Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/KS0FosybSu9dQsNF2YkZDAoge5o.roa
File: KS0FosybSu9dQsNF2YkZDAoge5o.roa (raw, json)
Hash identifier: 8BwyQnuY1ZRYLFPSXiCVjguaGQ2F+yhIsLoHXrCVOds=
Subject key identifier: 29:2D:05:A2:CC:9B:4A:EF:5D:42:C3:45:D9:89:19:0C:0A:20:7B:9A
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC7277C93D0A1CB048236E5DA3A28F015
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/KS0FosybSu9dQsNF2YkZDAoge5o.roa
Signing time: Mon 01 Jan 2024 22:31:42 +0000
ROA not before: Mon 01 Jan 2024 22:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202989
IP address blocks: 85.143.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:7c:93:d0:a1:cb:04:82:36:e5:da:3a:28:f0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=292d05a2cc9b4aef5d42c345d989190c0a207b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:2a:8d:85:de:5c:24:d8:b9:31:33:b7:fa:
fb:d8:5b:19:32:56:d1:cc:1b:73:ab:2b:c9:ad:e7:
09:16:14:10:57:83:0f:b5:e7:f4:73:4a:bb:5e:72:
10:14:1d:d7:99:ea:13:b0:a4:2b:59:ca:0c:17:c6:
b5:03:e2:67:52:b8:63:5d:29:22:5f:92:9a:4e:6a:
5d:17:0d:cc:21:5c:bc:a0:b0:01:bf:8a:98:59:75:
58:44:87:0b:11:53:65:91:f1:db:ed:03:88:7f:5a:
85:ea:41:fd:71:b7:71:2d:d7:02:23:5e:21:88:5b:
45:1d:ba:40:bd:7c:81:43:ee:47:e1:52:d1:ed:92:
ed:11:00:05:73:e7:ef:85:53:cf:3c:fb:38:60:b6:
c7:dc:1c:fa:ac:9f:e7:03:8d:12:3c:d2:8a:67:77:
88:aa:63:af:a5:12:b3:ae:8c:e7:e7:af:fc:57:c4:
25:52:13:ee:ce:22:36:78:9a:2c:ed:d5:f3:6f:2b:
cb:f3:61:c2:88:7b:e1:c6:09:0b:83:b7:d5:b2:15:
d1:16:4f:7a:40:de:ca:ef:65:e5:83:40:2a:74:e5:
01:8b:ca:2b:95:49:e5:14:bb:c3:55:6a:34:4a:38:
44:e5:7d:bf:81:08:01:90:41:ba:ac:1d:66:67:86:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:05:A2:CC:9B:4A:EF:5D:42:C3:45:D9:89:19:0C:0A:20:7B:9A
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/KS0FosybSu9dQsNF2YkZDAoge5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.248.0/24
Signature Algorithm: sha256WithRSAEncryption
61:35:c5:d2:49:eb:0b:41:2f:a6:52:91:c9:b8:cb:52:8c:50:
ce:7f:3a:b7:41:21:26:ef:82:61:2a:47:55:b9:96:08:ae:46:
28:d0:2f:ff:aa:13:77:00:df:1b:7a:9c:5e:c6:be:05:cc:ec:
f2:d0:f5:19:da:48:72:59:41:55:4b:ec:4e:c5:cd:b9:8d:78:
f9:8c:53:33:91:60:23:62:81:cb:b1:23:8d:17:b3:9d:af:2e:
11:f4:a0:cb:a0:20:9a:78:3f:1e:cd:67:a0:b8:f7:70:d7:d8:
3e:46:c1:11:98:f0:51:20:47:7b:91:53:f6:89:b8:8d:f6:d1:
55:c8:e2:34:a3:af:00:e1:5d:e8:85:46:4b:71:a9:d3:4e:87:
75:85:d9:c4:4d:b8:c8:d8:cc:92:0a:4a:e2:c5:0d:06:a3:02:
37:70:e5:e9:2b:13:9f:08:78:1f:1b:dc:78:9d:68:a9:ab:7e:
04:43:ef:4c:ef:70:94:8d:cc:60:89:d6:f6:68:c0:a1:35:23:
7c:cd:b6:50:1c:4e:8d:5b:43:8a:ab:a1:b3:71:25:fd:c4:fa:
a6:7d:79:dd:27:28:81:96:2f:2d:a7:25:2d:55:ef:f7:4e:f9:
c1:7a:9b:f7:f1:36:88:ed:c0:8a:9a:19:aa:78:72:01:15:07:
4b:89:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:27:48 2024 by rpki-client on console-fra.rpki-client.org