Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/IJzECDC89b9SaEgZjypz80X1mKY.roa
File: IJzECDC89b9SaEgZjypz80X1mKY.roa (raw, json)
Hash identifier: PTZC5Ap4lEE44qaie82pb/hv8FjsgNkOec+flM3pOkY=
Subject key identifier: 20:9C:C4:08:30:BC:F5:BF:52:68:48:19:8F:2A:73:F3:45:F5:98:A6
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FEF7A01A438838959BB6EC39F33BA
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/IJzECDC89b9SaEgZjypz80X1mKY.roa
Signing time: Tue 02 Jan 2024 04:30:28 +0000
ROA not before: Tue 02 Jan 2024 04:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 85.153.136.0/24 maxlen: 24
85.153.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ef:7a:01:a4:38:83:89:59:bb:6e:c3:9f:33:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=209cc40830bcf5bf526848198f2a73f345f598a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:24:3d:d7:9d:b4:02:16:82:43:cd:24:a8:
93:34:ff:58:59:c9:8a:bb:5c:6f:9f:85:b4:45:f5:
59:31:5d:5c:22:03:43:57:54:65:4e:54:7d:74:e0:
40:79:a7:21:d2:fc:fc:a8:a0:6a:4b:2d:d3:58:dd:
b5:8b:ef:e3:00:77:64:8c:bc:2f:c0:f3:83:52:88:
29:1f:49:f4:c4:a7:cf:e9:7c:67:5a:0e:23:69:a1:
42:43:6f:05:60:97:30:38:0f:48:8c:d0:47:7f:e2:
f3:49:bf:12:e9:8a:af:8d:65:a6:57:04:f0:57:0f:
c5:71:40:b7:ba:fc:14:ac:09:1f:98:10:6e:b2:00:
92:80:13:09:19:5e:be:64:70:4b:16:3e:cd:50:3c:
95:b2:e5:5f:aa:97:6d:0c:98:17:7c:c9:ca:55:00:
ad:45:93:8a:15:0a:25:17:4c:2c:f4:3a:2d:b1:d4:
10:34:c9:d0:e2:ce:55:47:f6:a2:e9:71:55:38:26:
fc:34:8a:42:7f:ee:6a:ff:df:8e:fe:04:30:0d:06:
b1:f1:0b:16:d3:dc:38:d6:ee:60:8d:88:a4:c0:81:
d2:56:fc:79:3c:8a:38:d6:f5:08:f1:00:de:43:83:
82:fa:34:52:d5:22:10:11:3d:1b:28:d4:3d:5c:90:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:C4:08:30:BC:F5:BF:52:68:48:19:8F:2A:73:F3:45:F5:98:A6
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/IJzECDC89b9SaEgZjypz80X1mKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.136.0/24
85.153.142.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0f:bf:3c:4e:80:ee:2b:26:48:06:5c:a5:81:2d:d2:78:24:
7c:de:33:5e:a5:a8:6f:e9:da:77:a5:b6:78:9a:f7:2d:5d:52:
8f:84:99:ac:6a:ee:60:fc:47:ad:97:db:18:57:90:8a:7c:93:
27:1c:e3:d7:eb:7f:a7:06:f4:6c:f1:c5:41:0f:fe:cc:8e:59:
9e:e2:ad:db:20:01:6a:56:72:8e:9c:e1:cc:50:da:f1:7e:2f:
4d:0f:b2:c9:0d:17:7e:10:14:54:49:88:4c:67:eb:8c:2f:66:
9b:fa:29:8f:a2:3e:6f:76:88:36:1a:c1:72:3e:6a:19:6f:c8:
67:2e:88:16:be:41:a8:79:8d:df:95:cc:4c:d1:d6:26:1f:59:
43:3b:d1:35:6b:22:70:62:68:af:19:ff:5c:0f:6f:40:0c:cc:
46:6a:e2:f1:6a:4a:83:0d:3e:65:21:20:43:2d:9f:a4:34:34:
d4:54:c8:ce:85:0c:42:ab:67:46:c5:e1:78:2a:3b:4b:51:1e:
9d:15:2f:cd:3b:53:fe:8b:17:e1:13:5a:6e:30:60:52:93:fb:
79:f2:f2:ec:62:25:09:62:b2:e0:a3:f2:b9:bf:e5:2c:77:33:
ba:fc:c7:65:e7:6f:f7:a2:07:35:33:35:d1:15:14:36:23:17:
39:fd:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:14:19 2024 by rpki-client on console-ams.rpki-client.org