Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9kg3qSr33orCFOwLIGhTi0l8-9U.roa
File: 9kg3qSr33orCFOwLIGhTi0l8-9U.roa (raw, json)
Hash identifier: 9fHuWPTkIslLIH1LjjoadbCrIPJqFezFu63qd6jVweE=
Subject key identifier: F6:48:37:A9:2A:F7:DE:8A:C2:14:EC:0B:20:68:53:8B:49:7C:FB:D5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AE8EE82871EB9CFEDAD24C4FA787C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9kg3qSr33orCFOwLIGhTi0l8-9U.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 85.122.230.0/24 maxlen: 24
85.122.231.0/24 maxlen: 24
85.122.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e8:ee:82:87:1e:b9:cf:ed:ad:24:c4:fa:78:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f64837a92af7de8ac214ec0b2068538b497cfbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:68:b6:1f:fb:cc:89:57:1d:22:d6:e4:0f:
ac:13:f9:d5:60:f8:01:8b:c2:5c:45:89:ad:d1:a8:
36:92:07:cd:28:cf:2a:1e:8c:10:70:91:c9:e6:bc:
44:85:c3:6d:f2:51:4c:88:16:c6:d3:06:5e:f7:b8:
fc:64:ed:d3:e0:60:43:97:d9:94:48:20:42:d1:62:
2f:2d:fe:37:36:eb:f5:7b:74:f9:b1:6a:e4:df:22:
5f:f1:2f:82:03:f1:9c:d9:dc:bf:c9:b0:9c:e3:29:
9c:e4:35:dc:a7:6d:56:f8:60:e6:9a:5c:21:51:05:
79:b9:54:10:99:f4:0c:30:1c:99:9c:b9:3e:1d:bb:
be:42:46:a6:16:28:28:48:0c:5e:ee:53:0a:81:f3:
ee:31:28:c9:61:6e:7b:d9:a0:c2:7b:3a:bb:b9:0b:
e3:f4:8a:19:4a:23:06:ac:f2:57:5e:ff:0d:50:63:
84:04:1d:d6:a3:ee:a9:1a:cd:b6:75:10:51:11:82:
09:42:07:45:c3:38:ca:80:9a:6d:5f:75:fc:70:1d:
44:03:c6:49:d8:f0:bf:e1:fd:ea:d8:b5:03:c1:5a:
04:8e:e7:4e:6b:3a:55:38:e3:44:b7:a8:ad:c5:56:
ed:7a:e7:2a:9b:f7:05:21:ee:8a:42:11:1e:bd:9a:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:48:37:A9:2A:F7:DE:8A:C2:14:EC:0B:20:68:53:8B:49:7C:FB:D5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9kg3qSr33orCFOwLIGhTi0l8-9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.229.0-85.122.231.255
Signature Algorithm: sha256WithRSAEncryption
a4:f7:51:b5:97:a4:2f:a7:32:63:3d:f8:94:98:6c:d8:f1:7c:
62:35:9e:aa:82:3f:de:27:84:de:0f:ef:43:5e:c4:c1:c2:bb:
78:ea:95:91:20:95:df:a7:00:c7:8e:6c:66:94:e6:ad:56:a0:
b7:c5:1c:7d:e9:0b:e7:3e:93:87:db:d1:43:97:f2:33:44:05:
fc:bc:50:eb:ce:1c:e0:f8:b6:16:43:66:a4:d8:36:2f:64:51:
94:56:4e:0e:c9:69:2c:3a:4c:05:57:21:8d:55:10:ed:c4:62:
be:4c:b7:96:4b:48:44:8e:c9:97:f3:a7:44:07:bf:85:02:bb:
34:87:ee:a6:d4:3f:98:ff:c4:36:d3:cd:8e:bd:c3:48:25:3d:
28:6c:01:5d:9d:06:03:8f:8f:f7:9e:cd:30:f4:c4:f9:b5:85:
5b:76:11:18:b9:e7:86:9a:13:ee:38:db:fe:e9:e6:55:dd:c5:
40:77:b8:d2:f7:73:00:eb:dd:60:29:2d:bb:f3:ba:9a:ce:c4:
b2:3b:96:cd:e6:af:44:1c:50:80:75:e3:59:c6:17:43:9d:7b:
11:b8:e1:89:b0:f6:76:dd:ff:32:a8:b5:71:7b:49:94:f8:33:
9e:8b:a4:2c:ca:04:52:47:6c:7b:7f:76:d7:e4:fe:57:4e:02:
20:fb:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:32:41 2024 by rpki-client on console-ams.rpki-client.org