Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DT-nVqOgCrSBmHPXbeCvR6jHNv4.roa
File: DT-nVqOgCrSBmHPXbeCvR6jHNv4.roa (raw, json)
Hash identifier: 69acNuT1uQwaCwhHotLogQcifNFtMdpI7Q4hVmPqY2c=
Subject key identifier: 0D:3F:A7:56:A3:A0:0A:B4:81:98:73:D7:6D:E0:AF:47:A8:C7:36:FE
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0191D07A243325C379AE9065302303FB3828
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DT-nVqOgCrSBmHPXbeCvR6jHNv4.roa
Signing time: Sun 08 Sep 2024 07:12:31 +0000
ROA not before: Sun 08 Sep 2024 07:12:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 85.133.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d0:7a:24:33:25:c3:79:ae:90:65:30:23:03:fb:38:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 8 07:12:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d3fa756a3a00ab4819873d76de0af47a8c736fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:12:dd:6d:9f:8d:32:55:a2:86:60:c9:0d:
bf:c3:ef:c4:b5:a8:59:5c:01:54:ac:5d:1e:34:87:
c3:30:e5:91:02:4b:d5:51:a1:28:e5:0b:83:e4:01:
2f:f6:9b:cf:42:09:ca:21:d3:b4:42:e6:52:cc:fe:
2e:d5:54:4f:81:d9:6b:d9:58:05:15:eb:4a:27:a4:
b6:84:0e:21:4a:39:f6:e9:77:b7:28:31:39:32:97:
d8:41:c2:1c:94:29:9b:fb:f8:8f:dd:97:db:75:3a:
e6:99:f2:fb:dd:df:51:ce:92:db:ec:e4:2d:e2:d1:
83:0c:cd:b2:8b:c1:0f:20:d7:0b:48:a6:06:40:b8:
fa:1c:01:d6:87:51:b3:9c:72:2d:c2:bd:60:7b:5b:
c5:80:e8:2a:28:2c:a5:96:79:f6:2f:ae:ba:d2:1d:
00:c1:e1:15:c0:2f:11:49:a1:33:91:46:0f:2c:33:
bf:b9:e8:bd:12:0e:bb:2e:70:ea:92:ad:bf:00:05:
18:8e:79:32:6f:c9:66:bb:41:7e:99:79:e2:3d:86:
59:24:39:0f:af:35:99:35:16:41:0d:55:7d:22:93:
96:9e:bd:d2:02:f0:c4:b2:3b:54:99:b8:1a:ff:e6:
e9:d1:ed:34:5d:41:27:99:34:88:c6:57:dd:72:6b:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:A7:56:A3:A0:0A:B4:81:98:73:D7:6D:E0:AF:47:A8:C7:36:FE
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DT-nVqOgCrSBmHPXbeCvR6jHNv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2f:38:23:3b:2b:97:c8:2f:17:fd:fc:e4:75:77:83:14:f8:
e9:0e:a5:59:19:1b:b7:4f:c5:8a:33:e0:d1:50:4e:da:8b:a9:
16:67:8f:ff:54:28:3d:03:38:b2:53:b0:22:eb:33:5c:72:1f:
ae:4f:db:05:41:fa:df:ef:fe:51:d3:55:7b:08:2c:51:61:a3:
ce:9f:bb:ac:1f:17:1c:28:a1:d4:09:a0:16:e0:6d:26:39:ee:
e5:01:18:ad:30:b6:13:c9:b8:f7:79:84:dd:5d:0f:03:26:c9:
f0:c6:9e:b9:bf:0e:df:61:d5:3d:7e:68:11:34:1f:c3:c2:fd:
ec:70:62:3f:7d:21:8e:e7:f5:1f:64:b0:0b:fc:6c:32:69:cb:
18:e4:68:04:23:5b:7c:7b:b2:42:6f:9f:f6:64:67:00:c2:4f:
46:16:3c:87:06:eb:14:fb:f2:d6:b3:ba:3e:56:77:82:96:bc:
63:56:15:10:6d:2d:72:c9:03:a7:d8:c8:78:9d:4e:e0:08:98:
1b:9c:76:00:4d:82:7f:4d:9e:5f:3d:50:cd:7a:e0:3e:9d:1b:
3f:dc:28:a0:21:76:b8:15:ab:78:3a:3d:ad:09:5b:ac:85:34:
a7:17:1f:df:ad:26:9f:00:4d:2d:a5:f9:5f:cb:d6:3d:63:18:
ec:09:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 14:48:54 2024 by rpki-client on console-ams.rpki-client.org