Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4vKQafTb6FzpIMk_yppFp7PNm4c.roa
File: 4vKQafTb6FzpIMk_yppFp7PNm4c.roa (raw, json)
Hash identifier: DosOPaRM1W2l0S14m3PiZdSjd7/MGcg3w4Jg/DoXtj8=
Subject key identifier: E2:F2:90:69:F4:DB:E8:5C:E9:20:C9:3F:CA:9A:45:A7:B3:CD:9B:87
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018EDCF461D4AE429A8E973EE0821C30B74F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4vKQafTb6FzpIMk_yppFp7PNm4c.roa
Signing time: Sun 14 Apr 2024 14:13:07 +0000
ROA not before: Sun 14 Apr 2024 14:13:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8630
IP address blocks: 85.142.156.0/22 maxlen: 22
195.209.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:f4:61:d4:ae:42:9a:8e:97:3e:e0:82:1c:30:b7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 14 14:13:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2f29069f4dbe85ce920c93fca9a45a7b3cd9b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:8e:c7:be:5c:26:73:b7:35:9b:25:19:3b:
89:d0:9f:05:1d:e9:86:86:cd:f1:e2:06:e2:f1:c3:
6d:74:50:94:6f:bc:59:48:9b:78:0f:45:6e:51:ca:
21:b0:c1:0a:58:d5:0f:91:21:b5:a0:fa:a7:44:25:
a0:2e:b7:a6:a4:7a:b2:5d:f7:fe:65:aa:eb:80:40:
87:7d:d2:8c:6f:71:5d:22:1c:3e:86:4d:46:dd:3d:
6b:ad:ed:f3:b2:45:ac:a2:96:eb:bd:0b:92:5b:bb:
c8:64:59:e9:b7:31:5c:cf:96:d9:cd:6b:99:a7:98:
d3:a5:d2:02:e9:7b:e4:6c:85:3a:b2:2a:4b:fb:1c:
85:19:20:2b:6b:63:84:bd:79:dd:46:ed:a0:99:c1:
02:b7:91:54:03:1c:09:65:bf:e0:e6:82:b5:c8:dd:
ab:36:4a:0e:47:a9:08:d9:5a:63:d3:6a:df:de:ad:
5c:16:ea:63:48:59:43:de:06:af:4b:35:4e:f3:f6:
ee:b8:15:c3:6e:34:20:bc:5a:86:c4:d3:c1:0d:59:
5d:d3:0a:ff:94:3b:be:3b:9c:2c:9a:4a:b8:4e:bb:
d0:78:07:35:f1:f9:be:a9:25:ae:25:82:1a:b4:87:
c8:7e:ab:1f:76:91:26:e4:3d:53:f2:79:a3:a4:45:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F2:90:69:F4:DB:E8:5C:E9:20:C9:3F:CA:9A:45:A7:B3:CD:9B:87
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4vKQafTb6FzpIMk_yppFp7PNm4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.156.0/22
195.209.250.0/23
Signature Algorithm: sha256WithRSAEncryption
86:98:52:6e:db:31:cc:9a:ea:c3:7f:11:99:d7:8b:fd:07:1a:
e6:41:16:40:94:3f:2f:1f:37:15:08:fb:05:77:6c:5e:30:fc:
cf:a8:a3:8c:04:6a:f8:e9:c8:d4:81:13:2b:ee:dd:09:18:1c:
94:4e:95:be:87:51:1d:3d:b5:d0:53:26:ac:18:cb:0f:91:44:
50:f9:cb:92:cc:5d:e2:66:f9:99:32:5e:51:cc:7e:b5:bc:29:
44:66:3e:0c:f0:67:eb:cc:b8:c5:a7:27:6b:3a:84:5b:1b:c0:
59:9c:a8:55:a1:19:9e:af:5b:16:93:9e:54:30:0e:6c:20:3e:
f3:48:0f:8b:7f:a4:aa:a8:73:78:58:f9:0d:7a:97:2a:3d:99:
dc:cf:08:91:3b:41:91:01:14:66:25:53:d0:a6:fc:1a:d5:12:
f9:cb:eb:e5:2a:35:4b:93:6a:3a:cd:01:08:38:25:97:22:71:
f6:56:7e:51:9e:5d:94:a6:1b:2b:16:89:f4:19:dd:b6:a0:b4:
02:ea:10:8e:2e:b9:cb:06:88:25:6d:e3:3d:24:ee:15:95:1e:
2f:ef:67:0c:b1:d4:1d:c5:b2:ef:c6:c7:d7:e8:ff:bc:5c:94:
5f:2d:88:8d:4e:c5:d6:f6:e7:50:e0:47:a6:d8:71:da:de:03:
e2:c6:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:27:48 2024 by rpki-client on console-fra.rpki-client.org