Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/O9SFi-ED4GJKfTmDDcqt6nRclB4.roa
File: O9SFi-ED4GJKfTmDDcqt6nRclB4.roa (raw, json)
Hash identifier: SPsJpazPJl3NNjciM6g2Gtsl+Cmq9iBy9cfIMFJEiqA=
Subject key identifier: 3B:D4:85:8B:E1:03:E0:62:4A:7D:39:83:0D:CA:AD:EA:74:5C:94:1E
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 018CC7946A2E12B28E6BC61C999E9C9336C9
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/O9SFi-ED4GJKfTmDDcqt6nRclB4.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 85.153.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:6a:2e:12:b2:8e:6b:c6:1c:99:9e:9c:93:36:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bd4858be103e0624a7d39830dcaadea745c941e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:40:fe:8d:e6:2e:86:9e:c7:18:dd:e4:06:
ae:5d:f8:5f:5e:34:ab:45:e9:b9:da:eb:f4:96:36:
30:82:11:47:24:06:f0:97:82:2a:70:d1:f8:45:8c:
d3:77:05:b9:cf:6a:3f:c5:94:c2:8a:60:3f:de:ee:
c9:fb:50:71:b3:cb:a8:20:e1:93:82:01:9f:28:02:
e4:96:57:b3:c9:a9:27:c3:bf:13:78:12:1f:99:1f:
dd:81:e9:c9:7f:ba:d3:37:df:ce:ce:6c:38:9a:91:
1d:26:00:c1:cf:6d:0c:3e:44:7c:57:a2:f4:4b:b7:
51:48:58:d8:c8:b2:9e:5f:73:89:58:9f:6a:bc:b8:
4b:11:c5:f8:0a:25:aa:c0:7a:87:d2:b3:2c:32:19:
82:64:b8:3f:7c:36:16:96:75:2e:93:55:66:bf:01:
12:48:c6:60:11:e0:27:e6:86:ba:34:9d:1d:42:10:
fd:93:ea:d1:80:89:11:ee:13:57:3a:f4:5b:46:e2:
3b:be:9c:2e:5f:cb:b7:53:c1:3f:61:d2:03:2f:43:
57:ba:3f:0f:22:1b:18:39:93:cb:8e:fb:a6:f1:02:
7c:4a:43:59:af:f1:3b:4a:0b:7b:30:8b:0c:31:9b:
9c:c7:e5:22:67:1c:e0:cd:06:8f:fe:72:e5:2c:d9:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:85:8B:E1:03:E0:62:4A:7D:39:83:0D:CA:AD:EA:74:5C:94:1E
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/O9SFi-ED4GJKfTmDDcqt6nRclB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.11.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ea:55:aa:e6:95:07:e5:3d:51:bc:a9:f3:4c:34:39:37:48:
90:9a:9e:8e:26:ed:1d:f2:c4:ac:3a:e4:1d:8a:18:1c:f8:df:
1a:ae:72:12:3b:41:d8:71:5b:5b:ed:71:5b:db:8d:d8:66:30:
3e:23:30:bb:65:f6:39:47:18:7a:d5:ee:c5:96:ea:22:6a:91:
5c:ef:bb:3b:ab:60:11:52:93:34:e6:18:00:03:80:9a:ee:b0:
07:e1:6c:f1:60:0b:2c:ee:88:1e:b3:3d:5b:4f:e0:0d:83:00:
22:9d:c7:66:85:78:ec:87:91:80:7f:73:7f:f2:ac:38:2a:95:
9d:24:75:44:77:f7:23:21:3d:f3:ba:01:93:c7:a6:fa:36:0c:
b6:0c:45:ed:3d:5a:f4:f3:a1:d2:c0:9f:7b:31:be:da:0e:c0:
96:7e:57:3f:ab:c4:97:c5:90:9c:4c:e3:e0:e6:2e:cc:18:a8:
5d:33:7d:70:3e:ea:d3:b1:c3:cd:a6:ed:11:08:00:a5:15:dc:
f1:69:a8:2a:34:9d:b4:f9:2b:da:62:6b:77:8b:29:8d:6c:db:
33:81:c4:a7:4d:cd:30:de:41:3b:b7:d5:a9:22:86:0a:3d:78:
bf:9e:b6:ef:2d:45:94:2e:03:cf:1f:7e:c1:10:9e:45:c4:f4:
56:30:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:45:49 2024 by rpki-client on console-fra.rpki-client.org