Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/EcQCDbKpfuAEqcBHhK13TayuLJw.roa
File: EcQCDbKpfuAEqcBHhK13TayuLJw.roa (raw, json)
Hash identifier: HlsqzNaRiCXTTPqF7VgKSa6/G36tsJZvFcA5O7nz6Bc=
Subject key identifier: 11:C4:02:0D:B2:A9:7E:E0:04:A9:C0:47:84:AD:77:4D:AC:AE:2C:9C
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01911371B560F059A80EAEA4072CE9B50146
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/EcQCDbKpfuAEqcBHhK13TayuLJw.roa
Signing time: Fri 02 Aug 2024 14:15:04 +0000
ROA not before: Fri 02 Aug 2024 14:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 85.239.146.0/24 maxlen: 24
85.239.147.0/24 maxlen: 24
85.239.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:71:b5:60:f0:59:a8:0e:ae:a4:07:2c:e9:b5:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Aug 2 14:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c4020db2a97ee004a9c04784ad774dacae2c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:30:57:0b:68:16:9e:5a:37:78:1d:eb:49:
70:20:0f:ce:cf:0c:a0:88:00:76:ad:9e:c9:3b:51:
f0:64:5e:12:ee:a3:49:00:28:f3:b9:a7:a5:20:c2:
0a:fd:e5:79:8c:86:f3:d8:d8:6c:39:09:9e:b7:e9:
c1:f0:3b:2f:90:e6:6d:ae:b5:db:de:cb:06:2b:69:
dd:a8:5a:9f:31:cb:ff:17:62:f9:20:0c:92:e9:11:
a5:39:5c:7b:18:a1:d5:69:4b:c0:3b:11:99:5f:6c:
d0:15:c6:62:25:95:11:d7:4a:e7:ce:e0:4e:18:80:
8d:04:1d:c8:b9:da:99:50:b6:a8:d3:a8:0f:c4:96:
1e:83:28:25:e9:ff:68:3a:53:4d:35:fb:75:83:46:
55:47:3f:78:c9:6b:12:a6:72:a0:f2:48:cd:b9:ce:
f4:d2:1d:87:74:06:77:2d:91:68:c1:ca:71:a9:c1:
81:dd:9e:bf:a9:b9:d6:75:39:32:c2:76:88:83:8b:
7d:08:f0:dd:60:06:f4:98:8c:67:91:96:ed:20:8a:
7c:d0:65:5d:92:a5:51:ae:e4:5b:30:9a:b9:b4:57:
67:12:9a:75:b9:91:a6:df:b1:36:57:bd:2a:4a:d3:
61:f0:95:5f:84:69:17:a6:9e:70:37:4d:38:4f:c7:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:02:0D:B2:A9:7E:E0:04:A9:C0:47:84:AD:77:4D:AC:AE:2C:9C
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/EcQCDbKpfuAEqcBHhK13TayuLJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.146.0/23
85.239.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2b:16:a3:fe:fc:d3:f0:58:e7:f0:fb:02:fa:54:51:5e:39:
22:98:18:42:63:e7:42:79:bf:b6:8c:98:0f:ea:fb:85:4f:b9:
4c:13:d5:d1:c8:77:80:55:23:4c:07:0b:60:35:b6:1d:95:9c:
e2:08:8e:a9:52:e7:5a:c5:00:97:f9:46:12:7f:35:16:bf:48:
38:3a:f1:92:f4:cb:67:ac:48:90:7e:9c:0b:e0:2f:ed:18:a8:
13:53:59:47:50:8a:7a:0e:bb:fe:7c:d7:50:01:2f:a6:b9:f9:
be:d9:5c:55:8d:92:cb:92:83:75:1e:b7:9a:90:c0:10:dc:24:
c4:51:7a:a9:3b:5b:32:08:0a:d8:01:c8:a3:49:45:99:71:bb:
25:5b:e4:63:b9:92:5c:7c:62:8f:29:f6:2a:d3:4d:b5:47:7f:
be:9f:d3:33:ab:a0:a5:63:60:a3:cb:70:89:b3:6b:43:c3:be:
6b:19:9d:e9:91:43:33:cb:4a:0f:31:8a:2d:5d:a0:4d:31:00:
55:3e:0b:02:8f:7f:b3:dd:3e:69:f9:78:38:f2:f0:36:1e:c4:
c3:96:47:41:ab:69:c2:2b:0b:ce:fd:1c:fe:4f:14:68:47:4d:
f1:30:f5:d4:27:c1:85:40:31:3e:db:ca:42:62:92:76:c6:af:
74:f5:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:01:06 2024 by rpki-client on console-fra.rpki-client.org