Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/bRXAhBvcPUvJCX7qdUqTFZFHFj8.roa
File: bRXAhBvcPUvJCX7qdUqTFZFHFj8.roa (raw, json)
Hash identifier: VmGWtFULEN8fSC5hsMHlw3+Up5FvQ1DatG9ZPrcOhCs=
Subject key identifier: 6D:15:C0:84:1B:DC:3D:4B:C9:09:7E:EA:75:4A:93:15:91:47:16:3F
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 018CC94E6AC93FAFDE049A84FE698EDB6614
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/bRXAhBvcPUvJCX7qdUqTFZFHFj8.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60912
IP address blocks: 85.239.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6a:c9:3f:af:de:04:9a:84:fe:69:8e:db:66:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d15c0841bdc3d4bc9097eea754a93159147163f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:f9:a6:60:22:52:22:20:8d:cc:28:8c:22:
53:99:46:42:c2:9b:7a:c0:63:1f:94:16:ee:b6:db:
fc:f4:25:3e:22:ae:21:74:9a:e9:4e:7d:bd:c6:83:
e3:38:4c:f7:a6:aa:da:eb:54:8f:ce:90:17:c0:d6:
13:5d:b3:a7:27:a4:46:20:4e:35:46:de:31:97:92:
6c:88:d6:3c:1d:24:3d:40:9e:6c:d8:12:e7:0d:7b:
04:32:37:f9:ff:f5:94:9f:c6:30:f2:ee:22:31:f6:
09:27:b5:78:3b:17:b3:1f:1e:bb:c0:5f:52:32:c6:
0e:d9:ab:7c:96:40:3f:ec:00:a5:01:7e:b1:38:f7:
55:6c:2f:d1:a3:a6:eb:49:e2:bb:0d:fd:cb:99:9b:
d7:c8:2f:87:c7:f5:b2:da:16:d7:1c:b2:f0:5d:12:
4f:07:9c:8b:77:5d:65:f4:a8:20:d5:50:9e:42:e7:
9a:3d:85:86:db:7b:06:fd:ae:de:ee:b6:8f:96:fb:
46:02:fd:a4:13:78:46:c8:7e:b5:78:b9:af:7a:d9:
88:9a:83:6d:2a:5d:1c:94:46:91:d2:87:b1:23:0b:
42:f8:5a:e5:21:66:0d:94:3c:d9:13:2c:9c:b0:3d:
cd:48:fc:f0:32:7b:9a:63:42:b1:f6:0e:db:9b:ad:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:15:C0:84:1B:DC:3D:4B:C9:09:7E:EA:75:4A:93:15:91:47:16:3F
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/bRXAhBvcPUvJCX7qdUqTFZFHFj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.44.0/22
Signature Algorithm: sha256WithRSAEncryption
46:24:1a:81:a3:c4:1b:3d:db:a2:97:79:63:1e:e4:04:3a:32:
75:85:b9:dd:6b:48:d4:21:06:40:ed:ae:9c:8c:8e:42:08:66:
25:de:03:9c:45:fe:c7:69:a0:fa:66:72:be:74:56:c1:73:2f:
fd:f4:60:03:c7:ee:ba:a0:5e:a2:81:9b:28:ce:65:bf:c3:a2:
87:c5:48:8a:d0:e9:d3:05:37:11:a3:a1:7f:23:5c:3e:95:13:
3a:6d:42:cc:62:66:df:c3:5e:0e:5c:44:73:19:d0:0a:e7:1c:
54:4c:dc:9d:cf:5e:ec:a8:75:49:e7:7d:4c:3d:5f:8f:ab:cc:
68:de:a7:36:4e:3a:fe:7a:5f:b3:6b:0e:0f:79:41:6d:82:40:
da:f3:42:f6:6e:96:c7:bd:d2:3f:57:9b:40:65:d9:70:c1:fb:
0d:df:13:7f:3e:c8:68:c6:7d:21:8d:fe:22:f2:a9:00:45:ea:
cd:a8:53:c8:b2:90:80:e0:23:9c:f8:c4:a2:3d:44:bc:38:4a:
3e:5f:47:65:7b:1b:9d:84:48:ed:c5:8e:56:e9:b2:e3:ad:0c:
da:a8:0d:1d:26:49:0b:b4:7b:4e:d3:d4:51:f8:2a:28:d7:3c:
1d:a5:04:ab:88:af:11:04:e0:3f:d6:a2:5c:5f:bb:75:66:36:
27:af:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:18:46 2024 by rpki-client on console-fra.rpki-client.org