Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Jy62BBkhhu9MnJ99mUFYElw4_aY.roa
File: Jy62BBkhhu9MnJ99mUFYElw4_aY.roa (raw, json)
Hash identifier: SDcHC10SqYG7EHrUs+jP/NxWbeLInVPzzwKfjHblp6E=
Subject key identifier: 27:2E:B6:04:19:21:86:EF:4C:9C:9F:7D:99:41:58:12:5C:38:FD:A6
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018CC6B8184569367CDC1B1BF3191E29E5D8
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Jy62BBkhhu9MnJ99mUFYElw4_aY.roa
Signing time: Mon 01 Jan 2024 20:30:02 +0000
ROA not before: Mon 01 Jan 2024 20:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48124
IP address blocks: 85.140.112.0/22 maxlen: 22
85.140.112.0/23 maxlen: 23
85.140.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:18:45:69:36:7c:dc:1b:1b:f3:19:1e:29:e5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 20:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=272eb604192186ef4c9c9f7d994158125c38fda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:7c:c6:50:79:cb:0e:c2:47:e4:21:dc:fa:
99:a3:73:75:ae:0b:71:46:92:b2:bf:99:be:5e:a7:
cf:79:d4:21:e7:b0:db:38:ba:5f:5a:82:0d:c2:c6:
24:48:3b:ee:93:83:8b:64:e8:9b:49:30:3e:6f:5e:
7e:d2:12:37:bb:67:29:b5:cf:9c:e0:33:b2:42:f2:
ee:34:48:d1:5c:7c:da:36:4a:5b:c1:3d:19:98:0d:
d2:84:bf:4a:35:e7:e9:2f:c6:d7:f7:f1:fd:97:48:
eb:7d:d1:d8:83:74:ba:0f:42:0f:36:f9:f4:ab:d3:
f4:0b:9a:87:4b:12:ca:2c:c8:96:b0:f8:88:f9:94:
bd:35:8b:71:a6:0c:83:17:78:2a:2e:c5:05:17:85:
ed:b1:47:66:1c:f9:52:e1:0f:f7:02:a6:aa:2f:fc:
57:85:08:8b:4f:ad:f4:bb:0a:58:6a:ba:8d:4b:36:
55:60:c9:c0:70:d5:da:6f:90:e4:56:a1:18:f0:e5:
45:33:02:3a:c4:92:91:42:0e:04:2b:12:38:52:9a:
2c:bd:ca:27:84:03:f6:b2:8d:6a:38:d6:db:88:24:
fb:46:1c:bd:9c:7d:e9:02:04:81:df:ca:14:3f:70:
e0:49:3a:8e:e2:0a:bf:10:ec:c9:5b:e8:21:84:5e:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:B6:04:19:21:86:EF:4C:9C:9F:7D:99:41:58:12:5C:38:FD:A6
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Jy62BBkhhu9MnJ99mUFYElw4_aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.112.0/22
Signature Algorithm: sha256WithRSAEncryption
47:5c:a0:d6:2e:4e:c4:5c:78:dd:dd:51:3b:e7:1a:59:3e:b6:
16:60:0b:cb:b8:9d:5b:49:51:ac:1e:cd:4d:ad:62:91:cf:d8:
02:92:9f:8b:2d:ed:cf:ab:20:66:69:80:e7:9c:1c:b3:c7:51:
32:61:1c:4d:b6:ec:29:9f:d0:bf:b4:7f:8a:3b:ce:68:e1:da:
af:fb:dd:1a:9f:80:cd:80:5b:e9:92:8b:98:38:8c:73:81:fe:
0f:db:7e:05:53:4a:0e:ff:60:1f:36:fa:90:9e:b4:d1:2b:51:
55:2f:9f:3c:62:5a:b7:83:46:ba:42:db:b4:68:e5:41:ce:89:
6a:0b:a4:dc:0e:00:9b:76:36:f4:bc:bc:77:30:50:ec:71:bf:
78:09:45:8b:c7:34:93:97:79:d9:63:53:02:cb:09:b7:74:24:
3c:57:5a:f8:79:29:b7:8c:8d:7c:09:62:37:9d:35:a7:bf:0a:
a3:bb:06:71:8c:c7:ba:81:c0:ee:8c:f9:20:35:7a:8f:88:1f:
db:07:a9:cb:57:95:a2:4c:18:31:3e:32:b4:64:77:eb:40:e9:
51:31:4f:38:c8:aa:e2:9b:6b:3b:e8:56:dc:91:53:3c:c4:02:
e8:82:a9:06:6b:b1:a3:de:0a:2c:3a:4b:03:13:c1:f7:6d:95:
d5:9f:72:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:01 2024 by rpki-client on console-ams.rpki-client.org