Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/wj0iBW1A5Gk5B4-LOB8b850ZRpE.roa
File: wj0iBW1A5Gk5B4-LOB8b850ZRpE.roa (raw, json)
Hash identifier: v7FIAZ8aedQY/wP0SHQO+uakBPXK4u8ndaVxG2wd2hc=
Subject key identifier: C2:3D:22:05:6D:40:E4:69:39:07:8F:8B:38:1F:1B:F3:9D:19:46:91
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 018CC801F0858DF8B36806D86C5DFD2A5844
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/wj0iBW1A5Gk5B4-LOB8b850ZRpE.roa
Signing time: Tue 02 Jan 2024 02:30:19 +0000
ROA not before: Tue 02 Jan 2024 02:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34144
IP address blocks: 85.88.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f0:85:8d:f8:b3:68:06:d8:6c:5d:fd:2a:58:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 2 02:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c23d22056d40e46939078f8b381f1bf39d194691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:46:57:69:37:a2:02:78:f5:b8:a6:19:81:
ae:0c:a1:d9:b9:43:6c:7d:cb:dd:d2:4e:c6:d0:2a:
fb:cb:15:e1:02:4a:7e:47:a7:3e:5f:6e:be:10:27:
ba:9e:94:68:f3:31:81:c6:c7:70:09:c5:fd:83:94:
74:0a:df:dd:93:6d:55:cc:96:cb:61:3d:8f:8f:85:
04:91:89:c1:5e:a3:4e:22:48:1a:69:fb:ea:b7:8b:
1f:59:e7:99:66:e1:42:8d:55:c1:d4:83:32:7c:83:
08:bb:b7:de:77:9e:a0:f1:4f:e8:6a:8e:87:bd:fb:
b4:b1:68:9a:ec:ac:0c:a6:73:aa:97:74:42:71:33:
17:e0:17:c3:c9:1c:3b:64:85:88:39:28:05:de:63:
55:62:dd:65:dc:4c:e0:36:da:5e:87:1b:99:30:84:
f8:ef:32:18:11:7d:ec:13:8f:bd:ad:0f:d9:6e:67:
1c:18:ae:dc:c6:44:0b:1f:c3:25:c9:e8:4c:2f:48:
87:ae:1b:1c:d4:05:9f:c7:27:a5:eb:45:b6:5e:57:
70:41:bb:33:9e:0f:3a:42:0c:4d:89:93:7c:80:c9:
fa:db:27:51:aa:d8:c3:12:0a:2d:7e:a7:e2:ca:12:
83:59:c1:6b:f7:4a:72:c8:c5:3b:1b:ec:ce:5d:cf:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:22:05:6D:40:E4:69:39:07:8F:8B:38:1F:1B:F3:9D:19:46:91
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/wj0iBW1A5Gk5B4-LOB8b850ZRpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.88.39.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5e:ee:87:d6:0f:f9:49:c4:17:40:ee:c9:81:8a:75:12:19:
80:d5:df:59:7d:8c:9b:11:1c:12:d2:9a:e8:78:2f:82:0b:2c:
a3:34:2a:0d:83:75:71:26:a1:1e:17:f2:71:5f:09:5b:9c:19:
08:27:01:22:0d:8b:3b:78:0d:91:3b:87:01:55:a2:a2:c8:84:
b3:dc:95:de:36:b0:ec:e7:d6:25:98:9b:6f:f0:bf:bc:2a:c8:
45:51:fb:25:49:89:e4:2e:26:0c:02:6f:4b:28:2f:8c:18:76:
6f:54:60:48:39:a8:a5:3d:9d:fd:4a:b3:82:ce:9e:ff:85:71:
c6:f0:39:87:7a:19:0b:21:d5:83:e5:fc:83:28:85:be:97:e1:
b2:86:c8:4a:e4:ee:5d:91:d2:b7:8b:3e:61:2d:29:32:a1:73:
6f:f9:57:2c:9c:d2:8a:b8:cf:8b:9a:a3:0b:b8:a2:28:d1:b8:
dd:16:78:3c:96:35:33:71:f8:cf:55:40:dd:8f:c1:e9:90:03:
be:b8:b5:85:42:ec:92:71:24:6c:88:f8:34:06:68:58:3d:87:
03:8d:3b:c0:05:6d:d9:74:47:c2:a6:a6:dc:62:58:f9:08:63:
78:ef:0c:04:13:7e:85:d2:ef:3b:79:2c:c2:92:36:fc:cb:f1:
18:96:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:20:17 2024 by rpki-client on console-fra.rpki-client.org