Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/38eNwHAcwiuiHUoqT2CWJiceCZk.roa
File: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (raw, json)
Hash identifier: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=
Subject key identifier: DF:C7:8D:C0:70:1C:C2:2B:A2:1D:4A:2A:4F:60:96:26:27:1E:09:99
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019427B60C235A222CF95DC3ED0A8FFD94BC
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/38eNwHAcwiuiHUoqT2CWJiceCZk.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205465
IP address blocks: 85.187.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0c:23:5a:22:2c:f9:5d:c3:ed:0a:8f:fd:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfc78dc0701cc22ba21d4a2a4f609626271e0999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:ec:ee:b4:ec:30:f6:0e:c3:57:43:b4:c1:
9f:70:78:7b:1f:32:8c:14:2f:00:89:92:6c:7f:ff:
0f:41:27:23:2d:13:b7:b3:78:dc:63:5a:31:8b:8c:
3f:0f:b5:d6:65:66:aa:31:fd:8f:f7:f7:93:90:0f:
b3:33:31:9b:d1:a7:b8:29:e3:a7:f4:86:67:07:e7:
37:fe:1d:40:77:b6:a4:60:85:36:c4:8b:86:96:73:
f2:8d:3f:f2:f2:5a:0a:86:13:40:cd:2c:fc:9d:d5:
1a:10:1a:ce:d7:df:e8:2c:0d:ea:c1:da:e5:43:a1:
f3:9b:74:a0:5e:18:f2:9e:47:4f:01:de:0f:14:6e:
52:d0:49:08:5c:9f:54:ef:c7:79:27:fb:29:8b:5f:
ea:82:b7:11:7d:b3:eb:95:a5:16:cb:5d:51:78:ac:
93:4f:f4:b0:d1:d9:ed:87:f9:15:bc:ae:6a:fc:68:
88:d9:35:8a:89:3f:8e:ad:c5:80:ef:e7:0f:83:fe:
50:34:34:ef:b1:bf:e2:eb:b2:ba:b1:b7:5e:ba:41:
e4:44:18:c5:a4:03:80:d3:69:17:6a:c9:75:e8:d8:
40:ae:5b:a7:33:2d:81:16:90:19:5c:91:10:1f:bf:
5e:a9:ba:b5:52:94:44:37:85:d6:26:54:a2:ad:75:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:8D:C0:70:1C:C2:2B:A2:1D:4A:2A:4F:60:96:26:27:1E:09:99
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/38eNwHAcwiuiHUoqT2CWJiceCZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.60.0/23
Signature Algorithm: sha256WithRSAEncryption
99:2a:df:24:f9:2e:7f:ec:e1:3f:1e:89:4b:86:a3:a4:02:85:
31:77:7e:02:45:09:9f:e1:25:72:bd:a6:a9:dd:16:03:35:0b:
44:38:2a:d9:51:85:f5:f8:e7:b5:6f:90:31:b8:d6:7e:22:90:
1c:90:43:6a:05:12:e1:04:5f:e6:6d:f0:a8:6a:c7:f7:b5:df:
a7:99:fc:a8:73:b6:56:40:2f:f9:ef:d0:41:16:0c:ae:87:59:
e3:00:b9:25:68:e7:6b:cc:46:ae:80:a7:18:70:0e:f5:ce:1e:
bd:6f:aa:e1:bb:4c:df:b7:21:2b:33:8b:25:8a:8b:90:68:e6:
43:0c:de:59:da:d5:e5:9c:e4:ef:9c:c9:fa:e1:26:e7:9d:b5:
8f:e6:b1:c9:a0:c4:92:11:70:96:ae:09:35:ab:e8:33:6d:db:
41:f5:af:70:18:01:dd:e8:92:be:2f:61:b0:e8:73:2a:ae:13:
fc:7a:f6:2e:db:fc:5d:04:d2:6d:51:5c:44:ec:75:ad:e9:27:
ee:04:9a:b7:96:57:ed:cd:08:ac:bb:5f:b1:3d:46:ce:a3:d4:
2b:22:81:12:0c:de:f0:f3:da:83:94:68:4d:41:75:4d:6d:ff:
47:d9:ec:38:21:62:91:ce:c3:ec:96:d4:9c:2b:22:da:07:05:
8f:71:d7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:48 2025 by rpki-client