Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IgWmw_uFeK5W6uUGmZxtcwCBVDI.roa
File: IgWmw_uFeK5W6uUGmZxtcwCBVDI.roa (raw, json)
Hash identifier: ef108ILzU9w3BGHCxOSUXENFsEs/RRSjnACtUgo3kec=
Subject key identifier: 22:05:A6:C3:FB:85:78:AE:56:EA:E5:06:99:9C:6D:73:00:81:54:32
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018F80C9E3E8A960C07A37AE10811E93FF1D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IgWmw_uFeK5W6uUGmZxtcwCBVDI.roa
Signing time: Thu 16 May 2024 09:44:25 +0000
ROA not before: Thu 16 May 2024 09:44:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 85.133.174.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:c9:e3:e8:a9:60:c0:7a:37:ae:10:81:1e:93:ff:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 16 09:44:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2205a6c3fb8578ae56eae506999c6d7300815432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:85:9c:9a:03:ea:54:37:e9:af:04:ea:6b:
b7:57:a5:0d:8b:25:4f:25:e1:e6:81:6c:89:47:4e:
57:a4:5b:75:37:36:95:55:e2:2b:3f:09:e4:ec:aa:
23:51:a5:67:e3:d7:05:b6:82:10:7b:14:69:bf:f0:
e6:0c:8c:02:e6:a7:83:8e:de:0b:b8:ee:1f:f8:b4:
1f:a0:81:cd:de:a4:b3:a3:00:1c:be:56:6f:42:07:
77:7d:1a:7a:7b:5c:a2:1d:17:46:7b:c2:10:a9:cd:
2d:d1:ed:14:55:54:03:e5:56:6c:45:bd:35:d9:49:
29:5c:46:20:d3:85:05:82:f4:87:ec:57:7b:22:d5:
09:21:5a:ae:0d:ed:97:5b:67:af:4a:17:5a:d2:36:
4f:cf:0a:ec:f9:24:f2:c5:d6:40:8c:02:ec:7e:a1:
c0:4f:4f:25:67:b6:ab:31:ff:85:87:23:66:ec:c3:
6b:9b:f9:bb:98:5a:c5:e3:66:26:f7:be:aa:76:21:
c9:95:81:36:95:00:0e:cb:65:02:3f:92:ee:3f:43:
52:f0:d2:1c:ba:c5:91:90:de:eb:41:d5:60:ea:4c:
1b:4e:be:d0:e4:25:26:bd:bd:35:dd:97:c2:58:49:
7b:1f:97:9e:a7:15:d8:ca:6d:ed:89:c4:e0:58:a2:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:A6:C3:FB:85:78:AE:56:EA:E5:06:99:9C:6D:73:00:81:54:32
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IgWmw_uFeK5W6uUGmZxtcwCBVDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.174.0/24
85.133.208.0/24
85.133.215.0/24
85.133.219.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c7:d5:e7:69:e8:be:26:21:49:9e:4c:8b:85:be:3f:de:1c:
c3:48:4d:c1:64:c9:6c:66:61:ff:7e:e9:77:fe:2a:d2:2b:f3:
f2:34:f7:99:1a:dd:80:54:16:c8:fc:19:b0:09:25:a4:1f:1f:
33:8b:e2:c3:db:c5:a0:b0:c0:0d:91:a4:04:07:d6:80:16:cd:
69:07:47:f2:7f:3d:a7:30:b5:a7:63:90:59:ac:b8:34:b2:c6:
e3:ef:2b:80:4e:f7:49:b6:0a:2e:d9:f1:ba:38:2b:79:0e:b4:
29:6d:2b:b6:65:96:a0:d2:19:9c:70:a2:02:3a:be:5c:40:c4:
21:20:e9:c6:3d:19:32:98:dc:8a:ce:33:3b:eb:77:0b:e6:08:
90:ae:de:12:2d:50:07:9b:8f:16:c1:ac:da:5c:6c:bb:38:d4:
03:a3:f8:8a:6c:3b:fc:73:d6:de:87:4e:2f:9e:c5:63:25:94:
ca:eb:3b:dc:54:7d:35:3d:87:ca:96:e1:79:88:cb:fc:ac:ee:
41:5c:27:f6:39:95:cf:e0:39:5e:f8:1f:fb:c9:99:fc:3d:54:
88:93:d7:67:a6:cb:21:73:f8:28:de:3d:d3:98:f6:d5:29:49:
e1:66:8b:25:c2:24:ed:05:5e:4a:5c:e8:b9:f0:65:17:e8:e9:
5d:ed:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:06:27 2024 by rpki-client on console-fra.rpki-client.org