Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/F9VxMO2QGdElpCOsAJW153-2hvM.roa
File: F9VxMO2QGdElpCOsAJW153-2hvM.roa (raw, json)
Hash identifier: UtRSPaGesiGJyGavSnxnQpzMaAntH93/L/Do5cep1vg=
Subject key identifier: 17:D5:71:30:ED:90:19:D1:25:A4:23:AC:00:95:B5:E7:7F:B6:86:F3
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 01932A46E75263E079C5B6053C0AFBD8537E
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/F9VxMO2QGdElpCOsAJW153-2hvM.roa
Signing time: Thu 14 Nov 2024 10:45:10 +0000
ROA not before: Thu 14 Nov 2024 10:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 85.115.204.0/24 maxlen: 24
85.153.12.0/22 maxlen: 22
85.153.24.0/22 maxlen: 22
85.153.35.0/24 maxlen: 24
85.153.36.0/22 maxlen: 22
85.153.40.0/24 maxlen: 24
85.153.41.0/24 maxlen: 24
85.153.42.0/24 maxlen: 24
85.153.48.0/22 maxlen: 22
85.153.52.0/22 maxlen: 22
85.153.59.0/24 maxlen: 24
85.153.60.0/22 maxlen: 22
85.153.65.0/24 maxlen: 24
85.153.66.0/24 maxlen: 24
85.153.67.0/24 maxlen: 24
85.153.72.0/24 maxlen: 24
85.153.73.0/24 maxlen: 24
85.153.88.0/22 maxlen: 22
85.153.96.0/22 maxlen: 22
85.153.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:46:e7:52:63:e0:79:c5:b6:05:3c:0a:fb:d8:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Nov 14 10:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17d57130ed9019d125a423ac0095b5e77fb686f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:47:44:33:b5:e3:38:4b:80:8a:0f:39:bc:
9c:80:8f:51:25:dc:9c:b7:fd:f7:d8:bb:69:45:38:
00:b2:80:21:fc:06:83:0e:bf:18:ce:ab:09:7d:97:
f4:bd:51:ee:e7:75:b2:63:08:34:05:38:9b:28:dc:
0f:7c:f6:48:bd:1e:cc:e3:06:45:c8:3b:4d:8d:54:
e1:2e:92:68:07:ff:a4:cf:d1:21:7d:ce:18:45:c6:
a2:b6:f7:85:4b:5b:32:1f:5c:fe:92:97:7c:ce:bf:
7e:68:fb:5e:c1:9c:2c:a3:d0:a6:4e:cb:7c:e8:f1:
e0:61:e7:2f:f4:f8:cb:e8:38:95:97:a1:94:3c:01:
0f:10:9e:3f:a6:da:31:30:09:78:3e:2c:6d:64:28:
9d:db:fa:f2:bb:19:94:b8:cb:26:82:e8:25:50:d2:
61:af:b3:ae:5b:fb:dd:a2:36:29:bc:77:38:92:0b:
25:94:fd:d9:c7:0f:5d:7c:ef:b3:05:48:aa:78:27:
7f:c4:d6:f7:27:e9:56:7c:7c:e8:07:01:62:23:bc:
8d:cf:ed:91:b8:5f:51:86:26:51:52:3f:36:c2:cd:
51:60:08:8b:6a:31:b2:19:44:37:60:99:da:44:b4:
9d:a0:04:c4:68:e2:85:2e:52:5e:b4:d4:31:4f:d8:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:71:30:ED:90:19:D1:25:A4:23:AC:00:95:B5:E7:7F:B6:86:F3
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/F9VxMO2QGdElpCOsAJW153-2hvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.204.0/24
85.153.12.0/22
85.153.24.0/22
85.153.35.0-85.153.42.255
85.153.48.0/21
85.153.59.0-85.153.63.255
85.153.65.0-85.153.67.255
85.153.72.0/23
85.153.88.0/22
85.153.96.0/22
85.153.114.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e1:e7:b1:8e:c9:ca:bd:87:1a:d5:bb:07:b8:0b:64:24:81:
e7:a1:52:5c:89:ef:a7:dc:43:e3:77:fe:59:c8:84:fa:9b:5b:
c3:4d:a4:5f:79:82:9f:7c:ce:70:a5:a5:17:be:58:60:5a:90:
84:2e:10:a6:7c:19:89:dd:36:c5:57:80:f2:d8:0b:98:19:3c:
d1:3c:fc:68:84:4a:b9:c1:48:cb:27:d4:56:02:b4:7f:a6:45:
4d:bd:83:58:16:d5:1e:8b:38:f1:5c:9c:d8:16:37:7a:4f:89:
df:48:d9:7c:93:b4:3d:e0:1c:eb:c7:67:4f:6a:c1:1a:a4:6a:
6f:f4:eb:f5:79:b4:be:97:2b:28:e5:6a:fc:88:87:47:4a:4b:
bb:05:d4:4a:52:f4:18:bd:cf:c9:d8:4e:b8:5d:e1:e0:46:96:
ad:ea:ae:70:db:b0:16:54:26:d0:4a:da:7d:78:6f:59:d4:fc:
2f:25:76:0b:b9:ff:f8:05:32:ee:5b:3f:1a:3f:4a:2c:a5:39:
5a:c3:c2:57:64:27:22:cd:70:3b:7a:a3:53:dc:59:98:b9:53:
b0:9a:5c:b9:04:59:89:c1:c0:31:41:d6:d0:f8:2b:da:b0:37:
9d:64:07:d6:9b:17:a0:51:5d:19:a5:77:76:82:d0:f7:61:1a:
8d:da:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:37:14 2024 by rpki-client on console-fra.rpki-client.org