Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/tBDOfp78QQgiiS6CiyoFLxXj5tg.roa
File: tBDOfp78QQgiiS6CiyoFLxXj5tg.roa (raw, json)
Hash identifier: BKA0WERBhvktRgfff7zBBfzGNLJTMrK9WQO7PtSPclg=
Subject key identifier: B4:10:CE:7E:9E:FC:41:08:22:89:2E:82:8B:2A:05:2F:15:E3:E6:D8
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 018F0BB9AC6C193F8E4139F99DAF6F5A75EA
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/tBDOfp78QQgiiS6CiyoFLxXj5tg.roa
Signing time: Tue 23 Apr 2024 16:11:08 +0000
ROA not before: Tue 23 Apr 2024 16:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208695
IP address blocks: 185.75.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:b9:ac:6c:19:3f:8e:41:39:f9:9d:af:6f:5a:75:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Apr 23 16:11:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b410ce7e9efc410822892e828b2a052f15e3e6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:bc:4d:e0:d7:96:76:3d:74:36:3e:6f:3d:
c3:91:eb:75:e6:64:05:3c:02:99:4e:35:27:7c:11:
94:ca:bd:37:4c:82:25:aa:05:78:c3:eb:a9:66:ed:
1b:54:79:ab:47:87:06:2f:f1:1b:ee:5e:af:a3:6a:
6f:eb:12:b1:50:1f:e2:56:60:5d:19:d5:72:b0:4c:
f8:9a:9c:79:42:bd:84:0f:83:45:59:ba:7d:a9:6b:
e9:43:88:98:fd:3a:8e:f9:a4:b3:5a:47:b5:17:19:
eb:a9:ef:49:f7:4a:4d:ce:bf:9b:b0:98:c0:4c:7a:
82:d1:8f:a2:fb:34:1c:3d:3c:87:0c:e5:e8:a3:96:
e6:29:c1:d1:a2:fc:aa:72:c6:e9:18:3a:39:91:59:
f7:10:39:43:c1:3c:b2:c7:e8:a9:bc:77:da:0a:b3:
0f:98:c2:e4:0b:49:a9:da:1a:c0:7e:cc:30:97:e2:
c4:11:ba:b7:ac:da:95:d7:81:81:ba:0d:c8:4e:92:
51:88:88:31:d2:20:cf:dd:e6:b3:c7:61:42:e6:78:
31:51:2d:de:a9:10:85:c8:8f:af:e8:a8:2c:b5:73:
ea:1b:52:35:5f:e8:29:71:b1:f8:51:e4:0c:f1:b8:
c6:81:06:cd:01:12:48:8e:99:9b:24:ec:b7:a6:64:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:CE:7E:9E:FC:41:08:22:89:2E:82:8B:2A:05:2F:15:E3:E6:D8
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/tBDOfp78QQgiiS6CiyoFLxXj5tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.13.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5e:15:51:f6:63:78:17:62:af:c2:89:4e:f5:1f:2c:66:40:
ef:53:b3:b9:76:70:cc:88:13:32:80:8a:c2:11:f4:3e:82:a7:
6d:6e:27:d2:44:93:4f:d8:2d:0f:0c:ec:ac:9f:64:05:08:bd:
cb:6f:63:04:5b:07:b0:ef:ae:e9:ef:09:fe:fc:23:5e:de:dd:
b1:c4:ee:6a:d4:5b:5a:b3:31:86:eb:3b:91:f7:72:ea:95:e4:
16:ef:d7:b3:79:02:dd:b5:4f:79:f2:cc:f6:87:1f:7a:d3:35:
9d:00:8f:e7:87:d9:2a:f4:1a:42:ab:6d:67:e0:6c:69:7c:10:
b0:72:91:99:9b:71:e1:b8:ff:82:42:5f:47:bc:ed:22:0e:f4:
da:2f:e3:63:04:aa:e2:1b:62:ce:ba:a4:1d:74:ad:15:d5:a9:
52:61:13:65:1e:8e:2e:1f:28:ba:f5:65:95:a8:c3:b6:c1:a5:
97:fd:82:41:58:97:e2:54:0b:1d:7c:da:29:f3:ca:22:b8:c6:
92:86:8c:45:36:e5:94:ea:d9:bc:0a:6e:ec:b5:31:28:a9:df:
8a:04:74:ff:ad:9a:57:16:c8:12:29:da:09:96:c9:da:d6:02:
53:4b:02:e3:d3:e0:8f:72:62:5e:bf:75:36:cf:96:1f:63:54:
7e:c3:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:23:25 2024 by rpki-client on console-fra.rpki-client.org