Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/RTPJwaKgi1VNaqhVW9cz5hRqlh8.roa
File: RTPJwaKgi1VNaqhVW9cz5hRqlh8.roa (raw, json)
Hash identifier: MbjwZSqynkZowKY5b9Y3L5doI2Gl5T9Hn7wYmCwvias=
Subject key identifier: 45:33:C9:C1:A2:A0:8B:55:4D:6A:A8:55:5B:D7:33:E6:14:6A:96:1F
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018D789E3950FCF2E180C7B8FE221F1DB389
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/RTPJwaKgi1VNaqhVW9cz5hRqlh8.roa
Signing time: Mon 05 Feb 2024 09:34:11 +0000
ROA not before: Mon 05 Feb 2024 09:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 85.254.8.0/21 maxlen: 21
85.254.63.0/24 maxlen: 24
85.254.117.0/24 maxlen: 24
85.254.118.0/23 maxlen: 23
85.254.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:9e:39:50:fc:f2:e1:80:c7:b8:fe:22:1f:1d:b3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Feb 5 09:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4533c9c1a2a08b554d6aa8555bd733e6146a961f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:bb:ab:09:cb:dc:f0:27:bf:0f:b5:e3:5f:
1e:c8:10:6e:19:fb:e8:84:30:7c:53:ff:42:0f:1b:
ea:9d:a2:2f:83:03:d2:c9:7c:88:04:30:45:fb:b3:
c3:af:24:ba:eb:d5:b6:8e:65:65:02:98:6b:b5:bb:
f4:58:23:4f:43:4e:07:4c:73:16:72:d4:4f:6c:63:
5a:ae:07:51:37:b3:f8:a5:b9:0e:bb:be:20:df:b9:
0e:ef:8e:fd:7d:21:48:63:f2:81:04:2c:c4:3f:46:
ad:2b:15:4c:71:ec:ea:eb:a0:94:68:be:bc:08:46:
68:57:d5:97:ae:e1:9e:c4:8c:29:f1:83:7d:6a:88:
9b:3a:f7:3c:c4:d4:e7:6e:f7:dc:b7:5d:2e:b1:31:
ea:71:24:7e:b8:5c:33:c9:95:dd:32:0a:2a:86:1b:
6e:26:66:77:eb:f3:4c:38:4b:38:18:b4:b9:7c:3f:
0a:40:01:c0:e1:98:c9:57:ac:a9:3f:64:6b:47:fd:
90:73:af:37:fb:df:5e:3d:88:d5:89:10:aa:56:cc:
4d:f9:8b:cd:43:d0:79:be:c3:bd:1d:d8:b4:0e:a1:
44:70:6f:ef:bd:d1:e4:08:37:98:01:2b:ca:12:6c:
27:c4:dd:0c:bf:ce:76:63:1f:c9:1f:45:e8:96:aa:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:C9:C1:A2:A0:8B:55:4D:6A:A8:55:5B:D7:33:E6:14:6A:96:1F
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/RTPJwaKgi1VNaqhVW9cz5hRqlh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.8.0/21
85.254.63.0/24
85.254.117.0-85.254.119.255
85.254.123.0/24
Signature Algorithm: sha256WithRSAEncryption
97:bf:45:7f:d7:43:30:fe:cf:f2:34:03:47:87:7f:04:5f:f3:
ba:49:af:c6:43:a1:b6:d3:d2:32:77:17:ea:4f:e6:fe:68:ec:
84:0d:9c:19:13:6d:ab:2a:9c:9f:c6:39:18:da:56:ce:59:f4:
86:0a:bd:14:3f:c5:bb:8c:ba:63:7f:89:b3:2e:e7:cd:b1:7b:
d4:13:a5:f6:36:b2:68:8b:d1:9b:c2:df:79:66:3e:a7:6b:8e:
37:f4:6d:8e:a1:4f:db:ad:db:4b:c1:f4:6a:ed:fd:89:f8:fc:
d1:33:81:9f:9b:11:fa:f6:74:b6:e8:53:a8:3e:97:fc:c2:c6:
29:0b:bd:e1:8b:85:9e:17:24:5e:bc:7b:71:de:73:fa:c8:07:
9f:34:9a:bf:93:7a:77:20:0b:24:db:f1:85:af:ea:68:fb:93:
61:c9:4b:07:8e:14:25:ec:d0:01:7a:47:1c:fa:0b:1d:81:bc:
76:8a:8e:65:70:e6:a4:24:3d:80:71:ae:8b:20:43:fb:c8:d0:
64:c7:56:4b:11:e9:19:c8:8f:38:7f:98:10:dc:1a:5b:62:81:
d7:42:bb:47:fd:e0:b6:fe:e0:37:59:9c:08:a8:9a:7d:1d:7b:
26:52:96:cb:0d:2f:8d:1e:a3:ad:09:a3:8f:97:4a:8e:74:82:
d7:7d:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:33:05 2024 by rpki-client on console-fra.rpki-client.org