Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/e9dJiiOkhsZ2f2WkaUBg1BPbFg0.roa
File: e9dJiiOkhsZ2f2WkaUBg1BPbFg0.roa (raw, json)
Hash identifier: NULKdR9jxFVUvntmzo+3TMoC39CgnrWh/b+oNy6+zZE=
Subject key identifier: 7B:D7:49:8A:23:A4:86:C6:76:7F:65:A4:69:40:60:D4:13:DB:16:0D
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 0193531511A69D787A26E476C4468A26D416
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/e9dJiiOkhsZ2f2WkaUBg1BPbFg0.roa
Signing time: Fri 22 Nov 2024 08:55:09 +0000
ROA not before: Fri 22 Nov 2024 08:55:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201185
IP address blocks: 185.85.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:15:11:a6:9d:78:7a:26:e4:76:c4:46:8a:26:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Nov 22 08:55:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bd7498a23a486c6767f65a4694060d413db160d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:2a:3a:6a:ff:69:45:c8:03:02:f6:ef:47:
69:3a:9b:78:bc:81:ee:d4:5a:89:8a:c3:0f:f1:7d:
a1:28:1b:53:e0:12:75:7c:ad:4f:60:31:f5:66:85:
10:75:2d:6d:be:45:eb:6b:48:80:81:7c:d4:ee:8e:
67:90:1b:b0:7f:bd:7d:e9:65:0a:7b:bc:25:57:7a:
60:75:d9:3b:0f:2a:98:a6:fc:b3:c2:de:75:41:6e:
59:82:8a:72:60:b0:41:79:6b:5f:09:64:2e:af:57:
a4:6f:9f:1a:77:74:86:fc:dc:a2:ba:05:14:bc:64:
66:33:78:46:8e:0b:78:17:9a:1e:25:05:b1:61:d7:
e2:18:14:47:79:01:6f:dd:a2:ce:93:c6:d6:aa:63:
bc:30:47:65:ae:56:0b:25:a9:f8:8f:d9:42:ad:6e:
da:80:cb:ce:d4:e9:8d:b7:8a:f2:06:fd:01:6a:3f:
4c:41:3f:2f:d2:d8:27:91:d8:e4:a3:b0:ef:36:14:
15:12:27:a2:06:8a:c8:6b:b7:e3:24:b0:95:61:1d:
64:52:78:06:12:4d:3a:e2:2e:22:90:7e:70:b7:2d:
9c:e3:75:df:6f:41:01:ff:32:af:fd:55:85:41:ef:
64:4a:52:d4:db:64:9e:5a:fd:fe:71:f3:fb:b6:0a:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D7:49:8A:23:A4:86:C6:76:7F:65:A4:69:40:60:D4:13:DB:16:0D
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/e9dJiiOkhsZ2f2WkaUBg1BPbFg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.64.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d0:48:77:cf:8e:b2:a1:60:ea:e1:5e:f0:c0:3b:12:e7:0d:
92:c6:54:a8:2c:9d:e5:2f:7b:67:66:4e:25:4c:87:74:92:87:
bb:06:aa:5b:d9:6f:95:3e:da:a1:66:1e:b5:e9:e5:cb:ae:5e:
c7:d0:87:15:37:ad:66:73:08:cf:41:69:b8:b6:fa:68:0f:bf:
7a:0b:30:2c:3b:8c:42:7b:d3:37:5b:1f:77:7b:38:88:47:f5:
ea:29:b1:dd:c4:1d:50:a7:ab:12:e2:e6:32:29:c0:c5:52:98:
79:79:69:b4:98:a0:5a:75:0c:be:c0:cd:ab:47:c0:8c:88:cb:
db:89:73:78:ce:14:29:72:0f:3e:22:47:61:de:23:64:b4:83:
3b:90:0d:8c:c7:2d:6a:43:19:2b:87:5d:b3:35:c5:12:f5:0b:
e4:08:b7:22:1e:ff:b6:d6:c8:2d:58:f2:f2:a1:b7:8a:37:28:
b6:d1:f5:0c:83:09:5c:54:88:b9:ab:34:29:32:a7:a4:ff:56:
ca:31:3d:8e:62:c4:87:42:1e:1d:cb:a3:f8:47:e7:0c:2b:6b:
85:62:f8:7c:ac:d1:e9:9e:50:c2:c9:bf:30:a9:58:02:4e:e2:
b8:47:00:1d:44:4b:0e:2f:bc:c3:e7:77:19:a6:e2:24:c5:7d:
73:25:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:03 2024 by rpki-client on console-ams.rpki-client.org