Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/p06i0La7cqcu57vOBbdjswK08Rk.roa
File: p06i0La7cqcu57vOBbdjswK08Rk.roa (raw, json)
Hash identifier: ihemQCValfrhIjCTAHxxeLK0FMyQ77/Y6cQwrdSowx4=
Subject key identifier: A7:4E:A2:D0:B6:BB:72:A7:2E:E7:BB:CE:05:B7:63:B3:02:B4:F1:19
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 018CC94E6C1BFFB008F7734C8B95C17A054C
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/p06i0La7cqcu57vOBbdjswK08Rk.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197648
IP address blocks: 85.239.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6c:1b:ff:b0:08:f7:73:4c:8b:95:c1:7a:05:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a74ea2d0b6bb72a72ee7bbce05b763b302b4f119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:c9:42:6e:9e:6a:4a:5e:b0:9e:f6:37:2b:
3b:51:11:2a:9e:b7:6f:76:36:7c:db:34:26:30:c1:
8e:f7:02:f4:e7:be:94:29:82:ef:17:59:34:f3:4c:
2a:13:9d:e0:4f:7f:bc:56:5f:2e:fd:1b:1f:ec:0c:
a2:56:b8:8d:97:7b:1f:7f:7c:b9:f1:98:4b:9d:c5:
52:ab:7c:f1:d7:4a:02:55:57:87:38:5d:db:9e:be:
25:37:43:b0:22:e1:e0:6c:2d:dc:b2:43:ce:2e:1b:
ca:4b:ba:78:81:a8:16:30:d5:1c:af:04:57:41:f7:
49:d4:fc:11:34:08:2d:58:f3:c7:41:cd:55:66:1b:
65:0c:2d:5c:d1:bc:13:b0:41:27:1c:90:29:11:ec:
92:df:b5:d0:c1:06:80:27:42:ba:43:b3:86:b8:3b:
c9:03:ca:93:bd:9f:a4:a5:80:1d:9a:27:80:59:ef:
1b:1a:a4:81:d6:20:a2:32:e9:ff:50:8a:98:3a:78:
27:bd:9f:81:64:ca:49:ea:16:27:e9:68:b3:83:0e:
7e:48:04:70:5a:88:dd:4f:ff:f3:48:46:96:01:b8:
fa:8a:4e:8a:72:a2:0e:46:5e:44:59:8f:a2:b1:40:
24:eb:72:66:33:8c:8b:4b:56:40:38:44:d2:49:97:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4E:A2:D0:B6:BB:72:A7:2E:E7:BB:CE:05:B7:63:B3:02:B4:F1:19
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/p06i0La7cqcu57vOBbdjswK08Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.40.0/23
Signature Algorithm: sha256WithRSAEncryption
26:f3:d3:57:9d:25:c5:91:67:86:cb:af:a7:e5:fc:1e:c4:fb:
93:ec:78:e8:68:d2:51:e5:f1:76:c8:14:82:e2:34:c2:fe:81:
cc:48:08:4b:27:f4:b0:fb:77:b0:b5:7d:4d:a1:91:88:a6:22:
fa:c5:d3:8b:8e:66:62:33:f5:62:06:3d:84:2e:cb:4e:3d:35:
5a:16:65:4f:4b:9c:b9:db:b3:72:9e:35:87:90:00:53:18:f9:
94:71:72:cc:2a:cf:a2:5e:86:2b:7d:db:7b:85:4c:84:9d:4b:
39:a9:1e:4d:fe:70:06:89:e8:10:0b:bd:20:ed:71:0d:41:02:
5e:aa:d2:73:92:ae:35:e1:73:23:d5:c8:59:c5:17:13:5b:4d:
a2:ae:b3:e1:42:a4:fc:c7:73:01:7d:68:65:eb:82:20:19:c6:
bc:6c:d8:75:b0:d4:8e:b6:1b:a5:bb:b3:46:03:c4:3e:7b:1d:
6a:a1:5a:46:95:af:3f:a4:ea:bd:92:72:41:cc:7e:2d:45:4a:
48:e8:67:00:04:f5:08:86:13:bb:0c:5f:8d:dc:89:7f:77:b0:
32:a7:d3:f3:c7:6f:07:7f:25:ae:9b:b5:5b:ef:f7:07:42:53:
23:61:6a:32:47:ab:c0:fa:a7:40:e5:4c:01:4d:ea:d7:b6:87:
fe:a3:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:15 2024 by rpki-client on console-fra.rpki-client.org