Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/iN2B03Naf1ii7OVxLFNkQDhCABA.roa
File: iN2B03Naf1ii7OVxLFNkQDhCABA.roa (raw, json)
Hash identifier: /NrHOtx4EiIF7NVYbwOYMniidAjCu/T2UJl+jcPtSP0=
Subject key identifier: 88:DD:81:D3:73:5A:7F:58:A2:EC:E5:71:2C:53:64:40:38:42:00:10
Certificate issuer: /CN=74d34abbe9afba280432c2ab83898c7b950df7ac
Certificate serial: 018ED146450AD03739FB0AAB8B68AE24BCAF
Authority key identifier: 74:D3:4A:BB:E9:AF:BA:28:04:32:C2:AB:83:89:8C:7B:95:0D:F7:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNNKu-mvuigEMsKrg4mMe5UN96w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/iN2B03Naf1ii7OVxLFNkQDhCABA.roa
Signing time: Fri 12 Apr 2024 07:47:06 +0000
ROA not before: Fri 12 Apr 2024 07:47:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212045
IP address blocks: 85.117.228.0/24 maxlen: 24
85.117.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNNKu-mvuigEMsKrg4mMe5UN96w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:46:45:0a:d0:37:39:fb:0a:ab:8b:68:ae:24:bc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d34abbe9afba280432c2ab83898c7b950df7ac
Validity
Not Before: Apr 12 07:47:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88dd81d3735a7f58a2ece5712c53644038420010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:4c:92:72:ce:be:1e:10:06:cd:2b:7b:a6:
04:64:9b:7b:ec:63:c3:f1:58:24:5b:06:f5:f1:4b:
a5:9a:86:76:ea:f1:e2:33:71:14:16:5b:a9:8d:85:
31:10:7c:69:a3:5d:12:e6:7f:5d:69:56:34:bd:c4:
2a:33:b6:12:9a:db:74:78:6f:1f:c2:00:73:21:7d:
ec:c4:9a:7f:71:97:74:7d:a1:51:99:86:e9:2e:54:
ee:b5:f5:43:c4:ca:9f:fd:6c:61:96:de:05:8a:0e:
0d:80:5e:17:d7:4b:ae:e6:bb:97:61:eb:8d:ba:9d:
e1:55:ed:3c:a1:dc:ae:04:9b:2b:0e:ac:fa:de:a3:
92:0d:bf:d5:9e:bf:46:c6:f6:bb:3a:07:6d:b8:8c:
b7:67:fd:ac:cf:86:1d:14:95:8c:b4:57:bd:03:38:
bc:69:24:b4:7f:fd:8f:3b:05:8d:31:96:4f:6c:13:
7f:52:84:6c:c3:a7:e6:76:f1:14:3b:f2:74:ca:ce:
ae:11:30:58:21:e5:da:fa:0d:c6:13:4a:22:4a:a0:
86:3e:50:20:85:65:95:32:23:50:1c:c0:74:c9:2d:
22:ad:f6:ab:3e:b6:86:82:c0:e7:4b:80:d9:30:78:
82:dd:cb:9f:f8:9a:cf:c7:c7:0b:4d:1d:51:86:d9:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:81:D3:73:5A:7F:58:A2:EC:E5:71:2C:53:64:40:38:42:00:10
X509v3 Authority Key Identifier:
keyid:74:D3:4A:BB:E9:AF:BA:28:04:32:C2:AB:83:89:8C:7B:95:0D:F7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNNKu-mvuigEMsKrg4mMe5UN96w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/iN2B03Naf1ii7OVxLFNkQDhCABA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.228.0/23
Signature Algorithm: sha256WithRSAEncryption
96:7e:64:80:94:92:73:99:97:0c:ae:eb:95:16:19:9e:8d:cb:
81:c5:66:35:0f:54:e0:97:50:09:9a:b8:38:9e:8e:4c:02:f4:
9e:df:90:cd:dd:26:eb:c7:14:ce:34:9e:c6:d3:5f:43:7d:0e:
5c:2f:12:52:82:69:d1:81:da:a3:fb:4f:bf:c3:94:47:10:70:
e9:dd:cc:9d:85:9b:c1:4d:68:91:5b:d3:fe:b5:82:86:1c:ce:
a1:c0:72:0e:b9:32:7a:1a:e3:29:40:f9:79:54:3e:f4:97:ea:
f2:5e:25:db:51:8a:05:92:96:26:cd:76:60:62:15:2e:c7:b9:
a2:0b:7a:40:0b:f2:16:81:fd:47:a6:5a:72:28:14:46:89:40:
a2:1f:22:d7:ba:da:a9:98:3b:83:ee:98:ba:6d:ff:4f:a6:b5:
2d:c9:ee:c9:bb:33:92:1c:85:2f:dd:bf:2b:75:29:2b:a6:02:
ca:9b:3e:86:2b:e0:f5:44:98:8a:98:7d:ad:ae:cf:0c:03:16:
96:16:55:88:66:28:85:0c:14:af:05:93:61:11:7d:a2:89:23:
07:cc:a7:a0:d4:bc:f6:08:56:b0:fe:5b:34:99:fc:96:f8:04:
47:ec:f0:73:f6:cf:ca:92:b6:e1:21:18:48:1c:37:85:8c:cf:
7d:a9:bc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:05:17 2024 by rpki-client on console-ams.rpki-client.org