Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/h_4s4-oq2XiFzUJ9Q6Oa7VoqsNI.roa
File: h_4s4-oq2XiFzUJ9Q6Oa7VoqsNI.roa (raw, json)
Hash identifier: 7BDjX7+AdP8ijbAUSeTSIVediAI5UH2Ya/Af9gwte60=
Subject key identifier: 87:FE:2C:E3:EA:2A:D9:78:85:CD:42:7D:43:A3:9A:ED:5A:2A:B0:D2
Certificate issuer: /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial: 018CC4923341DDBBF96EB77075F3B7CA1A96
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/h_4s4-oq2XiFzUJ9Q6Oa7VoqsNI.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57325
IP address blocks: 185.239.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:33:41:dd:bb:f9:6e:b7:70:75:f3:b7:ca:1a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87fe2ce3ea2ad97885cd427d43a39aed5a2ab0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:a1:ed:97:85:ea:ba:96:ca:a0:b4:82:4a:
79:c4:70:bc:49:de:78:65:16:6b:f8:46:6b:ce:f7:
10:31:e9:d6:5d:60:7b:56:24:83:5b:b8:6e:10:c3:
ad:ce:fe:f5:90:79:36:13:d9:eb:43:66:3f:f6:89:
f5:79:f6:d1:6d:54:70:6b:cf:61:c6:eb:ac:dc:f8:
0e:65:1e:ae:63:20:cb:39:3d:97:a5:12:c6:d9:c2:
38:fa:3c:cc:dd:74:a8:96:ac:d4:f0:49:86:75:49:
6d:7a:55:c9:37:83:b0:50:5e:84:51:f7:8e:2d:97:
3b:af:d6:4b:ff:f7:fc:81:59:e6:49:5c:b0:4e:54:
97:54:85:2a:b2:8b:12:77:51:30:ac:49:0c:f5:47:
04:70:05:31:8b:4c:e4:6e:2f:85:30:71:ac:2e:fb:
8b:8a:de:59:ff:24:0d:cf:ce:db:a2:93:ca:ab:a5:
3d:19:3d:12:3d:e7:05:15:07:02:59:6a:7e:8b:77:
95:98:10:61:3a:25:17:95:9a:b8:24:98:c1:b7:ee:
1b:c8:db:77:12:12:9d:7c:67:90:82:fe:3b:72:fb:
61:39:86:ba:8a:7e:28:43:c2:77:ad:55:0c:fa:2e:
1d:f6:6d:9f:d9:b1:14:5b:8e:ac:bf:a6:3f:7b:2f:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:2C:E3:EA:2A:D9:78:85:CD:42:7D:43:A3:9A:ED:5A:2A:B0:D2
X509v3 Authority Key Identifier:
keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/h_4s4-oq2XiFzUJ9Q6Oa7VoqsNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:74:af:be:98:95:d2:f2:13:06:7d:8b:f2:b1:b1:c4:5e:9c:
01:e0:4f:23:aa:59:84:0a:39:64:58:22:e3:6e:07:26:90:cf:
50:bf:a3:4e:86:f6:53:31:f7:52:76:a7:a9:06:05:03:18:97:
7f:8e:54:35:7f:fa:b3:14:31:21:2a:10:f6:9e:ca:3b:c7:fe:
c7:aa:9b:ff:3e:6d:ae:31:1d:b6:d7:dc:9e:2f:e3:76:5b:0b:
79:75:dc:d3:42:d8:cc:95:a1:de:53:0a:b8:d6:7e:b9:7d:a7:
0d:0f:59:66:27:fd:1e:19:92:75:35:b8:bf:d8:c2:00:e1:1c:
a4:72:85:6d:46:a0:9d:55:2b:51:c9:3b:92:3e:89:22:ab:ef:
d4:18:68:3a:7c:52:6c:97:01:04:ac:b2:a2:68:f4:38:b3:16:
e2:1e:d9:2b:41:9c:e2:3c:85:a1:a7:df:a6:a1:9a:ff:25:fd:
22:05:7e:ad:55:08:00:6f:db:49:1c:f6:cc:0c:fb:e5:fd:cd:
5c:00:04:5c:e4:1c:c2:28:2b:a8:61:39:d0:30:5b:80:f7:a4:
d4:99:46:9b:5d:19:08:5b:3d:38:be:95:da:b2:e8:07:52:42:
12:29:dc:24:46:3f:54:9c:c4:0b:62:af:b9:c0:92:3e:0d:79:
4c:38:4e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:25 2024 by rpki-client on console-ams.rpki-client.org