Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/A04gDvcOtx3oLCcHZ-woVhnKAwE.roa
File: A04gDvcOtx3oLCcHZ-woVhnKAwE.roa (raw, json)
Hash identifier: HI7GBazOR60FE7SlyQHFmmJ42TUEDI6WRYMXHBUPs4I=
Subject key identifier: 03:4E:20:0E:F7:0E:B7:1D:E8:2C:27:07:67:EC:28:56:19:CA:03:01
Certificate issuer: /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial: 018CC7275CF3B246FD204DAF023E024973A4
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/A04gDvcOtx3oLCcHZ-woVhnKAwE.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44622
IP address blocks: 85.202.224.0/21 maxlen: 21
85.202.224.0/20 maxlen: 20
85.202.232.0/21 maxlen: 21
91.209.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5c:f3:b2:46:fd:20:4d:af:02:3e:02:49:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=034e200ef70eb71de82c270767ec285619ca0301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:bd:da:0d:0c:2f:e9:b9:81:aa:a5:27:7f:
7a:b8:35:74:d9:c2:04:91:64:85:54:79:b9:79:a4:
25:ac:11:bd:6f:27:8a:08:3b:19:b0:ea:e7:3e:e0:
50:94:57:73:5c:a3:47:02:87:a6:36:f6:ce:3a:7d:
f0:54:70:8b:a6:f4:4f:2e:b7:54:17:2b:32:3e:6a:
e2:19:90:a4:71:b7:00:86:77:63:08:98:b1:78:f6:
f6:5b:98:15:e8:f2:79:a1:12:05:20:be:4a:88:58:
23:aa:08:18:13:f3:1b:b0:e4:43:46:05:13:7b:3c:
39:7d:8f:87:08:bc:34:39:8b:c5:5e:6b:c7:c8:88:
62:25:e7:ce:1a:7d:8e:52:72:7b:b5:e0:c3:88:94:
64:93:eb:24:a3:fb:14:a2:b8:ec:fa:f4:04:d3:db:
13:e5:34:8b:f6:18:41:ce:61:e5:16:7a:9f:27:21:
ec:30:3b:8f:af:22:24:f1:fd:2a:d1:19:d4:d7:4a:
46:8c:61:97:c9:72:c0:15:8c:70:91:23:0f:46:c1:
b8:e1:dd:85:c9:ea:27:db:25:42:b7:26:73:a1:01:
fd:74:30:54:ba:6b:e0:bf:87:ac:21:4a:54:35:e8:
d0:3c:96:b7:97:c5:9d:e4:e3:72:b3:4e:0a:18:97:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:20:0E:F7:0E:B7:1D:E8:2C:27:07:67:EC:28:56:19:CA:03:01
X509v3 Authority Key Identifier:
keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/A04gDvcOtx3oLCcHZ-woVhnKAwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.224.0/20
91.209.218.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:b3:0d:e5:f1:94:cc:da:52:68:2d:84:a4:80:13:c3:04:2c:
32:83:da:4a:97:31:2e:4b:4e:2a:58:6f:e4:9e:cd:1e:1f:d8:
6c:d8:29:db:92:7a:6e:fe:0f:d9:23:ea:de:2f:53:97:ff:c8:
e5:e8:eb:0d:55:38:6f:a3:4c:5a:cf:ca:e3:a9:5e:26:dd:90:
83:4c:7c:52:48:c7:d8:97:9c:f1:e6:92:30:90:84:7f:72:a3:
bb:c0:90:bc:1c:aa:a1:cc:5f:11:82:f9:e8:ab:5b:f1:b1:f9:
81:77:69:5e:8b:51:0a:56:a6:53:e4:cd:52:7e:d7:6f:33:00:
41:ab:e3:fd:a9:f0:17:f2:b1:75:13:23:11:5f:02:7d:44:3d:
eb:07:2c:05:9b:35:3d:d7:99:28:17:fb:f4:7d:75:fc:93:c1:
be:18:f4:6f:84:f9:b8:55:79:3a:33:26:73:55:ba:8d:04:d1:
0c:e3:03:b9:e2:01:07:10:ee:e6:dd:67:0d:25:19:4e:07:f1:
61:7c:a2:f0:90:86:51:fc:56:e9:2a:ae:b8:67:0f:0d:0a:f6:
8c:39:3d:e1:4a:9b:c2:4d:c8:52:0b:2c:2d:fd:f6:f9:49:ff:
6c:e3:fd:a9:4f:27:e4:6f:9c:09:b8:83:2e:e6:29:31:0c:0c:
32:88:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:59:42 2024 by rpki-client on console-fra.rpki-client.org