Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/C8ODnf3fDPPFejg4HByYmPQbOAk.roa
File: C8ODnf3fDPPFejg4HByYmPQbOAk.roa (raw, json)
Hash identifier: G2oumnXxDO+Mzr9KpW3D6Vu1vm2FuGjmZQqE59zLhpk=
Subject key identifier: 0B:C3:83:9D:FD:DF:0C:F3:C5:7A:38:38:1C:1C:98:98:F4:1B:38:09
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC7277B45A0074A656AEDD41A7C2D200F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/C8ODnf3fDPPFejg4HByYmPQbOAk.roa
Signing time: Mon 01 Jan 2024 22:31:42 +0000
ROA not before: Mon 01 Jan 2024 22:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201848
IP address blocks: 85.143.208.0/20 maxlen: 20
85.143.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:7b:45:a0:07:4a:65:6a:ed:d4:1a:7c:2d:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bc3839dfddf0cf3c57a38381c1c9898f41b3809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:78:c0:8c:c8:4b:26:16:67:e1:b9:7b:45:
a6:8e:f2:3d:20:08:43:20:a8:f4:1f:d6:1a:54:83:
8a:8d:0f:c7:7a:74:22:5e:df:e6:5d:0f:7d:3c:13:
35:e4:f2:c3:c2:82:5f:5c:e9:e5:9e:23:3a:0f:73:
23:53:ef:04:3b:00:05:87:d6:ae:da:cd:9e:90:ed:
70:c7:d0:3f:71:4c:6f:31:6a:e6:37:b4:8e:23:28:
e2:77:0c:e0:cb:38:a4:8e:7c:61:a5:c0:e8:4a:24:
81:0b:be:d9:e0:cd:e5:17:da:fd:04:44:56:1f:67:
cb:dc:fb:bb:a8:d0:65:59:f0:05:9b:bf:d1:cd:74:
11:8e:67:b4:2a:1a:ae:d6:85:ed:1e:b3:20:d9:a1:
6f:95:6d:d4:d5:b3:8b:69:af:dc:a4:2e:80:db:f1:
c6:3c:60:b8:08:70:fe:0b:9a:48:04:cd:eb:58:36:
91:ac:2d:ff:56:15:9a:09:2d:d5:d5:36:c5:f6:ee:
fd:be:8b:6a:0c:c9:5e:a8:ad:ad:7c:7f:0d:48:50:
ff:7f:89:55:2d:dc:c4:d3:0d:65:16:7e:72:a5:60:
98:28:fd:f9:40:96:b5:01:9a:55:18:c1:72:b3:b5:
6e:81:e5:81:cf:5d:ef:2a:15:1c:f9:b3:7c:c4:2b:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:83:9D:FD:DF:0C:F3:C5:7A:38:38:1C:1C:98:98:F4:1B:38:09
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/C8ODnf3fDPPFejg4HByYmPQbOAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.172.0/22
85.143.208.0/20
Signature Algorithm: sha256WithRSAEncryption
28:61:46:b1:d9:f3:12:89:9b:94:b5:50:d3:5f:ea:16:55:6d:
63:65:c5:41:d2:5d:f5:90:f0:4f:21:d1:81:41:28:a2:d9:d7:
c3:de:03:01:9a:0f:f9:fb:a7:ab:32:c8:9b:24:d1:e1:b6:ee:
63:bf:e2:45:7a:39:64:30:4e:62:a6:51:8e:49:be:be:e2:8e:
ae:59:95:87:33:75:50:1a:7c:fa:bc:b4:ef:26:57:40:65:c8:
59:41:fe:1b:f5:0f:2f:2e:a4:ac:fa:fe:e3:94:4c:0c:bc:9c:
69:28:d5:f9:6d:cc:b8:13:f0:47:36:84:2a:6f:0e:20:66:32:
1a:33:0a:de:98:d7:b9:ef:ef:cd:4d:00:c2:be:7b:43:93:4c:
98:ff:4f:ca:62:d9:f8:d5:d9:6c:cd:31:10:1e:7d:fd:ad:48:
0b:0b:c7:f7:f1:b1:d2:7c:de:4f:b1:32:d6:b5:2a:84:fa:a6:
fc:59:31:c8:92:50:72:4a:f3:52:ad:d0:c9:c1:b2:d3:23:34:
bf:76:94:85:02:a4:47:10:7a:c1:2d:37:d3:a5:00:34:14:57:
e1:7e:18:e6:9a:29:b6:d5:ec:d8:f8:c7:c1:4c:5a:ff:f5:ab:
80:4b:a3:d7:04:27:dc:3a:29:cb:0a:32:02:32:cd:e2:3a:09:
88:06:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:16 2024 by rpki-client on console-ams.rpki-client.org