Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/hb6csWBkoEK5ynNhDHknUkSIjHA.roa
File: hb6csWBkoEK5ynNhDHknUkSIjHA.roa (raw, json)
Hash identifier: AwL5FjGj/Od9OZpUWqWHO2PsGTbYf+X9ZYFg4SmLt28=
Subject key identifier: 85:BE:9C:B1:60:64:A0:42:B9:CA:73:61:0C:79:27:52:44:88:8C:70
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 018CC7940CA1480BB1581E57BD914320685A
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/hb6csWBkoEK5ynNhDHknUkSIjHA.roa
Signing time: Tue 02 Jan 2024 00:30:17 +0000
ROA not before: Tue 02 Jan 2024 00:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2116
IP address blocks: 85.194.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0c:a1:48:0b:b1:58:1e:57:bd:91:43:20:68:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jan 2 00:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85be9cb16064a042b9ca73610c79275244888c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:64:79:0f:9d:a2:0d:b0:e3:67:41:91:1c:
97:03:d7:6f:4c:76:f1:99:c6:31:1f:d1:33:4e:8c:
7e:57:83:c2:ed:ac:85:cc:bb:bd:86:69:83:56:9f:
32:16:19:d8:5e:42:a1:10:23:9a:ec:a8:f2:a2:ac:
05:65:52:f0:9b:93:69:ca:df:50:0f:35:96:ba:59:
18:2e:5b:a7:05:ff:fe:cd:93:0c:48:54:f4:b0:90:
07:8c:fe:6e:f6:20:82:f3:fe:a2:1f:85:61:cd:3e:
c4:92:55:99:7e:71:4f:96:3d:eb:fa:ac:7d:12:78:
e4:6d:e0:15:ef:23:80:40:cf:5b:b5:b4:0f:76:20:
17:b6:b7:81:c9:65:ae:df:83:76:35:83:2b:e5:34:
d4:11:63:4e:21:0e:be:53:a9:8e:cc:e3:15:a5:2f:
6c:e9:cc:57:46:ba:32:4b:97:c7:8e:8b:11:ea:1b:
86:79:88:05:5f:cd:ce:56:c2:e1:c9:c2:01:f7:17:
97:c7:d4:11:a4:36:3e:29:66:74:5a:e5:91:4a:5a:
68:a3:43:c2:62:68:8b:eb:99:66:aa:37:85:61:e3:
46:3a:d1:50:8a:d1:2d:74:71:f4:89:e5:38:6d:c7:
1f:95:14:f5:24:dd:3f:da:92:3d:68:56:98:bc:94:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BE:9C:B1:60:64:A0:42:B9:CA:73:61:0C:79:27:52:44:88:8C:70
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/hb6csWBkoEK5ynNhDHknUkSIjHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.254.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:b0:96:99:1d:f3:2b:06:51:8a:02:4c:c4:20:5b:77:5b:72:
dd:dd:55:69:51:3b:f5:22:1f:a6:d7:ef:a6:97:06:7f:80:d1:
f9:d2:9a:aa:09:66:ac:f1:e1:d9:7e:38:ca:a0:6f:76:49:b8:
7f:66:d9:83:e6:4d:8c:bf:6d:96:89:e3:97:32:e4:5d:bb:b3:
73:7d:ad:72:a0:87:44:25:49:b7:fd:13:fb:bd:f6:95:d7:38:
96:97:88:95:96:5e:f6:cd:bb:23:d0:c0:13:dc:40:d2:1d:ee:
86:49:01:9a:c4:2a:0a:f9:39:d3:8c:cb:8e:51:27:f3:76:39:
02:a8:33:40:f6:3f:9d:22:69:5f:e1:e7:de:c2:df:99:10:4f:
6a:b7:56:bd:61:89:f2:fd:2a:27:dd:c4:aa:e4:94:9c:4d:26:
4d:8a:60:1e:c6:0d:1a:48:0a:37:a6:76:d8:f7:38:bc:ec:bf:
81:87:07:78:c0:33:87:ac:2f:8e:a8:00:2e:db:64:81:5f:5a:
88:7c:18:b9:36:33:26:5d:64:0c:eb:0d:98:88:a8:6a:66:67:
89:da:fd:05:66:57:61:14:1a:b3:4a:9c:af:e7:a6:98:bc:b7:
68:56:e0:78:b5:84:47:e9:ff:e8:86:f7:1c:f8:ee:15:13:c4:
34:20:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:56:30 2024 by rpki-client on console-ams.rpki-client.org