Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/v9RJFoBiaUTkzKiU9LRy_gae3bo.roa
File: v9RJFoBiaUTkzKiU9LRy_gae3bo.roa (raw, json)
Hash identifier: WKTULwo8wbxxNrGGQZx7kXnNpzRyLuIe+P6Dgckpp4k=
Subject key identifier: BF:D4:49:16:80:62:69:44:E4:CC:A8:94:F4:B4:72:FE:06:9E:DD:BA
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 018CC42496D6FB6E7F21214298F63AC2CCC4
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/v9RJFoBiaUTkzKiU9LRy_gae3bo.roa
Signing time: Mon 01 Jan 2024 08:29:41 +0000
ROA not before: Mon 01 Jan 2024 08:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41960
IP address blocks: 85.209.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:96:d6:fb:6e:7f:21:21:42:98:f6:3a:c2:cc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Jan 1 08:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfd4491680626944e4cca894f4b472fe069eddba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:25:c5:c9:7e:e3:84:72:47:1a:d7:2b:84:
6d:ba:70:42:50:ba:79:05:90:bf:2a:9d:6a:10:3b:
1e:fb:c9:23:84:32:15:e5:cd:da:74:cf:81:ce:7d:
ef:6c:b8:f1:44:5e:59:5e:6b:b2:74:9d:d7:c6:b7:
ff:a7:c3:78:15:a7:a4:50:a2:3c:07:8f:f7:93:4c:
e9:84:d7:a0:37:b4:5c:ab:18:39:ef:81:1d:13:86:
f5:da:f5:13:d1:44:45:1d:44:f9:62:ba:e2:b0:0a:
2d:09:f2:a2:19:6d:45:53:c6:c6:a9:ce:9b:39:c2:
10:da:f2:cd:b6:29:5d:59:ad:12:d6:1a:8e:61:cb:
0c:ec:77:11:72:f5:6f:c4:c8:8c:9c:66:23:54:77:
8b:f1:69:bc:e9:f8:d9:b1:d6:f6:a2:51:83:1c:e3:
d8:10:c4:32:b3:3f:b4:4f:fb:29:1d:25:e3:a5:23:
92:ee:e8:79:90:44:60:d4:fd:3b:93:06:54:6c:cf:
14:75:bd:2e:52:35:92:3e:8e:c7:c2:f3:60:81:06:
40:e0:8c:47:af:4e:c5:af:01:81:df:58:7f:65:35:
fa:a3:eb:27:bf:8a:78:c2:d0:da:a6:8c:a0:5e:95:
a4:1d:d9:c8:1d:f8:fa:1b:c9:4b:17:15:6d:b4:4c:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D4:49:16:80:62:69:44:E4:CC:A8:94:F4:B4:72:FE:06:9E:DD:BA
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/v9RJFoBiaUTkzKiU9LRy_gae3bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.140.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4b:e7:2b:d6:7d:b0:13:e0:78:a2:8d:88:28:05:da:9f:4b:
87:c5:60:ed:06:5c:1f:a4:b0:7c:2b:af:e8:a2:99:16:95:20:
96:d6:cc:bf:fb:f9:39:46:48:a7:39:65:3b:3d:10:ec:66:c4:
bb:ce:85:5b:c5:49:6c:64:f7:c3:49:eb:e9:85:04:ae:fa:26:
e7:c7:0c:ee:a0:03:85:80:46:c3:87:db:a8:d8:12:81:d3:55:
b3:f2:03:07:99:2d:c6:c6:6f:57:79:a6:5d:c5:ee:2d:7f:41:
44:82:2b:cc:2d:75:e2:08:a3:e5:57:a6:b0:3a:19:25:34:1a:
64:a7:fe:9e:96:62:bb:8d:0e:93:33:dd:c6:c5:33:69:d7:44:
33:b3:08:56:1c:b5:5d:ff:ea:8f:26:95:d0:0f:62:27:e1:47:
24:d0:49:72:db:18:e9:fd:38:31:ad:eb:d1:46:4b:cc:be:28:
ef:13:81:da:9e:0b:45:7d:40:37:3b:05:33:f5:2e:56:8b:f1:
43:ff:90:ec:a2:06:20:56:1d:a7:5e:52:48:c4:32:e4:6c:3f:
40:93:7c:0c:e4:02:54:a4:68:9a:33:aa:10:75:24:ac:38:33:
e8:32:38:5e:ea:59:8a:f0:60:f7:2d:21:e2:a0:57:dc:2b:f0:
c6:bc:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:55:06 2024 by rpki-client on console-ams.rpki-client.org