Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3ejCbZRy1Be6abnfwzSmKVpvgwo.roa
File: 3ejCbZRy1Be6abnfwzSmKVpvgwo.roa (raw, json)
Hash identifier: koVU6uonqtRuYUiYC9a+y8Vebcq+WJhNoZ8Iqvx3Jcc=
Subject key identifier: DD:E8:C2:6D:94:72:D4:17:BA:69:B9:DF:C3:34:A6:29:5A:6F:83:0A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AE3657E1403766B9CB0E56AFB93DB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3ejCbZRy1Be6abnfwzSmKVpvgwo.roa
Signing time: Mon 01 Jan 2024 18:30:45 +0000
ROA not before: Mon 01 Jan 2024 18:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39081
IP address blocks: 85.120.55.0/24 maxlen: 24
85.120.56.0/24 maxlen: 24
85.120.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e3:65:7e:14:03:76:6b:9c:b0:e5:6a:fb:93:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dde8c26d9472d417ba69b9dfc334a6295a6f830a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:20:e9:80:b3:56:ba:82:53:d2:62:54:0e:08:
5c:7f:b8:89:f5:cf:c0:a8:ee:fe:c4:f6:84:87:a5:
40:c2:22:c7:53:2d:cd:f6:b4:a2:32:b0:67:79:85:
9c:28:ee:4c:aa:12:c4:65:bc:11:cd:5e:c8:18:71:
c0:a5:d0:ac:b8:f8:d6:9f:ea:5d:56:4c:3f:e0:bf:
db:39:38:b9:0a:20:d4:35:ef:4a:2a:10:47:7f:cd:
24:33:fa:9a:98:2f:50:f9:28:31:d8:14:7e:21:41:
fb:2a:34:8a:15:61:47:73:ee:0a:5a:9a:d5:10:84:
62:03:9c:7e:ab:71:8a:9f:53:eb:1f:10:b6:33:88:
77:eb:8c:8c:bc:c6:f4:fc:6b:39:11:45:4c:16:da:
aa:64:32:d4:e3:ca:f9:b9:09:25:f2:36:86:82:f2:
09:28:43:bd:a2:fa:98:5a:3b:8f:7e:e6:c9:de:18:
4a:59:f6:45:16:9c:a0:cd:a0:d1:46:73:bf:e3:36:
d0:f0:77:f9:9a:44:95:a7:d5:2d:f0:5b:5b:a7:fb:
17:0c:ca:cf:77:46:26:f8:68:5d:51:94:e5:61:3c:
13:e1:b9:40:98:e1:58:cc:0f:ea:03:e9:d3:29:2b:
8c:6a:e8:7c:58:ef:2e:6d:3a:2a:b0:d4:90:c4:7e:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E8:C2:6D:94:72:D4:17:BA:69:B9:DF:C3:34:A6:29:5A:6F:83:0A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3ejCbZRy1Be6abnfwzSmKVpvgwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.48.0/24
85.120.55.0-85.120.56.255
Signature Algorithm: sha256WithRSAEncryption
5f:15:df:5f:ab:f8:3a:17:44:a5:34:f5:f6:90:e9:1f:56:01:
4a:49:16:91:15:d8:ef:87:39:bb:22:81:a5:1e:26:69:5e:e3:
f7:12:12:30:cd:67:e7:e0:8a:1b:2f:b5:5e:bc:fe:4b:a5:31:
4f:ec:4c:ca:25:33:31:68:0b:f8:5c:cc:58:f5:46:47:2e:a1:
84:3c:a0:a8:dd:dc:c5:9f:7f:21:66:58:03:0a:21:89:df:61:
a8:ca:80:6a:7f:d2:3b:d0:f7:f8:f5:5c:ce:f5:56:af:ea:f2:
22:a1:20:d8:28:20:da:39:11:a3:37:ed:19:fd:ce:18:7b:4f:
a6:0c:8b:1d:5c:c3:7c:71:6b:b7:77:14:0d:75:4b:bb:0f:f3:
74:95:e6:2c:21:d7:6e:52:01:1b:15:57:6c:05:2d:b2:cc:82:
61:0a:6c:ea:a3:e8:21:9a:65:40:7a:89:f4:af:6f:09:8f:34:
05:f9:0c:33:2e:8e:ff:e5:4d:9d:06:b9:47:5f:2c:da:95:15:
7e:4b:90:74:18:10:e9:28:6e:63:6f:27:89:5c:29:22:b7:0c:
bf:7a:1b:f8:df:3f:07:72:33:a3:84:96:dc:41:55:7f:db:69:
85:99:89:19:6a:b1:9f:e0:4e:f6:06:ae:92:0c:90:a4:5b:51:
03:4f:f2:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:15 2024 by rpki-client on console-fra.rpki-client.org