Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/OH2kKMqYcgKyygi7y6pydCiFhvU.roa
File: OH2kKMqYcgKyygi7y6pydCiFhvU.roa (raw, json)
Hash identifier: 0RHPWiBEqkk4Smbw6eXYn09sXEzKF1fr2W+tXbP5Cjc=
Subject key identifier: 38:7D:A4:28:CA:98:72:02:B2:CA:08:BB:CB:AA:72:74:28:85:86:F5
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 018CC348EA18170B93DAE5FA49C596C599FF
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/OH2kKMqYcgKyygi7y6pydCiFhvU.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202806
IP address blocks: 85.234.102.0/23 maxlen: 24
85.234.114.0/23 maxlen: 24
2a0a:6f40:2::/47 maxlen: 48
2a0a:6f40:4::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ea:18:17:0b:93:da:e5:fa:49:c5:96:c5:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=387da428ca987202b2ca08bbcbaa7274288586f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:a1:cb:56:47:01:9e:70:68:e7:e4:88:00:
d9:2b:8b:09:8b:a3:34:eb:f2:5e:89:e1:dc:d8:f1:
48:87:98:d7:54:75:71:a5:5b:25:eb:bb:4b:d6:af:
13:e1:4c:8b:dc:ae:61:dc:77:bf:d5:18:ee:7c:c5:
88:86:ef:e7:59:d5:5d:d7:d2:bc:04:59:c9:c3:fc:
4e:f3:b6:ea:4d:f0:5e:4e:f2:56:5d:06:5e:94:1a:
11:45:ae:28:82:eb:3d:62:86:b5:a6:15:83:1c:f3:
6b:f2:89:25:e6:3d:67:12:24:00:6e:d5:ef:37:1d:
8e:d2:28:5f:4a:43:b1:1e:08:de:ac:77:9a:b1:3e:
9d:02:7d:5e:99:2c:83:6c:f3:bf:4a:9b:ce:08:ab:
3b:43:19:58:5a:51:61:32:0e:af:10:33:33:ec:a9:
d2:33:86:a5:bb:e4:1d:b8:c4:32:8b:cb:9b:8c:26:
7e:aa:4f:2b:18:da:f7:2f:4a:63:00:4d:d8:36:95:
e6:d3:54:83:6b:f4:f2:1e:ca:99:2f:fe:eb:ba:97:
d3:07:aa:44:8d:29:28:88:a3:ff:f1:57:17:67:f2:
41:e2:ee:d5:19:b2:67:46:f1:07:6d:56:ad:c2:d9:
82:0f:38:1c:87:c6:15:86:ab:ea:b8:27:d5:39:f4:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:A4:28:CA:98:72:02:B2:CA:08:BB:CB:AA:72:74:28:85:86:F5
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/OH2kKMqYcgKyygi7y6pydCiFhvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.102.0/23
85.234.114.0/23
IPv6:
2a0a:6f40:2::-2a0a:6f40:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:0c:06:a2:6e:83:8b:3e:06:9f:bc:8e:0c:56:e0:e5:7b:67:
f1:8c:52:1e:f6:6b:08:92:38:ef:73:de:cd:07:f1:2e:23:e7:
0a:44:52:f2:e5:df:b7:d5:c8:26:45:ac:89:4b:0c:22:bc:ea:
df:5f:4a:fa:ff:cc:28:92:58:2e:d5:27:91:90:3b:a0:ee:1b:
8d:51:af:68:66:42:1f:2e:b8:8c:bb:33:a9:13:c0:bc:1b:f2:
65:d9:ca:42:ab:79:20:39:fe:f1:60:88:80:30:ad:b9:20:50:
f8:2c:39:ab:7e:7b:1d:12:2b:46:32:b3:99:12:93:ba:c7:c0:
7a:de:b8:e1:a0:d7:48:e4:cf:1a:79:4a:6c:e1:8e:db:30:bb:
78:3a:e6:bf:5c:4d:d7:03:51:82:5e:d8:e8:d7:47:27:77:29:
6f:9c:e3:3e:67:45:3e:27:58:2a:f1:e5:11:56:d3:00:6a:91:
d5:35:e1:cd:4a:c6:ff:ec:25:6f:a9:bd:a1:d3:0e:97:b3:f8:
84:a8:70:26:3e:27:f9:9b:ca:8c:75:65:e5:f0:bc:be:3f:b1:
a1:c7:d1:56:ce:6b:b0:56:a1:5a:cf:62:58:45:b7:9d:d0:c9:
3f:71:80:5b:e7:d8:5c:16:49:9e:01:a9:92:98:02:c5:20:b5:
73:74:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:25 2024 by rpki-client on console-fra.rpki-client.org