Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/RFytC26-sZJat3e2i1yK1xfQsk8.roa
File: RFytC26-sZJat3e2i1yK1xfQsk8.roa (raw, json)
Hash identifier: d59QSZ+d7Sf+79ym4RFiNuURO+voLuz+GRtlHdwtKcM=
Subject key identifier: 44:5C:AD:0B:6E:BE:B1:92:5A:B7:77:B6:8B:5C:8A:D7:17:D0:B2:4F
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 018CCA285F8F6BD15701B6BFE045B0B4C135
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/RFytC26-sZJat3e2i1yK1xfQsk8.roa
Signing time: Tue 02 Jan 2024 12:31:32 +0000
ROA not before: Tue 02 Jan 2024 12:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213333
IP address blocks: 85.209.36.0/23 maxlen: 23
85.209.36.0/24 maxlen: 24
85.209.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:5f:8f:6b:d1:57:01:b6:bf:e0:45:b0:b4:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Jan 2 12:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=445cad0b6ebeb1925ab777b68b5c8ad717d0b24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:4d:24:13:3b:a2:c1:a3:88:f2:94:f0:07:
18:30:75:44:84:f6:88:2e:f6:29:22:76:f1:8d:fd:
d9:3e:88:f9:ef:6a:7f:08:db:00:e1:32:f4:d8:6f:
8a:52:32:25:3e:60:37:b4:23:f5:e1:8c:ac:64:e2:
a3:1a:e0:a5:a9:b7:b1:c5:5f:7b:6a:31:c5:0f:e5:
b2:23:97:4a:8f:b2:73:4d:9c:0a:e5:40:90:08:85:
9d:8e:36:ce:43:94:f4:9f:2b:a4:a1:b7:4b:23:56:
53:24:2f:0d:18:ac:57:f0:4c:4b:71:d6:e8:cd:49:
83:0e:c5:49:5e:fa:a5:32:94:25:b6:94:cc:15:2c:
a2:bc:14:d6:9a:d8:46:6f:f9:7d:1e:a4:a7:1e:f3:
c8:da:6a:53:c7:ab:6e:31:eb:b6:19:4e:dd:63:cd:
fa:b4:2e:25:3e:ac:78:8f:9a:eb:13:a8:90:76:7b:
5b:13:73:fa:27:5f:c2:ee:51:23:fe:50:a0:7e:5a:
45:34:54:23:68:0f:ba:cc:0c:e6:10:58:dd:a8:e0:
5e:a1:27:25:c4:5f:7f:11:78:38:a7:c3:cb:99:99:
03:00:47:a7:9e:27:b0:12:10:ab:3a:2b:10:df:b2:
20:2a:81:c8:9b:98:18:84:26:38:60:63:aa:a0:74:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5C:AD:0B:6E:BE:B1:92:5A:B7:77:B6:8B:5C:8A:D7:17:D0:B2:4F
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/RFytC26-sZJat3e2i1yK1xfQsk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.36.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:bd:06:3e:33:7b:44:00:a1:29:75:12:80:20:75:d3:0e:ff:
f0:93:ed:92:91:a9:92:b0:0c:3c:39:64:58:98:db:17:06:79:
d9:92:f4:c6:bb:76:2a:ff:b4:3f:07:94:4a:bb:c3:66:3d:73:
b5:0c:a0:ab:83:c7:24:27:44:56:5a:78:c7:47:76:46:51:8d:
36:ab:81:18:12:51:47:ff:c5:9e:ab:90:da:4b:b4:f5:8f:ff:
e6:ff:4b:13:a0:af:e4:26:2d:85:4f:0c:a7:0b:f3:55:80:54:
95:89:71:58:56:cc:33:22:04:60:6f:18:08:24:ea:01:e5:7f:
fe:1e:c3:9d:78:98:c0:14:c2:87:e3:a1:06:36:63:17:d8:12:
2c:fe:c0:ec:fc:d8:e0:a5:95:b3:e0:fc:7f:48:31:2f:89:dd:
33:71:0f:d4:6b:14:5e:4f:a2:6e:9e:86:c9:a0:3f:41:db:6f:
8e:1c:a7:a8:38:35:96:ed:42:19:e6:af:fa:68:7d:3f:be:dc:
42:af:d0:de:14:5c:4c:a3:60:99:1e:3c:67:db:6e:cf:00:da:
b0:6e:75:d8:15:f0:fc:9f:e8:95:bb:f8:dd:a8:29:54:cd:30:
00:7a:a9:5d:c8:69:11:05:b9:41:fe:95:f3:e4:2d:c7:85:c7:
76:9a:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:56 2024 by rpki-client on console-fra.rpki-client.org