Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/8Bbbk7mqUKOyDjctWtQInxT3q7U.roa
File: 8Bbbk7mqUKOyDjctWtQInxT3q7U.roa (raw, json)
Hash identifier: WbfOR2Vs5NXGSNVHfSzVC1SkI421MCGjTdhhSeytoJY=
Subject key identifier: F0:16:DB:93:B9:AA:50:A3:B2:0E:37:2D:5A:D4:08:9F:14:F7:AB:B5
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 018CC79493F11BA39C998BCD7A8AF44C3F3B
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/8Bbbk7mqUKOyDjctWtQInxT3q7U.roa
Signing time: Tue 02 Jan 2024 00:30:52 +0000
ROA not before: Tue 02 Jan 2024 00:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39120
IP address blocks: 185.112.60.0/24 maxlen: 24
185.112.62.0/24 maxlen: 24
185.112.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:93:f1:1b:a3:9c:99:8b:cd:7a:8a:f4:4c:3f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Jan 2 00:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f016db93b9aa50a3b20e372d5ad4089f14f7abb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:0c:aa:1c:1e:2c:76:5b:ad:0c:4c:d3:76:
5e:e9:25:d8:a2:62:b7:61:d2:03:8f:86:cb:35:65:
c2:21:2e:01:44:1a:9c:6f:90:da:ae:63:c8:39:83:
72:d7:22:f3:e2:9d:f2:14:12:a9:25:6f:e4:67:57:
7e:2c:f3:ca:54:9f:2c:07:12:dc:b4:8f:2f:88:ff:
07:fb:bf:53:c7:5b:81:00:0c:4c:36:d4:97:35:40:
b7:25:47:74:d0:2e:80:c7:22:84:f0:21:e0:68:e0:
5b:d9:5b:4b:d8:74:67:fd:ca:39:09:28:e5:aa:c3:
f6:05:1c:8a:90:90:ea:17:b6:6b:ec:bf:05:6c:b1:
f7:96:6a:dd:48:7a:fc:7c:fb:50:fb:98:04:5c:6d:
cc:c2:f6:90:66:c4:70:3e:d6:4b:a4:2b:96:c7:ce:
d5:fa:58:16:74:c8:9b:8f:7a:73:fa:21:cf:3b:23:
cb:9f:a2:20:aa:a8:d6:58:4b:d8:51:8a:7c:75:43:
46:15:26:ce:fb:44:32:f9:40:67:4e:f7:f2:ea:3f:
5e:bb:b2:ae:c1:07:50:e5:1e:33:98:5c:f3:18:3d:
e1:91:02:e9:e4:14:c9:79:10:bb:53:66:41:33:6e:
94:0a:04:7e:00:f7:b0:34:1f:0b:c9:08:9f:b5:95:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:DB:93:B9:AA:50:A3:B2:0E:37:2D:5A:D4:08:9F:14:F7:AB:B5
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/8Bbbk7mqUKOyDjctWtQInxT3q7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.60.0-185.112.62.255
Signature Algorithm: sha256WithRSAEncryption
a5:22:f4:23:bf:da:b7:88:d9:7b:f9:ae:0a:cb:7b:cd:04:d2:
cf:80:fe:e8:75:f3:26:ed:1b:53:30:08:71:79:d1:cd:ea:d8:
84:e0:53:4a:bc:d8:80:03:84:61:32:71:66:d3:10:d3:5a:e3:
b5:f0:97:a8:8a:73:ca:d9:65:8f:68:ed:50:32:88:79:94:8d:
88:eb:9e:e0:4c:d5:37:2c:e9:0d:ad:f5:78:84:1e:23:2e:32:
0f:6f:bb:28:3f:d6:61:45:91:7c:7b:dd:1c:36:75:f0:6a:0d:
a6:bf:85:28:2d:3f:0d:e3:53:04:c8:ce:be:8c:f4:88:40:71:
06:b3:be:7a:a8:80:1a:b3:f3:42:e5:5a:83:33:81:b8:53:fb:
99:08:d7:53:e9:0f:48:95:68:dc:02:e0:80:3c:19:2c:ca:79:
89:77:aa:0d:a3:db:22:51:d3:b3:87:a0:bb:f6:9c:62:e8:8f:
35:c1:e6:82:af:88:c6:d2:93:21:fc:20:74:f6:1b:7a:ab:55:
60:22:ce:d0:1c:ad:e9:13:11:a3:40:65:b5:7d:2b:ec:e1:99:
94:3b:38:4f:e6:7b:f6:c0:05:28:5f:85:9f:e0:1b:dc:0e:53:
f9:d1:1d:b7:99:7b:f7:96:c9:7e:7a:fe:e0:9c:03:95:ae:e0:
79:37:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:06:30 2024 by rpki-client on console-fra.rpki-client.org