Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/awGdPkOTiyRddH-EXXYSIby7miA.roa
File: awGdPkOTiyRddH-EXXYSIby7miA.roa (raw, json)
Hash identifier: 3yagtPKvKQLMOG/Q4UqRSHtQtVBW+difguYQLSLaQU0=
Subject key identifier: 6B:01:9D:3E:43:93:8B:24:5D:74:7F:84:5D:76:12:21:BC:BB:9A:20
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018CCA2984AFBCF3113EAFBACED56792FB34
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/awGdPkOTiyRddH-EXXYSIby7miA.roa
Signing time: Tue 02 Jan 2024 12:32:47 +0000
ROA not before: Tue 02 Jan 2024 12:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 85.203.9.0/24 maxlen: 24
85.203.16.0/24 maxlen: 24
85.203.28.0/22 maxlen: 24
85.203.25.0/24 maxlen: 24
85.203.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:84:af:bc:f3:11:3e:af:ba:ce:d5:67:92:fb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 12:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b019d3e43938b245d747f845d761221bcbb9a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:48:21:16:be:4f:92:39:c8:59:7e:b6:31:
e2:7b:60:0e:da:11:49:ac:54:3c:31:12:7f:b5:70:
6e:98:e0:6c:c7:71:9e:53:42:96:9d:ca:2e:0c:5e:
d6:19:36:08:cf:7d:d6:2a:84:21:96:d1:4c:8f:71:
4a:ee:b1:9c:f4:d8:d9:98:6f:78:97:99:c9:6a:be:
c8:07:98:e9:44:fb:b4:94:67:43:75:b8:62:72:df:
7f:6a:1f:0d:7c:80:6f:45:d9:c8:f8:a3:4c:b4:c7:
28:76:70:ee:d8:73:f8:c9:31:46:ab:08:cb:e7:2c:
1f:35:6b:c3:54:fb:57:ed:ec:d6:3a:e2:de:06:4e:
ca:87:c3:de:4a:4b:03:9c:7d:0e:53:e6:4c:f1:fa:
14:29:6f:c1:a4:a4:90:dd:da:98:90:9e:b4:0a:0e:
fc:f7:34:5a:41:a9:aa:b3:31:bf:5a:de:94:55:bf:
e4:47:d2:67:52:87:2b:84:69:bd:36:d5:04:3a:2c:
93:a4:4a:be:d5:35:d7:49:56:27:fa:60:da:ba:fe:
70:de:e5:8b:7f:1e:29:fb:a3:74:5d:75:7c:bd:b5:
26:e8:5b:e7:1f:a6:45:30:ec:65:97:74:66:c3:f2:
ec:d7:a7:53:2a:d8:7d:5b:44:e9:9b:db:b9:1e:37:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:01:9D:3E:43:93:8B:24:5D:74:7F:84:5D:76:12:21:BC:BB:9A:20
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/awGdPkOTiyRddH-EXXYSIby7miA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.9.0/24
85.203.16.0/24
85.203.25.0/24
85.203.28.0/22
85.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:dd:94:f0:a3:a5:f2:68:dd:ba:d4:44:24:a5:5e:28:fe:e8:
81:63:2e:45:b9:ae:32:73:ae:d7:9a:87:c5:63:59:5c:d7:58:
e9:02:d9:b3:c3:98:5d:d8:af:e8:55:f8:ba:78:a2:89:4c:bd:
e3:15:f8:a1:52:b3:89:25:2e:cd:cb:f7:3d:60:5d:1f:61:6e:
cf:14:2d:46:92:e1:46:c7:34:0b:c7:0f:c0:10:22:45:d7:c1:
cd:2a:9a:ad:48:e0:b2:60:89:f6:5a:74:37:07:3d:be:98:5c:
1d:3a:50:db:0f:b0:40:4e:e6:c6:1b:27:45:89:ee:3f:29:4e:
21:e1:b6:e3:72:b4:b0:53:fc:87:f7:10:3f:66:6a:e1:9b:8c:
40:af:69:44:e5:8c:5c:8a:94:e4:0a:62:b1:4f:dc:4c:d0:ca:
22:8a:59:f1:0a:d4:54:e4:93:32:2f:2a:12:41:1c:59:af:5b:
87:45:f0:55:03:7a:4e:91:de:99:0a:20:81:81:5d:ec:e2:ab:
5b:e0:60:70:a4:d3:6d:d3:69:6f:c5:bc:f3:ba:b7:58:0e:a2:
91:0e:3e:83:ba:e2:fb:3c:c9:fd:cd:a0:be:0f:71:78:1f:be:
84:8b:9c:65:60:0c:17:7b:ac:46:4e:8e:f0:65:02:b3:72:d7:
43:6e:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:36:56 2024 by rpki-client on console-ams.rpki-client.org