Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/gdNV4RhYhKV1qyzFPnTnlXHf7EU.roa
File: gdNV4RhYhKV1qyzFPnTnlXHf7EU.roa (raw, json)
Hash identifier: zXf8DOHDwwQkMHSwZSicZy0YDx1BziG9HSYcSdw9Kjs=
Subject key identifier: 81:D3:55:E1:18:58:84:A5:75:AB:2C:C5:3E:74:E7:95:71:DF:EC:45
Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial: 018E2D7862F02CDA3B16A38B977FE4EAF506
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/gdNV4RhYhKV1qyzFPnTnlXHf7EU.roa
Signing time: Mon 11 Mar 2024 12:24:08 +0000
ROA not before: Mon 11 Mar 2024 12:24:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209302
IP address blocks: 85.209.248.0/22 maxlen: 22
85.209.250.0/24 maxlen: 24
85.209.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:78:62:f0:2c:da:3b:16:a3:8b:97:7f:e4:ea:f5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
Validity
Not Before: Mar 11 12:24:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81d355e1185884a575ab2cc53e74e79571dfec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:ec:f7:a0:3b:1d:ef:64:f7:52:bb:4d:6d:
19:de:fb:20:9b:2e:59:15:e8:04:6d:53:1b:3f:c1:
37:1c:d1:b4:e2:5f:81:e3:78:47:15:11:15:ea:f9:
43:8b:1c:f9:e8:8a:81:6c:7a:2d:22:41:30:09:97:
cb:f7:94:46:dd:35:3a:b1:19:53:47:3f:b6:d8:26:
a0:4d:ab:58:8b:92:fe:06:1a:34:12:57:a0:4e:82:
c2:a7:c1:9c:ab:48:31:1c:8c:f0:35:f7:78:4b:a6:
94:7d:77:83:50:4a:99:b5:e9:48:c7:05:f7:ea:08:
78:0d:ce:fd:87:3f:11:94:4e:9f:4f:03:43:fc:e4:
c4:2e:98:3a:7c:29:9d:20:3a:65:85:a2:b2:63:7b:
7b:87:3b:f8:fb:af:aa:51:d7:4f:d1:8c:e2:d8:4d:
60:7a:5a:78:ed:9e:ce:95:1f:0d:41:38:08:07:97:
c2:6b:0d:83:da:47:fe:26:7c:20:0f:ed:49:a4:e3:
ee:5e:16:73:30:c2:f3:eb:e4:37:9b:2f:fb:1b:5f:
be:9b:a9:e9:90:02:da:89:51:bf:9b:51:8e:88:53:
80:1e:cc:89:98:db:f2:0f:3f:c6:11:86:b1:25:bc:
8c:d9:b7:5a:c7:99:74:66:2c:e8:00:50:5c:38:7c:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:55:E1:18:58:84:A5:75:AB:2C:C5:3E:74:E7:95:71:DF:EC:45
X509v3 Authority Key Identifier:
keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/gdNV4RhYhKV1qyzFPnTnlXHf7EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:3c:10:f9:5c:e1:e9:8d:e3:82:cf:cd:3b:b5:c1:fd:24:1c:
1c:b0:77:82:c6:6d:0a:13:e0:0b:53:e5:06:6a:be:61:b7:2f:
79:1f:b9:b7:0f:90:01:92:f0:15:8e:30:c5:6c:05:f7:3b:64:
87:2e:a2:e6:b4:6a:3d:da:9a:79:30:c0:f3:8c:9a:37:25:82:
1e:19:89:28:b7:c1:4f:7c:8e:cb:86:8d:80:21:cd:1e:85:69:
1c:2c:0a:dc:c5:28:48:fd:cd:2a:21:03:38:08:cd:c3:16:71:
be:b5:a6:4a:3f:0b:4a:06:68:81:a5:c2:85:c6:ea:17:f2:e5:
c3:26:99:44:26:95:a4:ed:0b:8f:e6:84:e2:ee:f9:0e:1a:68:
ff:fc:7f:6b:af:0d:7a:b0:33:1e:88:f9:27:10:72:57:df:ad:
51:17:92:7a:e9:e3:d1:65:6e:f3:b7:df:4f:c5:d6:ed:fb:ee:
93:59:7c:86:e0:ed:b9:ce:8e:03:11:fd:fa:84:7e:b3:ea:5c:
95:9e:01:67:fe:32:ff:7b:0d:35:03:a1:46:49:7d:69:c6:7c:
8e:fc:b5:2a:6e:39:11:fe:77:78:8b:b4:5a:0b:88:7f:1b:a6:
25:4d:81:f6:12:f9:53:79:00:94:37:17:2f:ce:22:6d:bd:fb:
50:4b:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:48:52 2024 by rpki-client on console-ams.rpki-client.org