Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d4C-aUwypeBBqIQYl2tlnae7vXQ.roa
File: d4C-aUwypeBBqIQYl2tlnae7vXQ.roa (raw, json)
Hash identifier: /uIaDAC3KkBIeXjpzrqu7reZEuWOKBorlNug5dkUnnc=
Subject key identifier: 77:80:BE:69:4C:32:A5:E0:41:A8:84:18:97:6B:65:9D:A7:BB:BD:74
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018EE59DCA4F9D932D1EE876398EE669BF03
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d4C-aUwypeBBqIQYl2tlnae7vXQ.roa
Signing time: Tue 16 Apr 2024 06:35:07 +0000
ROA not before: Tue 16 Apr 2024 06:35:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212077
IP address blocks: 85.133.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:9d:ca:4f:9d:93:2d:1e:e8:76:39:8e:e6:69:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 16 06:35:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7780be694c32a5e041a88418976b659da7bbbd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:78:ec:de:65:20:04:81:89:c2:a5:c4:d5:
35:54:ef:af:cf:7e:19:97:34:46:56:ed:eb:39:2d:
29:94:2d:4d:3d:7f:52:a1:c4:2d:82:29:be:b0:78:
19:8f:d7:3c:44:be:93:9d:4a:5f:53:7a:96:ee:89:
84:91:56:51:e6:0c:c2:ad:5f:0a:18:cb:72:e6:88:
cb:58:5f:0f:8d:59:a4:a8:b8:67:cd:ba:ed:02:dc:
59:48:2c:96:68:3b:f0:f5:a8:84:c5:f2:3b:65:81:
74:6f:93:38:2a:ac:4e:2a:bd:c9:93:14:f5:91:27:
06:6a:f2:73:4e:35:71:d1:99:de:35:5e:0c:35:32:
e0:c9:f1:41:6e:37:c1:43:61:1b:d6:f7:fd:b9:8f:
bb:77:3b:20:93:8c:da:6b:0c:d1:32:16:90:6e:08:
0a:a7:16:ed:89:5c:8c:e3:ba:ef:b7:b4:b7:18:3a:
5c:ec:af:75:43:36:05:64:e8:9f:1c:cf:ce:95:21:
c4:71:79:99:11:5b:ee:8a:1b:d5:78:70:8c:30:ed:
5b:65:81:50:cd:d9:d4:e2:45:cc:fd:8c:58:d7:4b:
42:c1:80:d6:0d:19:b4:31:84:9c:ff:40:26:b5:4b:
23:b2:59:00:34:9f:bf:68:1f:73:8d:ec:79:3c:a3:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:80:BE:69:4C:32:A5:E0:41:A8:84:18:97:6B:65:9D:A7:BB:BD:74
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d4C-aUwypeBBqIQYl2tlnae7vXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.200.0/22
Signature Algorithm: sha256WithRSAEncryption
69:b1:df:23:8b:c2:0b:6d:32:96:1b:2c:96:5e:6b:36:f4:57:
21:7b:ea:77:06:0f:13:16:47:54:f3:2f:4c:55:be:af:b7:55:
61:cf:55:06:6a:15:bc:79:5e:8c:5d:0c:5a:40:46:c1:e3:2c:
64:ee:c2:17:42:75:8a:12:03:a1:08:a9:23:4e:1e:e5:d6:3b:
2c:99:d7:3c:84:60:46:56:3f:60:ae:7d:4d:a3:8d:d6:7f:09:
56:1c:72:5a:56:85:49:b4:31:c6:a3:a0:cc:49:6f:07:68:2b:
f5:f8:20:79:d5:f7:61:18:9c:df:f9:d4:a9:c6:b2:13:04:a2:
26:7f:8f:af:e6:a0:77:a1:05:d0:ec:36:e5:a8:bd:c5:4d:3d:
c9:e8:3d:4e:b8:d9:86:62:3a:92:bd:ca:85:ce:38:ef:83:86:
84:fa:b1:95:bf:cf:20:5b:75:8b:6b:d2:dc:32:00:45:58:3f:
b6:33:23:cd:8c:29:58:45:80:6d:b1:bb:f1:71:40:97:bf:9d:
e1:d6:b3:0e:59:3e:b8:ec:e2:a1:c9:e9:1c:60:de:8d:ea:33:
82:6c:74:82:37:7b:08:08:64:66:bd:44:39:8f:d2:81:73:1f:
13:5c:5b:bf:e7:24:a1:6e:ea:03:12:0e:9f:c1:c2:ba:60:c4:
4e:0e:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 07:45:56 2024 by rpki-client on console-ams.rpki-client.org