Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/THsvRNe_thwmiWdFgyct5iV_GZM.roa
File: THsvRNe_thwmiWdFgyct5iV_GZM.roa (raw, json)
Hash identifier: KXQn0zghQ/eeWZVyuffP7Spx9mwhk/X+ywCIp6W6nbg=
Subject key identifier: 4C:7B:2F:44:D7:BF:B6:1C:26:89:67:45:83:27:2D:E6:25:7F:19:93
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018CCA2986060FF1C57711A8C382A9A06461
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/THsvRNe_thwmiWdFgyct5iV_GZM.roa
Signing time: Tue 02 Jan 2024 12:32:48 +0000
ROA not before: Tue 02 Jan 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54103
IP address blocks: 85.203.48.0/22 maxlen: 22
85.203.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:86:06:0f:f1:c5:77:11:a8:c3:82:a9:a0:64:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c7b2f44d7bfb61c2689674583272de6257f1993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:ea:da:f7:c3:41:49:90:16:8c:43:db:c0:
9d:2e:3d:f8:23:db:0e:19:0e:7e:e8:a4:1f:b2:8f:
0b:04:2d:72:f7:56:e0:18:b8:4d:59:00:fb:af:40:
a6:9e:b2:b1:55:72:54:72:28:0c:73:f1:4c:61:a9:
eb:cf:bc:3b:15:a7:5c:2c:25:3d:5f:86:98:54:24:
79:e9:b1:d8:0c:f7:4e:b5:18:d3:c7:67:c4:4b:d9:
b1:95:af:15:23:1d:57:51:74:f1:74:b9:43:5e:81:
d8:ec:0f:77:b5:28:ed:2b:d5:ec:96:8b:59:18:8d:
39:36:0a:df:c3:32:b5:d1:41:b2:e8:52:c2:63:b0:
46:1b:d5:75:c4:87:94:56:78:af:9d:7e:24:39:15:
78:c3:4d:fb:a8:39:f5:12:75:32:19:80:ca:70:b7:
32:90:2a:d4:e5:d0:67:fb:b5:d8:cf:87:8f:e8:c9:
3c:65:c3:f9:fe:ad:63:4a:c2:ac:64:8c:d6:3e:90:
98:76:43:1b:ed:8a:fe:4a:80:27:84:75:a7:70:e3:
49:3f:f7:21:5c:87:40:ab:25:f8:c5:56:87:ca:c9:
70:ee:25:23:f1:97:e7:d4:1c:d8:3b:75:50:90:90:
47:d8:98:a8:b0:d6:c6:b8:04:89:05:7a:c2:29:0d:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:2F:44:D7:BF:B6:1C:26:89:67:45:83:27:2D:E6:25:7F:19:93
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/THsvRNe_thwmiWdFgyct5iV_GZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.48.0/22
85.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
53:b7:6d:b8:39:fe:ce:b1:ba:93:b9:f8:f0:05:31:57:c3:74:
26:00:bf:89:bf:ad:34:5b:86:4c:df:f9:bf:70:4f:78:f7:df:
f0:39:8a:1d:f8:33:78:29:4a:3b:7d:0c:75:2c:e8:ab:70:2e:
d3:6a:ef:95:0e:5b:81:88:54:23:a9:b3:15:6f:e8:74:49:5d:
2e:15:af:97:9c:d1:e2:0c:60:df:6e:4e:8f:c7:4b:69:30:ca:
ca:31:be:5d:f6:53:a9:33:7f:a3:dc:13:3f:c7:93:ba:89:65:
55:67:35:ac:a3:19:22:ce:18:77:f6:4b:d5:4f:c6:79:cf:8f:
b4:df:4e:e4:d5:3a:6b:0b:35:8a:e2:51:54:2f:3e:00:97:0f:
17:bc:d9:5e:19:1e:1e:cd:d0:f7:5f:3d:a2:b7:64:cd:5f:7c:
fa:23:2b:e6:8a:6c:83:c8:68:d7:ff:f6:b7:dd:61:d9:b2:35:
fe:77:6e:da:25:f9:aa:a7:9f:09:94:49:62:cd:29:fa:87:70:
38:6a:98:1b:24:36:ac:e6:6f:6a:5a:f5:11:0e:4a:0f:ca:93:
85:97:fc:cb:d4:cb:1d:e3:48:ad:b8:68:24:8c:4c:80:80:cd:
6a:c4:b7:67:1e:4d:52:9f:33:e5:f4:57:71:62:cc:1b:5c:ee:
e2:1d:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:25:56 2024 by rpki-client on console-fra.rpki-client.org