Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/NRs8iCIRH6dHVMP4w1MoS-VvXVQ.roa
File: NRs8iCIRH6dHVMP4w1MoS-VvXVQ.roa (raw, json)
Hash identifier: DQKW/1N1iEoCbKOMvAhoLP3ABhcnw8MfepwOrBC1fFw=
Subject key identifier: 35:1B:3C:88:22:11:1F:A7:47:54:C3:F8:C3:53:28:4B:E5:6F:5D:54
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 0192F1195222E86743AFEE004409C87955F2
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/NRs8iCIRH6dHVMP4w1MoS-VvXVQ.roa
Signing time: Sun 03 Nov 2024 08:17:01 +0000
ROA not before: Sun 03 Nov 2024 08:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35019
IP address blocks: 85.158.128.0/21 maxlen: 21
85.158.128.0/24 maxlen: 24
85.158.129.0/24 maxlen: 24
85.158.130.0/24 maxlen: 24
85.158.131.0/24 maxlen: 24
85.158.132.0/24 maxlen: 24
85.158.133.0/24 maxlen: 24
85.158.134.0/24 maxlen: 24
85.158.135.0/24 maxlen: 24
185.156.236.0/22 maxlen: 22
185.156.236.0/24 maxlen: 24
185.156.237.0/24 maxlen: 24
185.156.238.0/24 maxlen: 24
185.156.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:19:52:22:e8:67:43:af:ee:00:44:09:c8:79:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Nov 3 08:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=351b3c8822111fa74754c3f8c353284be56f5d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:29:c4:e2:3b:1c:61:44:f1:9d:7b:f7:38:
f3:9e:85:08:0c:4b:42:5d:0a:90:0a:0e:a1:bb:75:
49:91:cb:ee:5c:ee:0f:fb:28:05:fb:af:dd:3e:f8:
77:ac:7d:f2:26:f0:b8:25:4b:08:16:33:7c:be:71:
42:31:08:76:33:75:37:4d:ba:63:8f:af:61:ed:b6:
d9:7e:61:20:e9:39:80:0a:66:53:34:77:39:28:47:
f7:3c:ce:58:5a:6c:97:cf:32:1e:38:8a:f1:44:0b:
bc:34:e1:a0:a6:4f:68:e1:f4:03:5d:44:a4:6d:cb:
22:b4:dd:cb:e6:86:d5:86:6f:18:cd:7f:7a:ed:1a:
19:68:f1:d9:80:66:c7:6f:a5:2e:97:8a:3a:f4:a8:
2e:e4:fe:ba:e1:22:81:ce:3a:d4:62:48:3f:df:37:
28:f0:3f:a3:bc:fc:a3:16:7e:d6:5b:16:8e:43:5e:
d8:5b:66:57:5a:22:13:02:80:05:b0:76:4b:32:50:
24:51:2f:f3:0c:7c:0c:f5:04:e2:d7:ed:24:e1:70:
97:4e:e5:bc:df:b3:83:5e:1b:0c:86:5b:54:50:b8:
08:b0:e6:71:7a:8f:14:c0:78:bf:fe:a0:45:44:f3:
5f:35:10:df:51:a5:93:2b:75:8a:c3:1e:2a:f9:a4:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:3C:88:22:11:1F:A7:47:54:C3:F8:C3:53:28:4B:E5:6F:5D:54
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/NRs8iCIRH6dHVMP4w1MoS-VvXVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.128.0/21
185.156.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:96:47:10:2f:89:b9:d9:f0:60:d8:2c:3d:13:09:a2:8e:28:
d4:c7:e1:97:62:e9:6b:2a:27:ac:8d:3c:be:6a:c5:d0:97:d0:
c4:c6:22:64:22:ab:6f:49:12:98:4f:bd:09:41:87:91:3b:ff:
19:e9:ad:14:af:16:dc:da:46:25:53:b4:62:2f:3f:35:a6:f7:
50:f9:47:3b:68:9c:68:f5:76:e2:e3:c7:14:51:c0:80:18:2b:
75:e4:c1:49:09:4f:79:68:3e:5b:01:48:56:ba:1a:0c:be:c4:
44:11:0d:d8:30:4b:91:fa:1a:a3:3e:1b:5b:cc:04:18:02:ab:
32:a4:6c:19:42:47:dc:2b:b9:9e:2b:0c:e4:8e:f6:15:fb:b0:
06:47:20:23:36:c3:a3:2d:5b:ef:2f:62:e9:17:0a:9b:3d:a6:
07:8a:1a:ce:d1:ca:e6:da:19:09:b9:40:4b:3c:cf:ba:d8:2a:
c1:ed:36:20:b2:79:9a:13:c5:cf:54:d4:fe:09:df:4c:24:68:
2a:4a:fa:24:18:7e:e4:a0:f7:4f:28:62:80:9d:c3:70:8e:b4:
09:3d:6d:23:4d:36:56:bb:37:d7:ab:d1:f2:df:4b:ea:2b:2d:
a9:dc:ca:95:d3:89:73:b2:b5:46:3f:ff:4a:03:e8:38:a8:1d:
14:95:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:22 2024 by rpki-client on console-fra.rpki-client.org