Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/IoCZnPTQYzbvp7QshsfAPnIkeNA.roa
File: IoCZnPTQYzbvp7QshsfAPnIkeNA.roa (raw, json)
Hash identifier: nwGWSW+nvIUTD9E1Dc3a3d7WxyiDZsS/YRcID8YeoWE=
Subject key identifier: 22:80:99:9C:F4:D0:63:36:EF:A7:B4:2C:86:C7:C0:3E:72:24:78:D0
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF0FF3926687B67E2EC9691C20277
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/IoCZnPTQYzbvp7QshsfAPnIkeNA.roa
Signing time: Tue 02 Jan 2024 04:30:28 +0000
ROA not before: Tue 02 Jan 2024 04:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51703
IP address blocks: 85.153.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f0:ff:39:26:68:7b:67:e2:ec:96:91:c2:02:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2280999cf4d06336efa7b42c86c7c03e722478d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:b5:51:ec:a8:27:e7:ec:66:dd:81:29:c3:
d2:26:8c:31:f3:6d:7b:7d:33:eb:d4:cd:f8:2b:59:
3c:65:92:e8:53:cb:e9:8b:d4:69:c8:cc:3e:9a:5a:
69:0f:41:e9:48:d4:64:57:97:70:f1:58:f2:e0:b6:
84:b1:22:6a:a0:94:de:6d:12:9a:0a:97:86:2f:8d:
cb:53:27:37:4f:58:0e:75:a2:b7:8a:45:ca:1f:2e:
61:b7:38:3e:7a:33:f7:0c:b0:38:3d:cb:23:ba:56:
ac:53:eb:29:41:72:61:27:01:a7:61:b0:9b:99:18:
71:f6:73:61:8e:92:71:3c:04:39:69:02:46:47:3a:
ec:98:d3:b1:4b:08:99:cf:06:28:ab:dd:9e:4f:75:
e3:43:42:85:e3:ce:29:f8:ac:4a:5b:62:1e:42:f4:
a3:ad:14:f6:b6:45:2b:ce:7c:3a:52:4e:5a:4a:b9:
11:5f:64:5d:13:5e:bc:9b:42:74:4c:56:76:83:8e:
6a:a6:39:e3:19:5b:17:6b:83:fe:bb:a8:1a:5b:dd:
07:e6:d9:6c:39:76:25:77:28:de:a8:58:4c:58:e0:
d4:69:63:97:84:3a:5a:13:fe:49:00:f4:0f:c5:57:
3a:0a:fb:42:7d:89:26:69:61:57:d1:de:19:33:76:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:99:9C:F4:D0:63:36:EF:A7:B4:2C:86:C7:C0:3E:72:24:78:D0
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/IoCZnPTQYzbvp7QshsfAPnIkeNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.131.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fe:09:25:8e:26:1d:f2:ce:0c:20:36:bf:0f:5f:bf:e8:46:
82:b0:85:34:3e:2e:b7:3f:aa:78:2a:67:10:01:24:cb:89:ee:
a6:24:da:06:26:9b:5b:c8:8a:6a:4a:ed:f4:9a:ba:c4:3d:42:
b9:14:df:0c:8e:2e:c1:fd:06:b9:73:46:5e:f1:81:3f:17:fc:
5c:33:e3:b3:83:bb:73:c6:0e:5e:12:1f:7f:f2:99:2d:d1:65:
8c:cc:16:b0:a4:c5:f4:4f:8f:85:3b:f7:3b:f7:fa:05:42:67:
e0:92:da:a7:6f:0d:1b:ee:2f:42:cc:fd:03:16:3e:37:27:f1:
d1:23:76:38:51:9b:32:b4:79:6d:f8:e0:e3:36:c0:56:e7:1f:
23:c0:6b:95:ef:5d:75:07:44:bf:ba:9b:f0:45:58:65:55:0d:
d3:f1:a5:4f:f1:56:87:88:1d:64:b6:56:c5:53:39:0f:27:d2:
dd:80:c8:79:3e:1b:72:e3:07:2e:ba:bc:b6:58:4f:7c:c2:58:
2a:b5:a8:81:01:c9:25:91:e7:c9:ca:f4:1c:b4:d7:ce:f2:dd:
94:4b:4b:16:81:8b:e9:61:be:1e:10:56:e6:e5:e1:2f:33:50:
51:10:e1:00:61:c6:de:5f:7b:97:b0:37:80:d9:8b:e3:57:5f:
da:f2:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:28:09 2024 by rpki-client on console-fra.rpki-client.org