Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eNt37lBtnIaUvBMWYXimnf5sUrI.roa
File: eNt37lBtnIaUvBMWYXimnf5sUrI.roa (raw, json)
Hash identifier: svhp9TGgA6X9dNuaJ8zS4a3c71kBeP/BlcY3n6CP9t8=
Subject key identifier: 78:DB:77:EE:50:6D:9C:86:94:BC:13:16:61:78:A6:9D:FE:6C:52:B2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019305F2D8EF132EE13EF014C80F2C86E88E
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eNt37lBtnIaUvBMWYXimnf5sUrI.roa
Signing time: Thu 07 Nov 2024 09:27:01 +0000
ROA not before: Thu 07 Nov 2024 09:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214567
IP address blocks: 85.133.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:f2:d8:ef:13:2e:e1:3e:f0:14:c8:0f:2c:86:e8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 7 09:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78db77ee506d9c8694bc13166178a69dfe6c52b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dc:2f:d7:17:66:20:a4:16:84:c1:f7:72:68:
5d:78:db:96:1f:5f:bd:ca:72:cd:79:8a:2c:cc:e9:
3e:7f:86:90:cb:b3:17:6e:98:68:34:d4:20:44:96:
97:e3:32:5e:04:bd:f8:56:70:c5:3c:85:18:ae:1e:
27:7e:a1:ea:14:2a:16:ef:34:c9:27:d5:67:92:f4:
30:6c:14:e0:31:cd:ad:d1:c4:50:d9:bf:a3:92:81:
56:b7:50:0e:04:b5:e3:56:df:cb:07:31:9a:5e:50:
2c:79:bc:fc:66:76:57:55:53:7b:a9:15:08:39:26:
bb:47:21:6b:f5:50:a5:ba:91:d3:e5:b5:c4:6b:ff:
97:0a:10:66:e2:64:00:54:55:b6:2e:19:88:c1:cb:
8d:dd:3a:55:9f:74:df:c1:12:d0:d9:81:55:3c:7a:
54:a4:b8:3e:e5:b4:08:6d:47:6f:85:32:f3:e7:7b:
0e:0f:76:08:3e:c9:12:2a:90:8a:b2:13:ea:da:4c:
31:20:c7:c4:08:77:b2:f1:b1:18:c7:63:f8:e4:7d:
09:d8:10:8d:38:c5:b6:16:79:fe:96:9a:2e:a8:0e:
81:0e:3f:8d:2c:23:2d:92:72:81:64:f3:02:2f:85:
08:d0:14:50:cd:27:29:c5:35:2c:55:eb:c0:a9:24:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:77:EE:50:6D:9C:86:94:BC:13:16:61:78:A6:9D:FE:6C:52:B2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eNt37lBtnIaUvBMWYXimnf5sUrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:11:45:0c:e2:f1:54:01:07:e7:18:b1:90:2d:36:85:6f:3a:
be:6d:e8:d7:05:13:2f:fa:28:5b:47:3c:d1:59:1d:01:91:e2:
21:29:d7:93:a8:2a:0e:ca:f9:8f:1b:39:a7:ac:c8:de:22:c1:
98:f8:15:77:7a:66:16:36:90:56:a8:28:2e:af:04:5b:71:7f:
90:ed:76:40:71:0f:36:31:b8:ee:65:67:bc:0c:03:e5:39:22:
e9:26:34:c5:56:b1:c4:06:38:22:d3:1b:5c:43:ce:4f:e0:fb:
cf:ea:7c:d5:3a:ea:fb:ea:eb:27:27:cf:41:97:43:70:39:18:
b1:46:45:19:92:18:a4:14:11:2c:09:c3:f7:81:ae:04:47:7f:
0e:d6:56:61:89:a6:a5:0f:7a:e0:72:c7:fa:5e:81:c5:69:87:
a4:0c:e7:d0:05:f8:78:ee:df:ae:0b:6e:41:72:b9:a3:cb:1f:
dd:81:ad:86:8b:e4:22:a6:38:a3:89:f6:e1:d9:a5:6b:54:d3:
e0:29:16:6d:b2:93:3c:b4:24:45:c7:b3:cb:56:52:be:57:a8:
37:1a:47:69:47:93:0c:dd:a3:de:5f:a7:fb:16:14:24:bc:d7:
46:e7:d8:af:30:1b:5d:90:16:9c:a2:03:bc:91:a6:89:cf:d4:
2d:98:e6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:30:17 2024 by rpki-client on console-ams.rpki-client.org