Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bzp7pnmnD-Viwdl1kHlc71NhLC4.roa
File: bzp7pnmnD-Viwdl1kHlc71NhLC4.roa (raw, json)
Hash identifier: hmpqCja/fc65ochO+qOEJOQilwJ6xeVjjI/zONUvd5o=
Subject key identifier: 6F:3A:7B:A6:79:A7:0F:E5:62:C1:D9:75:90:79:5C:EF:53:61:2C:2E
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018ED7E055019935645858C076D68D2DAD14
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bzp7pnmnD-Viwdl1kHlc71NhLC4.roa
Signing time: Sat 13 Apr 2024 14:33:06 +0000
ROA not before: Sat 13 Apr 2024 14:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12770
IP address blocks: 85.142.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d7:e0:55:01:99:35:64:58:58:c0:76:d6:8d:2d:ad:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 13 14:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f3a7ba679a70fe562c1d97590795cef53612c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:4f:90:92:cf:bd:12:a5:c1:0d:7f:01:1a:
d3:c8:d4:b8:b8:2d:4d:00:c0:7f:85:0e:fd:e8:c8:
7d:32:48:6b:5b:13:a9:2f:0b:de:c8:37:59:0d:a4:
c5:74:d5:16:14:f7:1c:bc:68:25:cd:cb:22:69:c9:
40:5a:ca:4b:23:1a:b9:fe:2f:d3:a1:81:23:37:25:
54:0d:d4:aa:d5:20:b7:87:0b:d7:54:f2:a7:40:64:
23:44:0e:be:0d:0e:78:fe:f5:b2:4d:2e:b5:74:72:
dc:54:c5:02:20:dd:ac:b1:e7:3f:e3:ab:3d:4b:3e:
8d:48:72:27:ba:3d:79:59:d9:04:02:97:20:6f:2b:
44:8c:65:26:f9:43:33:cd:4e:e8:0b:b8:9a:93:48:
e8:fe:df:f4:80:54:60:93:97:a3:ee:f5:42:61:a9:
b2:77:c2:03:e2:11:cb:d0:b0:a2:8f:63:46:7f:23:
fc:7b:58:4d:5a:a0:8f:bc:32:e8:a7:2c:49:bf:e0:
43:ea:35:0e:a1:a4:4a:71:63:32:2e:4f:d3:98:75:
47:a8:4d:f0:43:bb:45:0b:a9:71:cf:e7:a2:60:de:
bb:de:b9:8a:73:ac:19:90:aa:30:e1:6e:cf:92:9e:
15:66:2d:bf:bc:30:3f:b6:1a:91:bb:2a:99:b1:43:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:7B:A6:79:A7:0F:E5:62:C1:D9:75:90:79:5C:EF:53:61:2C:2E
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bzp7pnmnD-Viwdl1kHlc71NhLC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.68.0/22
Signature Algorithm: sha256WithRSAEncryption
75:fb:9f:16:75:62:77:64:55:3d:56:cc:15:b5:fb:ec:b2:8a:
40:dd:14:28:fd:18:6a:96:b7:5a:91:ed:36:a6:68:62:6d:66:
53:ca:56:3b:61:d1:9f:8c:52:75:de:39:80:01:79:9c:70:86:
b8:98:c9:20:7b:a7:f7:7f:f9:81:d4:31:bb:c4:7c:b0:b6:eb:
54:9f:f9:12:fd:28:ee:12:d1:a9:05:3f:2a:33:a1:16:23:7f:
50:60:28:c0:7b:bb:de:50:ee:c2:8d:57:47:ea:c5:49:c3:be:
a9:ab:50:31:d2:75:05:b8:af:1b:80:a7:0d:e8:be:c1:06:ea:
d8:51:85:61:08:95:63:a3:bf:5a:57:bb:ad:34:5d:86:a5:d1:
91:5c:0c:75:0f:7c:c9:ed:b7:46:2e:72:9d:14:a3:e8:1f:f2:
85:b4:89:3a:12:37:f8:fb:cf:c2:69:26:4c:c1:9d:c9:f6:48:
d7:42:2b:24:ca:0e:1b:02:42:5b:1f:24:77:93:50:9d:c1:54:
9a:fc:33:d8:18:94:fc:57:83:d6:51:c2:63:a6:06:22:df:41:
c4:c4:37:a8:65:be:5d:00:cc:4f:f6:ba:fc:6f:40:2c:5c:29:
b0:9a:02:be:4e:23:8e:e1:41:02:2a:6c:50:48:f2:a9:72:c1:
97:dc:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:16 2024 by rpki-client on console-ams.rpki-client.org