Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/t4O_pwsLac-kq7G3wsWrUmRfI6U.roa
File: t4O_pwsLac-kq7G3wsWrUmRfI6U.roa (raw, json)
Hash identifier: Vaos5shMMFkNUGDPaEMc2wdyPmSKdcvsDecbcU4phvM=
Subject key identifier: B7:83:BF:A7:0B:0B:69:CF:A4:AB:B1:B7:C2:C5:AB:52:64:5F:23:A5
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018D6E9AD0CFB04FC39FE507A989164BAC99
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/t4O_pwsLac-kq7G3wsWrUmRfI6U.roa
Signing time: Sat 03 Feb 2024 10:54:16 +0000
ROA not before: Sat 03 Feb 2024 10:54:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201194
IP address blocks: 85.133.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Feb 2024 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6e:9a:d0:cf:b0:4f:c3:9f:e5:07:a9:89:16:4b:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 3 10:54:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b783bfa70b0b69cfa4abb1b7c2c5ab52645f23a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:27:d7:83:c8:c1:47:fd:93:27:c9:5e:18:
0b:46:04:37:bc:4a:6a:37:34:28:79:e7:d2:2c:52:
48:48:90:08:db:e7:24:f6:aa:bf:d2:2d:cb:20:02:
45:11:a7:2a:f3:1e:0b:37:89:ba:7c:bb:12:9e:4f:
78:2a:ad:ff:90:4b:a7:53:5b:f9:26:ea:71:4b:5c:
3c:2a:37:ab:98:0c:9d:ca:5c:97:70:2a:04:bd:cc:
88:89:db:09:c8:3e:3b:18:cd:1e:45:ee:1b:b1:d0:
46:83:b9:61:e8:80:3f:da:c2:2d:b3:49:ff:b5:0e:
b4:ec:65:09:d9:cc:d7:8c:d5:cb:02:a2:b8:3e:48:
2a:17:e3:3f:f1:97:7d:f5:35:7e:b9:0b:c2:4d:28:
1a:83:90:de:f6:52:67:17:1c:1c:73:14:97:40:42:
77:ee:68:34:53:2f:68:c1:88:e5:1b:c2:bf:76:ea:
b6:cb:4a:61:2f:e0:70:97:5c:f3:87:8e:42:0a:b4:
eb:5f:f3:96:51:bf:ed:27:05:8a:38:af:d1:f8:29:
6e:ff:26:e2:d9:41:9d:e6:e9:c7:6b:e2:f8:25:fe:
15:b8:69:87:5d:1a:db:67:01:23:48:29:0d:51:50:
b8:9a:52:a8:32:fd:e1:2e:ad:0e:55:d3:45:7b:5e:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:83:BF:A7:0B:0B:69:CF:A4:AB:B1:B7:C2:C5:AB:52:64:5F:23:A5
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/t4O_pwsLac-kq7G3wsWrUmRfI6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f6:00:61:70:e4:ed:aa:65:a5:55:c5:7c:33:bd:e3:54:05:
78:29:09:41:b8:c7:21:76:a4:88:af:cf:f7:5d:e2:2d:04:da:
b8:0b:66:6e:b4:ab:54:27:80:47:31:ca:4f:24:85:73:ed:9a:
15:14:6d:d3:7a:45:29:44:03:4f:a6:b4:46:f0:70:f0:83:15:
8e:05:79:7f:46:cc:00:b1:a9:5a:3d:fa:7a:ec:3b:f9:1f:1d:
85:92:90:db:f5:66:6f:13:6a:6b:1d:39:1d:9e:36:dd:77:d1:
1f:9e:a6:6e:5b:b7:37:79:46:33:fd:5e:b2:a4:21:49:59:a5:
5b:98:a8:b6:1c:a0:67:a7:51:ef:1b:4b:4a:00:58:8c:ea:7d:
91:d5:0d:08:92:73:16:fd:ff:99:1f:ab:bc:1d:bc:b6:d8:93:
c1:85:ea:07:2f:f0:ca:1e:fa:43:83:dd:e6:35:26:2a:09:cb:
2d:d9:0b:a7:c5:9e:9a:03:15:ff:ed:f0:aa:88:7e:b8:b9:a4:
17:bd:8a:a4:15:ad:b8:9b:ee:f5:6a:f9:76:e8:65:bb:fd:84:
0b:12:55:cf:87:8b:c4:0e:06:34:58:29:17:e5:06:55:a9:58:
b9:b0:db:3b:60:19:67:89:13:58:eb:50:82:b8:8f:0e:aa:e9:
97:cb:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 08:33:17 2024 by rpki-client on console-fra.rpki-client.org