Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/23Afi_b3z1f_nXXliW9LdrQiR7I.roa
File: 23Afi_b3z1f_nXXliW9LdrQiR7I.roa (raw, json)
Hash identifier: rGo8nWMOY5jR3K6LEJzlJhovDHrtA584WbFJ0mxUWRA=
Subject key identifier: DB:70:1F:8B:F6:F7:CF:57:FF:9D:75:E5:89:6F:4B:76:B4:22:47:B2
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0193537189F061E990100888C880F62D2C10
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/23Afi_b3z1f_nXXliW9LdrQiR7I.roa
Signing time: Fri 22 Nov 2024 10:36:10 +0000
ROA not before: Fri 22 Nov 2024 10:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31251
IP address blocks: 85.203.0.0/22 maxlen: 22
85.203.0.0/24 maxlen: 24
85.203.2.0/24 maxlen: 24
85.203.3.0/24 maxlen: 24
85.203.5.0/24 maxlen: 24
85.203.6.0/24 maxlen: 24
85.203.11.0/24 maxlen: 24
85.203.12.0/24 maxlen: 24
2a02:a10::/29 maxlen: 29
2a03:60c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:71:89:f0:61:e9:90:10:08:88:c8:80:f6:2d:2c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Nov 22 10:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db701f8bf6f7cf57ff9d75e5896f4b76b42247b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:8c:cc:c5:0d:62:87:57:88:c4:88:d0:25:
de:84:91:fe:9d:5e:85:d6:da:27:8d:f4:43:3e:37:
c5:a3:50:bc:58:9a:ec:22:92:a3:62:f8:d9:ed:c7:
97:b2:15:d0:44:68:38:5d:b7:e8:5f:ca:dd:14:ac:
41:96:ac:14:a3:e4:b3:25:8d:ac:8b:fc:0e:dc:cc:
56:b2:5c:7e:7e:24:75:26:28:28:5a:3c:a7:2c:bf:
74:d8:62:0d:a1:b5:a2:29:90:d5:e9:2a:46:54:07:
28:5b:32:63:66:68:69:d5:d8:21:ac:15:73:c9:3c:
32:92:2b:cf:ff:21:f9:db:80:fb:9e:5e:c8:01:be:
36:ef:d1:b0:75:eb:00:04:ab:30:09:6f:c4:7d:96:
03:2d:68:8c:df:51:02:3c:fe:a1:f8:48:5d:36:f2:
3d:86:71:ca:f7:5a:63:ae:81:b2:47:d2:ce:1a:18:
4f:1d:13:19:87:e5:b7:3b:7e:e5:11:f0:e9:6d:fa:
4a:57:c3:44:75:24:1a:25:33:8a:ba:51:98:37:41:
c0:24:9f:f4:99:b9:95:78:99:8a:e6:c2:77:98:19:
4a:de:35:92:20:53:ac:2d:33:06:a7:ba:46:1b:65:
4e:6f:0e:b2:34:55:04:10:db:71:83:1a:6b:fe:fa:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:70:1F:8B:F6:F7:CF:57:FF:9D:75:E5:89:6F:4B:76:B4:22:47:B2
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/23Afi_b3z1f_nXXliW9LdrQiR7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.0.0/22
85.203.5.0-85.203.6.255
85.203.11.0-85.203.12.255
IPv6:
2a02:a10::/29
2a03:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
23:8e:1e:ab:36:8a:3a:04:3f:49:5d:f7:0f:7d:8f:dd:5d:f0:
7c:3f:b0:c7:42:cc:0a:7c:e9:15:f3:2c:31:67:ae:af:03:b6:
02:f1:d0:f5:d0:86:01:58:76:7b:a1:10:be:17:ac:0b:16:af:
7b:8c:d7:3e:0a:29:3b:6a:53:17:fa:17:63:1c:c1:17:39:96:
15:55:c8:37:03:62:62:c3:da:41:b3:08:25:1e:b7:b1:cb:e1:
b2:97:5c:5d:d5:10:f2:29:5c:18:72:76:09:f8:0a:96:9d:94:
00:db:59:f5:08:60:b2:89:80:e3:c8:e0:e9:fa:ce:b1:6e:4f:
6d:bd:cc:2f:ba:61:3c:41:69:2d:82:52:af:ea:65:5b:13:1f:
fc:b3:d9:28:35:2b:6f:ef:16:20:b1:14:c7:2f:53:fc:29:41:
22:e0:b5:66:0a:8f:48:34:7e:fc:71:83:6c:99:68:05:b0:f7:
ab:73:4e:88:09:5e:84:8b:e6:d8:c6:c1:28:e1:3c:5a:bd:d5:
85:50:7c:f3:40:75:3b:0a:a1:b2:8b:9b:0b:2a:49:83:91:25:
e6:6b:87:a0:b9:af:58:2e:75:ea:af:9a:40:21:ce:6d:17:3d:
f1:8e:25:e9:13:cf:6e:8d:06:ab:95:31:fc:6f:5a:03:c5:24:
b8:7e:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:14:29 2024 by rpki-client on console-fra.rpki-client.org