Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0POLPyGh8X6gsCr_Wk8vU9kyTCc.roa
File: 0POLPyGh8X6gsCr_Wk8vU9kyTCc.roa (raw, json)
Hash identifier: meXkx0tk2+2Z74IpkYHsOxvZy1wu+eWD+9v6AvLyA50=
Subject key identifier: D0:F3:8B:3F:21:A1:F1:7E:A0:B0:2A:FF:5A:4F:2F:53:D9:32:4C:27
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018DC708EAECF79B34E6435B010E68C5F41E
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0POLPyGh8X6gsCr_Wk8vU9kyTCc.roa
Signing time: Tue 20 Feb 2024 15:01:06 +0000
ROA not before: Tue 20 Feb 2024 15:01:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 85.239.148.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
185.95.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:08:ea:ec:f7:9b:34:e6:43:5b:01:0e:68:c5:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 20 15:01:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f38b3f21a1f17ea0b02aff5a4f2f53d9324c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:83:62:8a:bd:65:05:b0:34:a3:15:bc:53:cf:
94:6a:a2:5e:16:c6:ab:a4:b6:bc:18:28:93:ae:3f:
72:14:ac:47:fa:43:71:5a:c3:57:c9:79:eb:60:df:
b6:19:01:1b:96:8c:91:e1:5a:e7:94:3c:50:78:0a:
96:1c:bc:bf:a1:0a:f8:c4:dc:67:23:b1:29:b0:a3:
2f:7a:65:a7:2c:9d:e7:50:cd:9a:1f:90:cb:cc:36:
71:b0:a0:80:07:8b:70:e0:e0:c7:ab:00:d9:06:f0:
82:5d:42:6e:16:26:7e:fd:4b:49:91:30:ad:1c:b0:
b0:34:d2:d3:49:69:38:8b:41:5c:e8:9e:dd:81:0f:
76:c7:33:3d:40:13:97:6b:f8:0f:83:f7:02:b3:20:
8e:93:d8:d8:03:07:21:b1:45:2d:70:ee:c2:85:b2:
ad:f2:51:de:44:e4:de:70:8a:d6:17:05:c5:f1:d1:
86:ea:f6:6a:6d:4d:a1:cf:f7:70:6a:ff:e1:79:20:
5b:e6:25:af:5e:87:7f:f7:5a:ce:9a:65:bf:ec:29:
4e:f8:54:6d:3b:84:bc:7b:24:e3:c6:e4:3c:70:b6:
ed:3d:cd:f0:95:cd:99:28:7f:bd:c2:af:9b:a9:86:
84:f6:b5:fc:6a:17:07:63:47:fe:37:e3:41:a9:6c:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F3:8B:3F:21:A1:F1:7E:A0:B0:2A:FF:5A:4F:2F:53:D9:32:4C:27
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/0POLPyGh8X6gsCr_Wk8vU9kyTCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/24
185.95.157.0-185.95.158.255
Signature Algorithm: sha256WithRSAEncryption
c3:a2:23:9a:95:2a:9b:f8:f1:4d:19:5c:ce:58:06:cc:6e:ca:
b1:d7:45:53:ab:e3:23:06:ce:c0:2d:7a:f7:5c:d8:db:4e:7c:
ac:9c:93:3f:d9:c2:b4:ce:37:68:3b:32:5d:88:74:37:bc:d3:
78:d1:18:63:a6:9c:2c:37:5b:7a:ab:cb:af:bb:cf:82:ce:cd:
bb:86:0b:16:65:19:f8:6c:d7:ae:e9:17:96:4e:cf:bc:5b:c2:
12:b5:49:f7:97:bc:4b:fd:f6:da:22:f6:f2:36:d8:e6:ab:dc:
23:2e:e9:3d:ed:f3:cc:53:ee:46:e3:fb:6d:7a:a3:90:09:9b:
0f:2b:5c:20:61:31:48:bd:7b:bf:fb:80:50:fc:d4:04:89:a4:
4a:98:0f:05:6f:03:29:b4:7d:29:d7:73:52:6c:e4:82:dc:1f:
82:35:34:3a:6d:76:1c:bf:b5:ff:00:b3:98:f3:29:43:4d:0e:
cc:43:e5:b7:04:b8:4e:c5:ea:dc:05:09:14:57:1b:f2:9c:87:
34:35:9a:6c:20:ae:97:52:06:58:53:5e:b6:53:57:82:b0:6a:
d3:4b:fd:92:bf:a3:fe:3b:fe:e0:53:d8:cf:2d:27:65:98:fa:
83:bf:42:7e:d6:32:d2:fb:89:d4:60:0d:ce:9b:c2:5f:6e:1c:
4f:22:51:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 8 07:50:40 2024 by rpki-client on console-ams.rpki-client.org