Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/o3YL7ShXfqaZQBaf6Rx6CXeZTJA.roa
File: o3YL7ShXfqaZQBaf6Rx6CXeZTJA.roa (raw, json)
Hash identifier: 9HkncudvOfvSUFUOog4DS4yLjgQdiVBL6vWxHCTF+d4=
Subject key identifier: A3:76:0B:ED:28:57:7E:A6:99:40:16:9F:E9:1C:7A:09:77:99:4C:90
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 018CC26D78EC618F2EC58B009A9FBAEAC473
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/o3YL7ShXfqaZQBaf6Rx6CXeZTJA.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43591
IP address blocks: 85.117.192.0/19 maxlen: 24
46.245.152.0/21 maxlen: 24
85.117.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:78:ec:61:8f:2e:c5:8b:00:9a:9f:ba:ea:c4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3760bed28577ea69940169fe91c7a0977994c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:bc:96:31:c8:29:94:c6:49:69:c5:d5:f4:
61:e4:8d:9c:c0:ae:49:53:9a:05:e6:66:98:c6:b2:
db:d8:af:92:7b:e0:26:9d:61:8e:b7:e5:b7:02:5f:
47:95:f6:5b:e8:fb:32:b9:e6:2e:03:49:80:ad:13:
d3:60:9b:b1:76:f9:40:1c:c9:df:9d:73:14:9f:16:
7e:cb:a8:53:fb:db:e4:27:f5:34:6f:63:e5:59:9f:
5d:a4:59:af:d6:dc:b6:b3:5f:28:3f:a3:e8:f3:01:
f5:f5:d1:e9:4d:8a:a1:2c:60:e9:1e:f3:2e:e3:c3:
16:82:2c:57:36:68:82:b7:dc:7b:7f:bb:8f:1c:a3:
1c:81:4e:4e:4c:d9:00:8e:1e:b8:95:62:ce:5a:45:
41:a0:40:68:d2:5f:49:b6:4a:1a:17:76:4f:94:a5:
a3:2c:91:e7:75:87:16:21:98:90:3d:7b:0e:08:fa:
f3:91:d6:70:da:f5:00:89:57:7c:0f:e0:e4:00:2f:
9e:48:01:dc:ae:f2:40:9b:da:97:7d:ef:f8:09:5a:
c7:cb:7a:5e:81:39:00:fe:dc:2c:cb:26:1f:69:ee:
81:c6:67:fb:85:47:00:ef:f6:ce:1e:01:8e:d2:9a:
44:ff:9f:10:d1:b6:84:d3:6d:bb:cd:ae:77:fe:fb:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:0B:ED:28:57:7E:A6:99:40:16:9F:E9:1C:7A:09:77:99:4C:90
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/o3YL7ShXfqaZQBaf6Rx6CXeZTJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.152.0/21
85.117.160.0-85.117.223.255
Signature Algorithm: sha256WithRSAEncryption
33:a8:36:81:07:39:d0:94:93:a1:cd:c9:56:65:f6:81:cd:8f:
01:b2:24:9e:fc:70:15:9e:dd:e0:b7:c0:f1:51:73:d9:e0:0f:
b7:33:1d:f5:a9:9f:73:7b:cd:2f:c0:14:3e:12:e4:0d:10:82:
70:1c:56:e3:77:22:cf:53:9b:9a:bd:93:b3:8e:75:e8:2e:b6:
c5:98:15:5c:b1:9a:f1:fb:34:31:69:bf:44:ac:71:28:19:f8:
2d:f6:2d:87:8e:07:a7:e5:6d:c9:67:2d:2e:1f:92:c2:34:4a:
c8:17:5f:45:75:2c:c3:30:af:c4:d4:8b:68:6d:3e:18:5d:34:
8f:a6:78:86:93:c7:f5:b0:32:02:0a:ef:f7:53:e2:f5:8a:59:
f0:06:5a:da:8a:cd:a4:50:e1:0b:f4:23:e9:f8:50:97:45:81:
49:94:49:f9:b5:58:74:0c:b9:fb:f5:9a:e9:6f:91:e1:65:b2:
94:7f:09:24:32:38:8a:a8:0e:2a:a3:9f:4f:e2:ca:f0:76:9e:
83:f1:4a:2f:2d:32:7c:59:2b:f3:92:80:c7:7c:2d:8f:fc:41:
ff:ff:75:f9:1f:19:5b:38:f2:d4:37:dd:a1:22:94:d5:82:b7:
cc:83:8a:71:72:05:7b:c9:a4:b6:97:91:9d:3e:ef:3a:84:95:
fa:a1:96:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 27 16:56:42 2024 by rpki-client on console-fra.rpki-client.org