Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fjOByeK6ZVJiD55hZl7diMkuBDE.roa
File: fjOByeK6ZVJiD55hZl7diMkuBDE.roa (raw, json)
Hash identifier: ps2E8MmF19ZPAvpuQ0USjQWvxC2kmcH4iKKYta+E6EA=
Subject key identifier: 7E:33:81:C9:E2:BA:65:52:62:0F:9E:61:66:5E:DD:88:C9:2E:04:31
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC8012B2620184061AC18963423261E97
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fjOByeK6ZVJiD55hZl7diMkuBDE.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43615
IP address blocks: 85.254.44.0/24 maxlen: 24
85.254.86.0/23 maxlen: 23
2a02:610:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2b:26:20:18:40:61:ac:18:96:34:23:26:1e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e3381c9e2ba6552620f9e61665edd88c92e0431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:cc:9e:a8:d8:a9:0e:24:77:bb:d7:fa:1a:
4d:96:b0:38:71:18:d3:9c:38:f5:87:6e:66:d9:63:
cb:e4:2d:8a:2f:e8:c9:cf:51:59:65:62:82:32:82:
ed:64:5a:f9:c9:70:34:cb:87:55:29:30:d6:95:df:
aa:4c:15:fa:54:41:df:3c:03:f2:24:f7:e8:1c:9c:
40:b0:33:05:44:0d:4c:fa:d9:ae:27:68:86:76:90:
b1:3d:7b:72:29:d3:e0:1d:ae:1e:b2:12:f2:5f:83:
bc:d8:73:3a:17:86:b1:f7:7b:e3:76:bd:2f:04:ed:
2c:cb:b6:c7:5b:2a:dc:a5:b6:58:51:12:a9:d8:1a:
52:ee:17:c3:2b:7b:cb:f7:c8:20:4b:a8:ef:64:cb:
fb:15:4a:25:6d:46:28:36:bb:f7:d2:d4:a4:26:b8:
ef:09:36:44:0a:47:1f:f4:d0:4d:25:f9:c9:5f:89:
56:b9:e0:a9:99:87:e1:24:57:7d:35:2b:0e:0b:31:
61:6b:3e:d6:a2:3d:c9:b8:2a:7f:f6:d4:d2:a9:21:
7d:f9:a0:42:c8:95:f6:f9:2a:6f:25:69:e3:9e:d0:
77:35:7b:db:50:48:62:e9:47:04:30:15:65:77:ed:
41:12:12:61:52:e1:3f:ce:46:f4:78:6e:10:20:1f:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:81:C9:E2:BA:65:52:62:0F:9E:61:66:5E:DD:88:C9:2E:04:31
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fjOByeK6ZVJiD55hZl7diMkuBDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.44.0/24
85.254.86.0/23
IPv6:
2a02:610:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
b5:05:20:8e:f8:c3:f8:43:25:8b:2e:31:b6:82:4c:a7:a9:eb:
64:b6:4a:0a:ae:c3:e2:c5:4d:23:19:37:27:a6:70:4d:21:3f:
48:99:cc:24:fa:38:e8:b6:8e:90:34:8a:f2:f8:18:0f:72:2e:
09:b0:85:79:94:53:47:2f:8e:1d:5b:c0:e8:5a:9f:b4:7e:69:
bf:b2:9e:1c:de:85:fb:10:0d:5a:83:36:66:57:6e:be:34:f9:
87:0b:a2:e4:49:d0:ff:af:ce:b5:bc:7f:44:c7:9f:90:91:00:
73:8b:ee:8c:fc:db:fa:0c:16:1e:bd:a8:cd:cb:f1:62:2b:d9:
0f:fe:60:fe:e6:04:cf:20:2b:3d:a7:89:10:6a:b3:88:f4:f9:
01:fd:1e:56:65:d5:35:da:70:fd:7e:8c:5b:fd:35:9e:9c:8c:
50:36:83:c7:8a:1b:20:8f:55:bc:06:15:f3:ce:d9:33:45:a4:
48:f6:c5:0f:41:c7:03:f9:40:a5:c6:26:aa:3d:69:66:6a:82:
7c:26:2c:1d:5a:d6:3b:22:46:6c:ef:87:07:fe:ab:14:a9:ed:
c9:30:e4:a7:21:ad:f0:2b:62:ba:11:28:c5:31:ce:ce:2c:d3:
2e:bc:58:b7:3f:16:0d:97:53:1f:38:b3:39:0a:74:9f:f9:1e:
81:ff:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:30:18 2024 by rpki-client on console-ams.rpki-client.org