Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/238pLV1jNEGyVfcFIQgiAu5TRmI.roa
File: 238pLV1jNEGyVfcFIQgiAu5TRmI.roa (raw, json)
Hash identifier: I6IOwBRt6uUcC+4jKhNlGRkbSR0ZHAuRE2/5qIpdlQM=
Subject key identifier: DB:7F:29:2D:5D:63:34:41:B2:55:F7:05:21:08:22:02:EE:53:46:62
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB7F5A1AC0900BB1EC62C43DF13EE
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/238pLV1jNEGyVfcFIQgiAu5TRmI.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64488
IP address blocks: 85.248.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b7:f5:a1:ac:09:00:bb:1e:c6:2c:43:df:13:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db7f292d5d633441b255f70521082202ee534662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:e0:e1:29:82:f3:05:8d:f3:1b:1b:52:c0:
4f:b8:90:42:8e:d2:c0:13:c0:b0:8e:0b:db:6e:a5:
25:a5:45:a0:e1:8d:5c:80:99:dc:60:86:4a:54:65:
dc:e0:1c:3d:da:b7:97:cb:fa:23:0a:f2:bc:1d:ba:
a8:e5:eb:da:3e:b6:91:3b:54:0d:a7:ac:19:42:4e:
7a:d6:c8:b9:9f:de:8e:2d:55:68:7f:b4:ec:9f:5a:
ef:b2:24:f0:62:ac:0a:a1:21:4a:2d:b8:0c:0a:15:
fd:05:0d:dd:05:6d:c6:e9:2f:96:52:71:41:f4:52:
ea:83:d4:5d:1e:2f:ed:4b:cf:f3:53:50:bf:88:69:
43:63:e0:7a:de:9d:8a:4e:8b:90:58:60:57:bc:7b:
4d:f2:c3:6a:95:0e:fe:53:bc:01:59:88:c9:4a:ac:
1d:75:59:8a:ce:6d:25:d1:6f:f3:81:a6:b2:b1:f7:
95:d7:ab:e8:6e:c3:ac:9a:50:86:fd:a6:e7:07:cc:
67:9d:e1:77:94:cf:de:01:8d:bc:58:f0:6f:10:a6:
0f:35:fd:06:10:c9:6f:b3:97:67:67:61:8e:11:bc:
ec:38:57:dd:3a:3b:f8:b0:69:ec:c6:7c:98:4a:25:
26:da:26:be:c0:b5:44:d6:8f:8a:0f:7d:b9:33:da:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7F:29:2D:5D:63:34:41:B2:55:F7:05:21:08:22:02:EE:53:46:62
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/238pLV1jNEGyVfcFIQgiAu5TRmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.78.0/24
Signature Algorithm: sha256WithRSAEncryption
74:68:b0:1b:9c:98:27:c2:95:e3:2d:79:58:bb:10:28:6d:98:
3c:fa:53:83:81:87:65:fc:e1:5e:62:65:d1:b0:0b:21:ad:ad:
24:9c:50:ed:ec:66:4a:59:5e:a8:95:73:6f:6f:cf:58:03:94:
b8:ec:0a:d6:58:32:3c:50:e2:8b:3d:b5:98:25:0f:3c:20:62:
46:d3:ef:37:c9:de:8d:29:f6:9f:47:09:8f:3d:b3:b6:91:39:
8f:15:82:80:13:bb:c5:fd:ae:10:96:2c:2e:55:eb:c8:53:b7:
11:90:27:59:1d:38:0e:e7:28:4a:a9:14:2c:64:2a:8b:40:7e:
ac:bf:f0:7e:d7:b9:5a:a0:16:15:3c:8f:29:8b:6a:e9:7d:8b:
2d:7b:fb:05:36:ab:9f:b1:0f:c5:ac:14:bf:57:30:62:8b:d6:
0a:38:6d:6b:95:b2:0c:a7:33:79:46:1a:58:8c:66:cd:d1:c2:
86:a9:1f:85:c3:0c:1b:d6:14:05:77:c0:09:b3:92:50:95:50:
65:7f:7f:4b:50:86:6f:15:a7:49:fc:b6:c7:08:97:4c:f5:da:
d4:2c:4d:f1:f8:4a:63:8f:ba:d7:4b:15:1d:94:73:37:0a:57:
05:5a:09:2d:0c:cd:47:b3:7d:10:86:90:ec:81:49:cc:8f:d6:
75:23:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:48:33 2024 by rpki-client on console-ams.rpki-client.org