Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/p3GQuAFILoMaO1abwKZ2G_mLBFo.roa
File: p3GQuAFILoMaO1abwKZ2G_mLBFo.roa (raw, json)
Hash identifier: tTt3TleJjxYclJ02FNKxBrRdWOSNKax08/8w7yUKo14=
Subject key identifier: A7:71:90:B8:01:48:2E:83:1A:3B:56:9B:C0:A6:76:1B:F9:8B:04:5A
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB10B83A4F8EB4EBD2735CABCFD6E
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/p3GQuAFILoMaO1abwKZ2G_mLBFo.roa
Signing time: Tue 02 Jan 2024 12:35:10 +0000
ROA not before: Tue 02 Jan 2024 12:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6855
IP address blocks: 85.248.74.0/24 maxlen: 24
85.248.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b1:0b:83:a4:f8:eb:4e:bd:27:35:ca:bc:fd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a77190b801482e831a3b569bc0a6761bf98b045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:6f:2e:f2:52:3c:83:95:74:e4:b6:aa:c6:
26:c9:33:ae:a9:c1:c1:75:92:dd:13:b9:70:fd:4c:
2e:9c:d1:48:81:bf:76:5e:6d:86:c7:4c:14:ad:c7:
9c:4b:70:9c:71:8b:d6:00:a9:c8:70:b5:49:63:7e:
09:b5:01:9a:67:e5:2e:e1:a8:04:f5:a8:5b:18:37:
04:3f:b7:f1:91:5a:39:da:0d:ef:c9:cd:ee:68:ae:
81:3c:10:30:9b:b0:c2:24:2c:76:f7:94:08:c6:c2:
ed:06:5d:4d:c4:d0:07:44:6b:f7:70:6f:9a:31:00:
ad:56:b1:5b:0b:a6:e0:70:ae:6a:94:f4:cc:14:4c:
20:cd:15:f9:cb:08:46:dd:76:fe:95:6c:e8:5b:17:
65:b5:16:fd:fe:59:b9:be:b8:85:3c:bb:62:21:4b:
fe:a8:69:38:d9:68:44:45:56:7c:bf:11:55:02:b7:
ea:e4:98:c6:50:a5:f9:6f:b2:19:bb:fb:15:b4:b4:
d6:94:07:ad:ec:48:cf:79:f1:9a:f7:18:f2:28:ce:
34:ac:ca:9a:29:29:0d:21:64:f8:6c:06:dd:a5:55:
a9:76:a4:76:b3:ab:06:10:2b:4d:67:27:cc:09:bd:
cf:4a:f3:2f:b2:b5:60:d0:42:bf:d7:e0:05:a7:81:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:90:B8:01:48:2E:83:1A:3B:56:9B:C0:A6:76:1B:F9:8B:04:5A
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/p3GQuAFILoMaO1abwKZ2G_mLBFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.31.0/24
85.248.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7b:c9:e3:cc:cb:ee:91:53:2e:5d:15:36:f2:d7:7f:28:4f:
7d:1a:f7:4e:9b:41:ab:e1:2f:ec:fd:01:a6:8d:d8:fc:54:00:
c2:24:33:1f:c0:e7:2f:21:d2:0c:3f:1f:07:0b:ae:06:3f:4f:
ba:97:ad:55:8b:da:10:fa:91:b0:55:db:a2:f0:5c:dc:c8:f3:
aa:b2:66:90:82:81:f7:bc:32:00:2c:ae:5b:b5:1a:1b:b9:3d:
ba:19:0d:e8:56:9c:06:9a:be:9e:f8:b0:16:e8:23:5b:1c:0f:
fc:31:8b:34:77:4c:4a:cd:4b:48:09:36:53:f7:83:1a:59:06:
ed:9b:b4:20:af:d4:08:95:f1:df:8a:5a:ec:e0:b4:ac:b3:0c:
5e:f3:17:7a:89:71:7a:52:dd:d1:34:db:f4:c9:c4:b8:be:7a:
14:5b:50:8e:d5:4d:65:c8:51:d1:ba:b3:68:e5:da:52:99:82:
ea:95:b4:43:5c:16:e1:11:f4:42:cb:3a:06:21:a9:ec:2b:bf:
98:73:10:9f:88:ba:4d:81:c8:1c:22:7c:67:73:89:78:b6:53:
9e:f6:54:77:a6:6e:a8:35:2e:ef:f0:ae:18:7c:3d:e5:83:c8:
9a:06:ba:37:de:13:34:39:84:d7:18:84:8e:95:b3:79:07:99:
06:86:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 20:35:28 2024 by rpki-client on console-ams.rpki-client.org