Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/0BW-zNdSuohM9rS5qlq1sjWd88k.roa
File: 0BW-zNdSuohM9rS5qlq1sjWd88k.roa (raw, json)
Hash identifier: H51wGc8uCK2r64T5266r9ecsD3aGm/WBFEskFok48GA=
Subject key identifier: D0:15:BE:CC:D7:52:BA:88:4C:F6:B4:B9:AA:5A:B5:B2:35:9D:F3:C9
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 018CC94CEAE9E3CF79C47E9D04283AFFFDFF
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/0BW-zNdSuohM9rS5qlq1sjWd88k.roa
Signing time: Tue 02 Jan 2024 08:31:50 +0000
ROA not before: Tue 02 Jan 2024 08:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35157
IP address blocks: 85.119.136.0/23 maxlen: 23
85.119.138.0/24 maxlen: 24
85.119.142.0/24 maxlen: 24
85.119.141.0/24 maxlen: 24
85.119.140.0/24 maxlen: 24
2a01:8d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ea:e9:e3:cf:79:c4:7e:9d:04:28:3a:ff:fd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Jan 2 08:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d015beccd752ba884cf6b4b9aa5ab5b2359df3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:56:4f:4e:9c:fa:4d:46:9b:ec:6d:a7:aa:
ba:d1:53:d6:f4:1e:46:07:39:d2:ff:50:b5:34:07:
d2:6c:48:7a:6e:3e:55:eb:ee:0b:dc:86:c0:21:40:
25:d4:36:60:36:53:87:a5:a3:42:45:ae:d0:57:b9:
54:5b:8c:fe:a6:5f:3a:23:81:b1:3f:3b:6c:12:a3:
d7:a4:9d:0b:db:03:a5:f9:9f:c6:2a:33:f4:51:60:
6d:ae:f8:38:3b:b8:18:86:35:7b:95:2c:af:66:66:
cc:95:8c:08:9c:eb:24:3d:39:e8:67:74:69:ed:b3:
2f:eb:fb:65:46:31:ec:4f:0d:9e:45:5a:12:b0:c8:
9e:24:d5:5e:5a:a1:bf:3c:3a:21:42:20:0f:06:96:
1a:0a:c6:cb:9b:a2:b4:d4:d6:2e:5c:be:fc:c0:63:
1f:ba:5f:3e:61:24:4f:ff:61:0f:b5:0e:d7:cc:76:
fa:e3:6b:31:f5:b7:08:dc:9a:ee:ec:b2:fc:b4:d1:
b0:80:84:2a:24:6a:a4:9a:08:c8:89:ff:57:fd:79:
31:32:8f:11:63:51:6c:84:52:6f:10:68:69:dd:0a:
8f:d6:7e:fa:fc:55:4d:00:df:be:c6:81:b2:36:31:
d9:5a:db:49:ed:fa:29:89:a8:8c:ac:d6:2a:d4:ee:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:15:BE:CC:D7:52:BA:88:4C:F6:B4:B9:AA:5A:B5:B2:35:9D:F3:C9
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/0BW-zNdSuohM9rS5qlq1sjWd88k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.136.0-85.119.138.255
85.119.140.0-85.119.142.255
IPv6:
2a01:8d80::/48
Signature Algorithm: sha256WithRSAEncryption
36:91:b5:19:4c:56:1e:3c:94:ae:e7:96:67:0d:3c:a5:0d:ff:
6b:65:60:94:0a:ea:9b:da:45:a7:7d:9e:9b:74:04:02:45:8d:
41:71:b9:63:d1:02:70:49:95:c5:b7:4d:98:d1:b0:2c:80:3f:
1e:a0:dd:1d:d3:76:54:f4:fc:bb:be:80:6a:6c:d1:e4:d0:7e:
0f:d2:44:82:83:1e:7d:b5:7b:39:72:be:75:23:1a:26:50:c2:
57:e9:55:b0:25:37:01:91:8b:71:46:47:c9:cd:cd:2b:c0:b5:
4a:5b:c8:78:ee:1c:17:6a:ac:08:2f:c2:99:69:0d:3a:85:5a:
8a:b5:5e:5f:4f:a0:8b:26:d2:f2:42:ec:6c:1f:0e:54:41:99:
6b:25:94:42:0a:13:4b:e2:db:f7:0a:3a:03:6e:84:07:75:2f:
2b:2d:aa:40:90:fc:7d:c7:34:cd:d7:cc:ea:51:a0:2f:56:47:
5c:34:67:ad:d5:6f:25:ef:85:61:72:c2:4a:c6:13:4d:37:67:
25:9e:ef:4d:a8:a7:44:3e:d4:7e:14:c5:47:e8:d3:e4:c0:88:
6c:4a:a9:b9:39:7d:e1:7d:18:40:a6:db:d1:68:f3:3d:bf:06:
f0:83:2e:17:bb:65:15:ad:44:77:b4:05:3d:bf:68:d5:22:02:
a5:cf:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:11:24 2024 by rpki-client on console-ams.rpki-client.org