Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/l8U9mrUJ8WKmDoKs7DoNaSdk1x4.roa
File: l8U9mrUJ8WKmDoKs7DoNaSdk1x4.roa (raw, json)
Hash identifier: pD1eeJEmgZQ56HbE6WBDL/gizqSV197RF2nRXV/pK08=
Subject key identifier: 97:C5:3D:9A:B5:09:F1:62:A6:0E:82:AC:EC:3A:0D:69:27:64:D7:1E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192ECF3C80C8F88B00E226DD53CA83D3515
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/l8U9mrUJ8WKmDoKs7DoNaSdk1x4.roa
Signing time: Sat 02 Nov 2024 12:57:32 +0000
ROA not before: Sat 02 Nov 2024 12:57:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 85.133.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ec:f3:c8:0c:8f:88:b0:0e:22:6d:d5:3c:a8:3d:35:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 2 12:57:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97c53d9ab509f162a60e82acec3a0d692764d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:b3:5c:07:be:78:db:a5:86:49:58:03:4f:
31:fb:3c:36:04:3d:eb:78:2b:e4:93:88:0f:48:40:
9a:a0:f3:5b:8f:79:0b:82:e5:a2:f1:67:2b:23:16:
9f:ce:20:29:c3:ab:11:3f:5d:84:70:56:ef:cc:52:
2e:27:b4:19:e0:85:ee:c2:4c:32:10:ac:fd:f1:9d:
32:d3:54:bb:49:95:94:bb:0f:40:12:a1:81:2b:26:
5e:45:5f:7d:a3:50:a6:82:30:3f:5f:7c:4d:5a:5b:
fc:55:7e:4e:5b:06:f2:d8:55:f7:f0:53:0f:cb:bc:
4e:0c:f5:48:d0:6a:93:7c:4a:25:97:61:1c:6f:70:
66:59:f1:28:44:d2:85:b2:fd:67:12:5e:f4:f9:aa:
bb:05:2d:12:f0:41:6c:76:59:9c:cc:e1:6d:ed:56:
5d:1e:5a:18:06:78:c9:fd:5e:90:8c:50:33:b0:c7:
1f:53:c0:10:35:be:54:53:6d:6d:83:c0:8a:37:2e:
c6:05:f3:cf:68:fb:6b:42:20:39:17:15:87:f8:47:
ac:e2:fc:ff:10:23:f3:e0:ec:d7:7e:8c:4e:57:19:
9e:36:18:0e:7f:d2:dd:dc:95:1a:e0:bc:7c:8d:10:
b6:c3:41:99:a9:cd:d6:18:2c:b8:81:75:5d:71:98:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C5:3D:9A:B5:09:F1:62:A6:0E:82:AC:EC:3A:0D:69:27:64:D7:1E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/l8U9mrUJ8WKmDoKs7DoNaSdk1x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e1:67:74:e1:e0:43:d7:b3:8b:01:95:41:f1:9d:30:63:6b:
75:60:91:14:a4:d6:63:ef:f4:89:c4:e5:a7:ff:a7:aa:28:cf:
ce:bf:18:b4:6e:e2:a8:cf:ef:c7:1f:48:b0:ce:db:e9:68:13:
aa:56:69:2c:c1:ae:f8:79:84:5f:8c:43:6c:5e:f6:0d:93:3f:
c2:d0:d6:9a:ad:e4:89:3b:6d:87:1a:56:b5:88:01:73:bb:65:
62:65:63:b2:49:04:9f:e6:02:0b:c3:19:60:7a:3a:56:2a:3e:
d5:fc:52:07:69:09:53:1d:df:2e:b1:4a:ce:3d:d5:94:ee:37:
2e:6c:ba:5e:c8:fe:1c:a1:62:21:52:07:7c:7a:75:d7:a9:b4:
67:42:64:32:20:af:9f:03:5a:bc:62:e8:9b:a4:a6:de:62:df:
82:7d:f3:46:7d:79:05:5f:46:d7:b4:2c:25:3d:95:ef:19:d7:
f8:b2:dc:4c:1f:c3:9d:db:c5:1a:b1:39:4d:4d:3c:57:52:4d:
ff:c7:8e:c7:4c:a0:f2:a7:a0:74:07:50:9f:4b:90:1b:f9:e3:
ff:0d:57:15:d5:44:aa:4b:f3:16:62:46:03:fd:02:55:ae:45:
41:00:ae:6d:c7:36:e5:4e:a5:be:29:f6:22:58:22:f2:f6:55:
d0:47:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:30:17 2024 by rpki-client on console-ams.rpki-client.org