Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/H4ZOrP9F0MEuQqVg6AYmoOPLQDg.roa
File: H4ZOrP9F0MEuQqVg6AYmoOPLQDg.roa (raw, json)
Hash identifier: MozpigqtvqUhqbBs2/h6MWLEpVITWTGgcffP6LjH1ZY=
Subject key identifier: 1F:86:4E:AC:FF:45:D0:C1:2E:42:A5:60:E8:06:26:A0:E3:CB:40:38
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC794FAB2506AE1E5BCDCC26F95FB0E35
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/H4ZOrP9F0MEuQqVg6AYmoOPLQDg.roa
Signing time: Tue 02 Jan 2024 00:31:18 +0000
ROA not before: Tue 02 Jan 2024 00:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209043
IP address blocks: 85.208.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fa:b2:50:6a:e1:e5:bc:dc:c2:6f:95:fb:0e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f864eacff45d0c12e42a560e80626a0e3cb4038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:a8:a4:c7:92:6e:8f:f6:67:8a:a0:5d:19:
34:c9:d2:fc:94:69:c5:1a:36:e1:9a:45:d5:18:3c:
b3:72:00:9f:11:2d:95:a5:18:13:f5:e9:1e:83:65:
8c:71:c3:08:94:db:19:41:28:49:ce:62:b7:f7:ed:
6f:d5:fe:83:f5:01:8c:ce:4a:e9:d4:1f:96:19:78:
18:fa:d2:b7:a2:a7:42:56:03:8d:c7:65:d9:fc:73:
94:12:45:38:3c:45:0c:7b:d6:b3:65:9f:82:9e:32:
d5:22:03:d7:92:ba:ab:50:72:a8:1d:61:c1:84:35:
d0:8c:17:85:c5:1f:e4:86:7c:db:7a:59:42:9f:55:
6d:75:e4:ef:05:1d:de:3d:17:42:c9:6f:89:7c:1e:
6b:b3:73:f4:4d:bd:77:b1:09:90:66:c7:ba:f5:d4:
ff:4f:19:59:72:70:72:cc:93:c0:5f:10:1a:b5:83:
cd:f3:aa:75:1f:39:56:48:b7:e1:73:0f:91:ef:d2:
68:22:72:a8:a7:7c:45:ab:37:91:00:66:d3:31:f1:
a9:49:82:5e:89:a1:74:d4:5d:cf:2d:32:66:79:33:
c6:63:c7:ac:f4:04:c5:b3:93:84:4c:6b:78:39:55:
58:d7:5a:f2:47:91:d3:c4:0a:e0:2c:3a:f0:a7:fa:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:86:4E:AC:FF:45:D0:C1:2E:42:A5:60:E8:06:26:A0:E3:CB:40:38
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/H4ZOrP9F0MEuQqVg6AYmoOPLQDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a5:1a:5a:08:b3:82:0f:52:cb:5e:49:ff:bc:8b:8e:4a:55:
7c:02:f9:c2:95:c1:6b:85:13:da:17:ac:89:3f:ae:0e:b9:d2:
80:2e:50:f1:43:17:bf:be:5f:e8:c8:dc:3f:89:ca:d3:61:17:
cd:e4:05:0e:8f:57:44:db:c8:1a:69:33:ca:1a:da:70:e2:4c:
17:92:81:ca:80:68:0e:10:78:8b:ff:f5:56:a6:ff:ad:0c:e2:
b8:54:c8:21:58:8c:d8:32:0a:a0:28:53:0a:cc:ba:8c:e2:9d:
ec:05:d4:18:cb:52:3b:88:02:5d:24:28:e6:0d:8e:7d:62:0a:
92:08:60:2b:c6:f8:47:2e:55:c8:af:ac:df:83:b7:a0:10:4b:
fa:2a:4a:24:92:85:df:07:a4:3f:da:7b:a6:99:46:30:cc:5f:
41:ca:57:2f:65:1a:cc:fc:21:29:39:3e:b2:eb:0c:06:48:d3:
8a:ed:dc:14:4b:76:e7:df:14:dc:41:bb:21:8d:07:f3:c0:4a:
b1:b9:2e:bc:e5:9f:5a:c6:ff:b7:33:7d:eb:48:0f:91:eb:f9:
60:23:08:a9:8d:1b:05:fe:0e:a1:d6:13:e3:cb:66:c3:63:e0:
e4:c5:b5:74:cd:c4:36:83:cf:62:3c:e3:6d:22:f0:17:7f:58:
9b:4c:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:52 2024 by rpki-client on console-ams.rpki-client.org