Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/b0FHzbDkQLUpO7AbWg98yywsBY0.roa
File: b0FHzbDkQLUpO7AbWg98yywsBY0.roa (raw, json)
Hash identifier: oi0VCO8qoQo6tZYykHa7ao2FVEbo1nI1RwjtqHYYze4=
Subject key identifier: 6F:41:47:CD:B0:E4:40:B5:29:3B:B0:1B:5A:0F:7C:CB:2C:2C:05:8D
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 018CC86F4A6D6536907EF6D2E8B964C18ECD
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/b0FHzbDkQLUpO7AbWg98yywsBY0.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44583
IP address blocks: 85.118.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4a:6d:65:36:90:7e:f6:d2:e8:b9:64:c1:8e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f4147cdb0e440b5293bb01b5a0f7ccb2c2c058d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:2d:f5:a8:30:08:95:9d:f1:e1:e5:b2:69:
b2:05:77:af:e3:ed:9b:08:0c:c7:c0:dd:82:a1:46:
69:e7:17:93:8e:37:a8:84:17:b4:9d:64:16:36:f7:
56:e6:b4:98:65:18:ba:f6:6d:ae:92:37:d0:f0:34:
57:31:38:4e:f2:23:04:b3:74:79:71:04:60:8d:51:
b3:67:05:fc:15:46:aa:89:67:88:46:2d:76:74:7f:
2c:c8:45:07:05:3c:91:c8:c8:83:12:51:59:13:be:
3f:1d:77:6c:48:f1:6e:06:7a:ab:f0:82:df:85:bf:
df:5e:d5:38:35:8d:24:e8:e5:63:f4:a3:92:eb:28:
26:30:9a:80:4e:a1:e4:a2:17:89:78:87:4a:8e:fa:
0b:dd:d5:9c:68:2d:7d:a1:f9:cf:b6:48:e1:38:57:
81:ab:77:dd:a3:de:fc:6f:3b:d6:81:5d:8c:6b:13:
48:f9:fb:a3:48:ce:1e:c8:e9:9d:45:5f:1d:69:79:
00:6c:c4:f4:cd:12:e2:99:5e:63:4f:23:4c:38:87:
57:34:d0:27:bf:c1:7a:3d:4d:bc:f1:fb:90:19:0b:
f6:12:d2:a0:5c:f6:40:97:62:74:f9:94:0d:2b:21:
08:9f:24:da:e6:c3:f1:e3:81:99:6f:c7:8e:9e:1e:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:47:CD:B0:E4:40:B5:29:3B:B0:1B:5A:0F:7C:CB:2C:2C:05:8D
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/b0FHzbDkQLUpO7AbWg98yywsBY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:87:88:58:2e:06:ad:0d:60:b1:86:d7:e4:db:3a:81:f4:e0:
80:19:dd:d3:25:27:21:db:ac:79:94:3e:08:93:96:76:17:73:
31:42:ad:d8:1a:83:0b:cc:ba:0d:bf:b2:81:34:00:12:33:90:
82:6f:90:a7:a3:c7:f6:33:6e:cf:7c:d5:98:ee:78:d4:0a:03:
44:d7:4d:da:0d:7e:6b:ed:cc:6a:b0:af:4e:f9:f2:4a:d9:7d:
86:0c:c8:33:0e:7f:41:c3:08:c1:b4:77:d0:b4:33:08:bd:b1:
41:29:4f:cc:0d:4c:e2:30:67:32:1b:4b:40:99:ec:35:80:1e:
1c:3a:72:3b:71:5a:3b:03:da:4a:0a:dc:ea:c3:e6:e6:61:57:
4b:0a:ca:b1:c2:57:4b:de:71:8d:90:96:e7:90:f9:1b:ea:8a:
81:b1:87:cb:19:b8:53:ac:a0:cc:46:41:19:09:15:87:82:aa:
ee:fa:cb:17:b5:22:5d:42:c8:c6:77:4c:eb:52:85:89:35:ca:
c1:7a:f1:c5:b5:ff:8e:cb:30:6a:75:ef:4d:a3:97:9e:f3:32:
a9:5a:ea:9b:5a:e9:80:d0:7b:05:24:c2:fb:da:0f:21:24:d6:
86:91:a3:39:fd:e7:b7:89:ef:26:d8:c5:c7:68:f6:60:d2:cf:
c0:b4:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:57:35 2024 by rpki-client on console-fra.rpki-client.org