Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/3eO75vVWQ196tgnzacuecub6UQQ.roa
File: 3eO75vVWQ196tgnzacuecub6UQQ.roa (raw, json)
Hash identifier: BaWx5JLIiMkBLfVC8hrMz6mJ4xDbWP4dSenXOlkcwTU=
Subject key identifier: DD:E3:BB:E6:F5:56:43:5F:7A:B6:09:F3:69:CB:9E:72:E6:FA:51:04
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 018CC7946B95E6219CBD0F17478F90CD94FA
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/3eO75vVWQ196tgnzacuecub6UQQ.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203963
IP address blocks: 85.153.47.0/24 maxlen: 24
85.153.112.0/24 maxlen: 24
85.153.116.0/24 maxlen: 24
85.153.117.0/24 maxlen: 24
85.153.114.0/24 maxlen: 24
85.153.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:6b:95:e6:21:9c:bd:0f:17:47:8f:90:cd:94:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dde3bbe6f556435f7ab609f369cb9e72e6fa5104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ca:31:6c:29:8e:7c:2d:f4:b2:bd:e3:74:30:
c7:86:c6:f6:d9:9d:7b:e2:57:32:b7:25:44:38:5d:
a0:d9:dd:cb:94:95:5d:32:85:90:48:d9:a0:b2:fb:
41:14:67:6c:70:ba:61:67:7a:25:2e:a8:c2:76:ed:
3b:dd:32:99:a5:f5:63:70:6e:c3:78:3a:4c:23:9e:
7c:cc:52:d3:86:52:41:40:4a:15:d6:b8:d1:3f:c7:
c0:3e:dd:9e:c5:27:4f:73:30:63:ed:80:de:39:66:
82:93:fe:30:c0:72:af:70:cb:bf:50:20:d5:d3:b4:
a9:31:01:d9:ce:17:c1:7d:2d:64:f9:4e:fc:fe:ab:
00:84:93:2f:96:c6:e7:be:4f:35:7a:9e:ea:03:b1:
41:59:72:6f:98:40:ba:98:90:72:ac:dd:55:09:f8:
19:8d:57:d2:00:a0:3c:5a:2f:88:8a:38:ca:ca:ba:
5c:79:6d:01:9e:5b:21:35:66:5f:04:01:88:0b:1e:
db:18:68:71:39:f2:c1:ca:a1:af:14:08:8a:59:2f:
c7:11:f9:77:3a:f6:c5:c2:7d:ff:7f:40:cc:f5:92:
2b:f9:74:b4:3a:c2:1f:af:44:1f:20:05:e4:3d:da:
60:74:11:b7:51:71:84:29:a4:af:3f:6c:48:89:31:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:BB:E6:F5:56:43:5F:7A:B6:09:F3:69:CB:9E:72:E6:FA:51:04
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/3eO75vVWQ196tgnzacuecub6UQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.47.0/24
85.153.112.0/24
85.153.114.0-85.153.117.255
Signature Algorithm: sha256WithRSAEncryption
43:ed:c0:24:55:f0:b5:e8:a7:6a:66:66:9a:16:c4:d3:01:ba:
3f:ad:77:66:21:a4:02:27:6e:54:de:8b:32:7e:d8:d2:b3:fa:
17:f5:e2:91:cf:19:23:ad:09:de:80:12:bb:64:74:e0:83:de:
04:0f:40:0c:f3:17:c6:57:53:7b:b0:1b:a2:c2:17:01:b9:3d:
d7:33:62:9d:0f:c3:12:56:a2:42:89:6a:a9:ef:1d:b3:69:87:
bc:f6:60:aa:f8:ce:fe:f4:6a:3d:d3:a7:06:3a:1a:e8:3f:86:
bf:9b:50:17:8d:e4:c5:e3:95:ab:80:36:bd:8f:f0:dc:cb:6c:
c5:6e:5b:f0:5a:0c:59:95:36:a7:73:77:33:fd:06:db:96:0a:
f5:51:9b:22:36:a8:fe:81:54:3f:b1:29:8f:7c:ac:b6:84:f8:
d0:a7:6c:c5:b2:d3:5d:74:b7:93:a3:99:37:d5:83:20:a0:f4:
ba:a9:6b:8a:c8:db:1b:0d:74:4b:25:a2:3b:4e:c7:a9:c7:85:
e5:e2:6b:c3:ad:22:9f:09:20:4e:f3:c9:15:f1:d6:1e:df:47:
10:6c:7e:53:14:0a:06:ea:e2:e3:fe:8e:6f:a8:0e:25:5c:41:
51:8f:2b:69:0b:2b:64:84:12:35:80:71:f9:f4:40:43:d3:e0:
9a:75:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:40:26 2024 by rpki-client on console-fra.rpki-client.org