Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/D2jkYempvh5U-i0MP0eTBsnzXBE.roa
File: D2jkYempvh5U-i0MP0eTBsnzXBE.roa (raw, json)
Hash identifier: cKlUXe18tjI6HAO5QVkkdttKU4xxV2iECxbi41Skh+A=
Subject key identifier: 0F:68:E4:61:E9:A9:BE:1E:54:FA:2D:0C:3F:47:93:06:C9:F3:5C:11
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 019324A6C77AE7D8FDAF8ED635FC21776E5A
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/D2jkYempvh5U-i0MP0eTBsnzXBE.roa
Signing time: Wed 13 Nov 2024 08:32:10 +0000
ROA not before: Wed 13 Nov 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200924
IP address blocks: 85.204.37.0/24 maxlen: 24
212.237.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:a6:c7:7a:e7:d8:fd:af:8e:d6:35:fc:21:77:6e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Nov 13 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f68e461e9a9be1e54fa2d0c3f479306c9f35c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:64:cf:be:02:0a:13:80:dc:fe:3b:97:ac:
25:28:14:38:6f:3f:47:f6:eb:ba:1d:4d:82:f3:2f:
60:18:b6:9b:3d:0a:f2:2a:9f:04:11:23:e8:bd:92:
a7:a1:da:7f:39:97:38:9f:e7:a8:c2:b6:47:f2:77:
d6:f4:37:10:9b:8c:c9:00:6a:48:4a:b6:de:99:98:
73:53:79:db:07:b6:ad:fa:ff:d4:07:ee:cf:02:15:
d9:35:69:b9:34:17:dc:f1:70:83:d7:03:10:76:3a:
40:aa:a1:e0:76:3e:5c:84:cc:2a:1f:e6:7f:33:37:
52:af:8c:b9:30:fb:14:47:d2:bb:cf:90:a3:34:15:
b4:56:48:9c:cd:d6:9f:74:6d:4e:60:8b:e6:7a:84:
1b:73:80:a6:07:01:7a:3f:3a:bf:7e:80:19:d6:a3:
bb:cc:e3:b7:5d:6a:fd:da:c3:ed:0d:3a:0b:db:99:
56:be:60:a3:98:dd:f1:25:96:01:c5:a8:da:46:ca:
61:fc:3a:c9:de:3c:0b:b4:bb:c3:c4:63:53:9a:46:
2e:c3:ad:a2:95:06:06:d8:a8:ff:b1:62:85:1d:16:
02:a0:77:c0:43:57:33:f2:e8:66:16:0c:2d:d6:9d:
9b:77:23:da:cd:e5:ef:6a:2c:62:a8:36:85:1f:23:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:E4:61:E9:A9:BE:1E:54:FA:2D:0C:3F:47:93:06:C9:F3:5C:11
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/D2jkYempvh5U-i0MP0eTBsnzXBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.37.0/24
212.237.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:03:b3:f4:eb:81:0f:90:e3:a3:4a:f8:07:e5:b9:70:67:ee:
79:58:23:7d:bd:35:f5:de:d4:2e:97:d4:8a:25:23:a3:02:df:
08:9e:11:36:21:8e:4c:2a:e1:3b:18:3b:24:35:60:2e:3b:7a:
27:ae:70:2f:11:6b:52:20:bf:44:0b:a3:8a:1c:d2:9a:18:1c:
50:86:b6:26:4a:08:02:db:22:ac:9e:5d:2c:10:95:ce:0e:94:
28:27:0e:5a:c6:72:80:09:95:a1:f5:fb:a9:79:9c:1a:c6:85:
c8:e8:a6:8f:e0:72:1e:f7:84:ec:7f:ff:f6:52:a6:fe:15:cf:
8c:ab:35:3f:a8:e7:15:47:db:1b:1a:e6:81:0e:8d:e4:54:a2:
02:ca:e7:cb:5b:40:8f:4f:8c:bc:c3:c3:a9:ee:45:82:fe:43:
84:99:db:f4:0b:a8:1e:9a:49:ca:a1:70:d1:1a:e8:82:a0:92:
6c:6f:85:99:66:4d:1e:59:02:65:d9:8c:a2:94:c0:4e:29:2a:
cf:73:45:cb:17:56:63:b3:dc:5e:11:b1:53:ea:cd:5a:55:1c:
f1:7f:14:15:cd:d4:da:09:3e:da:fd:85:21:35:e1:2a:b6:52:
d5:c6:88:ac:94:3d:2d:64:ff:b7:5b:b7:be:dc:5e:4d:1d:f5:
df:99:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:17:17 2024 by rpki-client on console-fra.rpki-client.org