Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/l-77IDOQbkUcUdpR0TzSurRLv8w.roa
File: l-77IDOQbkUcUdpR0TzSurRLv8w.roa (raw, json)
Hash identifier: 6ejYcn8fI6b83xHonM+nLVLzFe7pUqiSLK/B4Reblb8=
Subject key identifier: 97:EE:FB:20:33:90:6E:45:1C:51:DA:51:D1:3C:D2:BA:B4:4B:BF:CC
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 018CCA2A8AFE18938B489F2F928CE23266B5
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/l-77IDOQbkUcUdpR0TzSurRLv8w.roa
Signing time: Tue 02 Jan 2024 12:33:54 +0000
ROA not before: Tue 02 Jan 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211510
IP address blocks: 85.193.191.0/24 maxlen: 24
85.193.190.0/24 maxlen: 24
185.54.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8a:fe:18:93:8b:48:9f:2f:92:8c:e2:32:66:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Jan 2 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97eefb2033906e451c51da51d13cd2bab44bbfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:1e:a4:4a:4e:0e:74:84:2b:13:6e:64:05:
d5:53:d8:98:00:c8:e8:0f:fc:ad:34:d3:8e:53:47:
33:18:94:ea:5a:e2:f1:50:84:fc:fb:c3:26:0b:cb:
b5:eb:ef:a2:32:eb:e7:c8:31:04:82:85:63:18:db:
b7:f5:4d:b8:a6:ac:b3:57:32:ca:52:37:f1:c6:04:
af:37:cf:94:f9:b2:69:53:f9:4d:de:c7:6e:9e:fd:
d0:d8:a5:ea:31:2c:2d:34:b0:55:a2:df:d3:b6:c5:
c2:37:84:2f:7e:30:ae:a7:12:36:65:18:65:4f:b5:
58:52:cf:4a:ca:dc:43:f0:85:8d:be:50:f5:09:6f:
81:54:8c:7f:08:c0:e3:65:f8:69:bb:71:c7:8e:db:
6a:b4:84:6d:82:3e:93:a2:10:1c:c4:69:93:bb:92:
6a:20:8d:91:e2:b7:7a:b0:c8:24:1c:45:50:37:85:
46:de:a9:73:4f:f3:3d:c9:be:c0:ac:e1:0b:cf:11:
13:86:9d:91:e3:6c:37:2d:6e:45:51:35:85:be:92:
ce:5e:b8:10:f9:c7:1f:6f:c8:7b:d9:19:dd:f6:f4:
e0:71:11:8e:9b:9c:6d:bc:74:74:1c:2e:5f:e5:00:
e9:9a:bd:3a:75:38:3b:c6:18:f0:06:89:4f:8b:62:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:FB:20:33:90:6E:45:1C:51:DA:51:D1:3C:D2:BA:B4:4B:BF:CC
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/l-77IDOQbkUcUdpR0TzSurRLv8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.190.0/23
185.54.211.0/24
Signature Algorithm: sha256WithRSAEncryption
98:9e:3e:46:50:32:78:00:b8:c8:4a:af:dc:e2:52:41:c4:77:
ae:21:7b:f1:c0:f0:9a:cc:13:d7:b5:0d:db:c4:02:dc:8f:b5:
be:e1:62:44:92:d0:ae:eb:9d:7d:12:bd:7d:44:89:66:44:99:
8f:ad:fd:06:e5:43:60:8c:8f:61:66:2c:28:db:b6:70:2a:2c:
0e:f5:a4:c6:08:96:68:bc:82:bc:a3:ea:18:8d:c5:1f:00:c1:
6d:f6:4e:5b:d5:99:e6:3b:85:63:41:b0:b5:75:7c:d9:53:6f:
10:77:4f:c8:74:a5:3d:ae:72:21:ef:3f:c8:bf:5b:df:e6:00:
64:8f:2d:a6:7e:da:a3:f1:ee:9c:9c:26:3c:81:3a:78:66:25:
23:12:5d:11:93:9e:42:64:bf:70:8e:12:29:13:ff:c1:7e:1d:
04:db:f7:2e:6b:00:41:82:4e:09:11:fc:0c:a2:86:6f:c2:e0:
80:71:15:7b:93:83:c3:24:75:b3:dc:7a:b0:90:49:a2:ab:a9:
fe:ae:a0:68:1b:4a:7a:68:17:6e:63:21:2f:65:a9:74:ea:a6:
a3:94:98:52:e2:1d:ff:cd:e4:81:eb:b9:e9:07:1c:de:45:9c:
13:a8:b1:db:87:98:4c:07:1f:fd:34:37:9c:10:cf:fe:64:09:
50:80:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:14:56 2024 by rpki-client on console-fra.rpki-client.org