Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/T8nK914dXUKjKwmBTR6OBzRr4W8.roa
File: T8nK914dXUKjKwmBTR6OBzRr4W8.roa (raw, json)
Hash identifier: lQ1rtnQt8mNlcDp2IXxjTk0VtlErhLs/vW2VTluXoYg=
Subject key identifier: 4F:C9:CA:F7:5E:1D:5D:42:A3:2B:09:81:4D:1E:8E:07:34:6B:E1:6F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5FFBBB23CE6403E975CA6B28C1A25
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/T8nK914dXUKjKwmBTR6OBzRr4W8.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 85.133.216.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ff:bb:b2:3c:e6:40:3e:97:5c:a6:b2:8c:1a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc9caf75e1d5d42a32b09814d1e8e07346be16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:b4:14:83:fb:eb:77:8e:8f:5b:5b:62:6c:
74:5d:da:18:29:df:db:fa:1e:f5:bc:f3:c5:d0:af:
1c:a0:f2:5f:93:e9:65:ca:98:ed:29:34:ec:fe:c2:
a7:f2:45:67:fd:6a:03:89:f9:80:82:7b:af:19:43:
4d:af:0b:d0:ec:0e:a9:7b:e7:5e:7c:0b:18:45:f5:
8f:a6:27:d7:27:e3:22:f7:db:de:d6:81:c8:81:5b:
38:7b:5c:be:a0:ca:7f:0e:bb:83:5f:9b:45:01:c5:
19:1c:08:89:ae:ff:f3:1f:14:8c:3d:9b:ca:af:82:
07:9d:a3:c8:c6:9b:14:48:c5:ab:e0:df:db:d9:3b:
97:71:72:8e:26:31:16:15:e0:82:5b:6b:67:f9:ab:
f3:04:41:b3:8e:68:80:b0:75:fe:9a:0a:75:13:4b:
e9:51:55:f0:04:61:d9:d1:11:88:b8:75:d6:05:3e:
ef:dc:d4:67:61:1d:8d:b4:88:1a:c1:b1:c1:82:84:
86:ec:e9:a9:ba:6a:17:73:27:69:f9:ee:0d:b6:38:
ba:5e:1c:1b:c8:c4:75:10:d1:12:d1:a0:a8:66:6b:
cc:be:0e:9e:4b:64:92:fd:56:cf:ba:14:5e:60:31:
a0:8a:ea:0a:a8:70:e7:4e:b6:70:01:6e:16:8b:98:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:CA:F7:5E:1D:5D:42:A3:2B:09:81:4D:1E:8E:07:34:6B:E1:6F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/T8nK914dXUKjKwmBTR6OBzRr4W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.216.0/24
85.133.236.0-85.133.238.255
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6d:73:7c:36:36:86:20:75:11:df:c1:3d:99:24:7f:52:10:
6b:fc:44:5f:ba:1f:48:79:f9:a4:97:fb:2c:ab:0e:e8:4e:9c:
18:c0:17:da:31:48:da:bb:ae:22:3d:ee:70:8a:93:55:22:1d:
b0:62:e5:4e:88:7a:2a:00:43:66:2e:8c:75:41:1e:08:9b:5d:
ae:df:6e:26:ff:a7:7a:c5:08:48:1d:69:a1:fa:03:47:fa:e1:
09:d9:55:34:7f:f1:be:3d:8e:3b:a9:ed:dc:67:7c:27:28:65:
91:43:5f:56:20:30:8b:e9:f8:1c:99:0a:01:23:40:b6:10:67:
c1:f0:e2:a1:9a:c7:df:da:8e:32:b3:f8:e0:e8:80:94:cc:fe:
26:99:ea:db:38:8c:b9:85:f4:af:c7:2d:ff:9b:3f:84:05:01:
f3:57:84:86:46:e7:8d:77:2b:05:c6:66:eb:f8:29:92:c6:1d:
f3:f2:3e:99:ed:a1:fb:a0:15:71:d4:b6:45:c4:7a:aa:81:c5:
87:5b:53:83:6d:bf:9c:30:a0:97:21:bc:47:5a:f9:94:63:3c:
81:eb:19:3f:b5:d8:cc:f4:dc:7f:f1:e5:b3:e3:5d:52:3c:32:
ab:f9:37:ef:85:6f:bd:83:29:51:5f:f2:dd:a3:68:49:66:60:
b4:f2:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:06 2025 by rpki-client