV3tJnTs7c4eQ3DHs.roa (raw, json)
Hash identifier: 5q/DSrsNonbqhsFwnPKeWHBBzJYWEtMGUG2kcSiKre4=
Subject key identifier: EB:02:D6:80:44:69:14:46:15:DE:D2:67:4E:CE:DC:E1:E4:37:0C:7B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01931AA06DA1FEF70A24F18C129B55A1D3B9
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6wLWgERpFEYV3tJnTs7c4eQ3DHs.roa
Signing time: Mon 11 Nov 2024 09:49:01 +0000
ROA not before: Mon 11 Nov 2024 09:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215350
IP address blocks: 85.133.207.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:a0:6d:a1:fe:f7:0a:24:f1:8c:12:9b:55:a1:d3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 11 09:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb02d6804469144615ded2674ecedce1e4370c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:29:aa:64:9b:4e:c7:7e:14:1c:9b:64:94:
f9:cd:1f:a3:ad:88:d8:fc:a1:99:45:c0:f9:09:d6:
ac:5f:50:28:0c:29:59:25:9a:c7:6f:b5:36:1d:13:
4b:9a:65:b7:eb:31:e6:79:93:62:3e:76:e4:c5:f4:
4d:6c:99:0a:2d:93:3d:0a:4d:07:8a:17:8c:45:af:
56:c9:66:58:60:e2:b8:a7:b7:4c:a6:7b:ae:5c:cd:
4b:b3:54:0a:63:d2:d7:14:ac:c7:c7:fb:77:ea:ef:
f1:c0:4c:db:16:f6:d6:6c:f8:5a:a6:39:82:ec:ad:
dc:30:87:9a:bd:65:05:b1:91:32:d8:d9:02:42:b9:
cf:df:67:dc:6a:72:82:f3:2e:cc:51:ce:5b:2b:25:
03:90:04:42:00:f3:3c:ca:90:0b:a2:9e:31:05:eb:
69:ec:72:7a:8e:13:98:2c:e7:b7:a6:7c:ba:91:df:
16:5a:c9:af:7a:a7:c6:8d:9f:11:ac:3d:61:1b:13:
79:8b:75:c2:8b:6d:f6:39:4a:9e:f2:6e:5c:23:9c:
04:57:60:bd:96:88:21:5e:83:af:b4:cc:b6:21:45:
fa:ca:b0:61:a6:f3:db:7a:77:d6:ba:fc:88:4b:b8:
67:bd:d4:43:47:66:ee:8d:e4:8f:ad:9c:93:69:6d:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:D6:80:44:69:14:46:15:DE:D2:67:4E:CE:DC:E1:E4:37:0C:7B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6wLWgERpFEYV3tJnTs7c4eQ3DHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.207.0/24
85.133.215.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d5:8f:b9:83:aa:94:26:19:c9:a4:a7:30:2b:65:50:3a:85:
44:a0:ea:66:70:46:df:60:7f:d9:b8:a4:9c:40:96:a9:30:5a:
e7:e7:fd:eb:01:de:2a:7c:85:21:87:e7:16:b5:f8:6f:33:27:
f8:03:5f:dd:3b:c5:81:26:21:6f:c0:35:71:8d:82:a6:fd:e9:
b3:a8:5d:54:81:68:35:da:c8:b3:24:f6:eb:1e:e7:13:3d:af:
d4:59:3c:96:b2:23:ab:f4:b3:4a:ce:0d:93:fa:d0:f1:78:95:
92:08:b5:b7:be:96:89:61:0e:48:ce:ec:dd:43:f9:c1:9e:9f:
69:33:75:3b:19:fb:6b:4f:6f:e5:86:12:e8:cd:3a:1f:8b:4f:
f4:20:ea:f5:24:26:2b:b3:d0:4c:5b:78:a1:58:0b:7b:a3:5e:
28:6a:a1:67:ca:0c:e1:6d:57:85:b8:f4:09:d1:66:c1:4d:2a:
5b:0f:28:d0:27:cf:6d:af:fa:a5:24:e3:74:b7:07:fc:0e:87:
c0:15:5c:55:44:ea:20:e5:29:cd:4b:69:60:b6:92:4b:ce:1b:
96:ad:55:ed:57:fa:00:7e:45:f1:5c:33:82:34:da:26:90:d3:
47:67:84:fa:61:bc:3e:89:e2:92:b2:a8:9d:a6:fe:e5:66:16:
1d:9c:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:30:16 2024 by rpki-client on console-ams.rpki-client.org