Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/n4ndYHeySaGf_ot3qb9yt7Y64z8.roa
File: n4ndYHeySaGf_ot3qb9yt7Y64z8.roa (raw, json)
Hash identifier: /azSFCLT+6+9m8UlOjGh2jEmmxXdratXmLFMekpR3bo=
Subject key identifier: 9F:89:DD:60:77:B2:49:A1:9F:FE:8B:77:A9:BF:72:B7:B6:3A:E3:3F
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 018CC5004A537DF946F47CAFF1EAF30611BD
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/n4ndYHeySaGf_ot3qb9yt7Y64z8.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34965
IP address blocks: 85.235.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4a:53:7d:f9:46:f4:7c:af:f1:ea:f3:06:11:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f89dd6077b249a19ffe8b77a9bf72b7b63ae33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:7d:c5:b2:50:93:2a:23:6f:49:f9:dc:89:
29:d7:df:47:f6:f3:3f:e6:98:32:47:68:6e:64:5d:
d1:99:e8:8b:e7:f3:7b:db:80:07:53:d1:8e:d5:da:
b7:b9:9b:0c:21:b6:d9:b8:89:e1:00:23:21:a7:79:
d5:31:62:c1:09:21:c9:7e:5e:92:98:1d:76:54:39:
e1:8c:bf:00:ce:0b:c7:65:82:19:02:38:83:1d:c8:
7e:e5:cb:56:72:a1:8d:aa:6f:33:53:ca:a8:de:2c:
ee:12:81:21:2d:fd:ea:ea:5f:ed:10:89:0d:f1:dc:
9c:ce:64:c9:c3:39:8b:63:4a:7f:89:35:58:4c:33:
48:b0:72:d8:83:9b:11:7f:eb:41:aa:fa:f2:28:59:
a0:50:d8:47:79:9e:28:4b:46:52:dc:45:88:a9:32:
ca:a2:0e:15:bf:3e:8d:18:9a:d0:82:9e:4f:02:20:
d0:ee:a8:2e:64:50:2e:d4:a8:7c:1f:80:b7:0b:c6:
24:13:c5:91:3c:c0:48:56:fc:8f:6f:85:90:e8:52:
00:8a:dc:a0:23:81:01:59:a9:79:6c:7d:49:2c:aa:
71:94:e0:c3:79:5e:fe:c2:51:f9:9c:76:b2:b6:21:
92:4f:ec:49:8a:a4:e5:d9:63:da:f7:95:26:a2:f4:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:89:DD:60:77:B2:49:A1:9F:FE:8B:77:A9:BF:72:B7:B6:3A:E3:3F
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/n4ndYHeySaGf_ot3qb9yt7Y64z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.0.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:9a:41:03:86:93:c1:66:5f:2e:cc:fd:d0:b1:6d:fa:95:63:
69:6f:63:e1:82:49:7a:06:41:54:14:db:11:1d:67:7c:fa:45:
b6:30:c9:6b:37:50:fa:6e:38:ac:f5:22:14:21:35:f6:1c:53:
21:2e:ab:ba:11:db:a2:4e:c5:3c:5b:c9:e7:3c:c0:b1:a8:6f:
e9:e5:67:aa:55:ca:0f:40:54:d0:41:3f:7a:02:b4:d4:a4:1f:
6d:c8:e3:85:29:ba:70:e5:01:a0:04:a5:92:59:6c:54:12:8f:
e8:ec:dc:04:b7:5c:5e:44:94:c1:5d:26:62:23:f0:38:d7:47:
1d:92:06:1a:c6:64:23:a3:da:7a:95:4a:29:b2:2a:61:95:ea:
69:22:15:84:b5:43:75:37:94:8c:61:a2:4c:82:cc:25:cd:0d:
4c:d3:4c:f7:32:3b:69:73:7c:c8:e9:18:3b:45:85:4b:8d:c3:
d2:c0:5a:e3:72:d1:c5:21:09:58:c8:42:7f:76:d3:56:19:f8:
48:21:dc:4d:df:0f:fa:ba:e2:b6:45:24:9c:b8:9b:37:b1:34:
5c:f7:14:11:63:0e:26:c0:5a:78:1e:0f:1f:63:09:36:87:6f:
69:1a:7c:3f:57:78:2d:d2:95:c6:be:9d:fb:75:84:17:8f:ec:
13:07:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:22:29 2024 by rpki-client on console-ams.rpki-client.org