Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/j2PubwEg-On9RhU8sCTyu3x-wV0.roa
File: j2PubwEg-On9RhU8sCTyu3x-wV0.roa (raw, json)
Hash identifier: VqZm70ZaTRvLNUGAs3GmvOqNYpbHKxWeZz/ue8PINL8=
Subject key identifier: 8F:63:EE:6F:01:20:F8:E9:FD:46:15:3C:B0:24:F2:BB:7C:7E:C1:5D
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 018F054CACE95B5BA8FD467474B9A45EA9B8
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/j2PubwEg-On9RhU8sCTyu3x-wV0.roa
Signing time: Mon 22 Apr 2024 10:14:22 +0000
ROA not before: Mon 22 Apr 2024 10:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 85.153.16.0/22 maxlen: 22
85.153.20.0/22 maxlen: 22
85.153.48.0/22 maxlen: 22
85.153.76.0/22 maxlen: 22
85.153.96.0/22 maxlen: 22
85.153.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:4c:ac:e9:5b:5b:a8:fd:46:74:74:b9:a4:5e:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Apr 22 10:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f63ee6f0120f8e9fd46153cb024f2bb7c7ec15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e5:eb:cf:e6:23:56:22:b6:71:dc:d6:16:07:
32:b2:b4:fd:96:61:2d:b6:85:29:00:aa:54:89:a7:
fc:28:c9:3e:80:17:1f:6f:35:55:f0:e0:55:0d:d2:
2c:88:5d:f0:70:9a:03:f6:47:e9:09:55:4e:2e:b6:
1c:d7:16:b4:93:fc:19:8e:bb:07:6c:35:f1:70:be:
65:52:36:58:4c:0e:63:63:52:b6:e4:ca:0c:3e:b6:
b0:45:06:bb:b2:db:c6:6f:40:97:02:c6:c9:8b:e4:
a2:2d:3c:57:d7:cf:15:11:60:02:41:08:45:a2:bd:
31:e7:a9:1c:d9:08:7c:3b:3d:8b:02:87:ae:af:b8:
98:9d:fc:d4:a5:f4:8f:72:20:97:ad:04:ed:28:ef:
07:44:70:6f:c3:0a:56:9a:0b:11:60:95:3c:86:7a:
87:e1:da:4a:67:38:cf:07:8d:e2:52:8d:d7:d4:c8:
35:6f:23:46:97:1c:6f:06:b0:ba:e7:08:8b:af:ea:
77:a5:dc:e7:a5:f4:8f:c2:72:f5:cf:c9:f4:6a:cc:
08:f5:f3:8a:b6:94:7f:f6:8c:70:50:81:55:ec:75:
f7:6b:56:5d:db:09:4a:75:6e:cd:f6:fa:a8:89:61:
c7:a5:f6:63:d3:fe:83:22:e7:77:45:40:5b:14:df:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:EE:6F:01:20:F8:E9:FD:46:15:3C:B0:24:F2:BB:7C:7E:C1:5D
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/j2PubwEg-On9RhU8sCTyu3x-wV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.16.0/21
85.153.48.0/22
85.153.76.0/22
85.153.96.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:77:26:2b:20:39:6c:6f:38:14:bb:61:e5:a9:d2:b6:f5:ac:
58:dc:0c:9f:a7:0d:9b:91:7f:7b:72:f2:43:20:24:61:00:0b:
8b:64:2b:f4:a5:9d:9a:59:ec:73:01:d4:89:f8:fe:9b:42:b3:
a8:f4:87:bf:9f:bf:78:00:d5:8f:80:58:5b:e2:b2:af:71:c6:
1f:e1:94:9f:9b:75:41:8c:a0:eb:ee:4a:88:6a:9f:f0:d2:5a:
4e:9c:ab:de:d3:28:66:e2:e9:c8:53:72:38:20:37:19:b8:f8:
28:39:01:5d:e0:3a:67:55:cb:d2:10:fb:9e:ea:fc:1e:60:ea:
7a:13:a9:75:c3:b6:6d:d8:c0:58:ab:50:e3:b0:9e:dd:01:cc:
d9:11:09:97:98:48:7a:f4:60:de:93:14:6d:5b:61:03:89:61:
67:55:16:ef:66:0f:6b:ea:df:d2:88:17:f8:46:8a:8e:9e:f2:
98:c7:db:61:87:86:5a:14:f7:1c:fa:f6:db:92:fc:e7:48:04:
8b:97:93:f8:a1:09:2b:12:4d:a9:27:15:c2:a7:fe:da:80:e0:
ec:f1:f5:4c:0a:f5:bd:cf:76:4d:e9:20:69:fc:24:98:d7:22:
b2:2d:bb:46:51:87:ac:23:5c:a8:75:e1:d2:93:26:3e:a5:06:
8a:85:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:09:44 2024 by rpki-client on console-fra.rpki-client.org