Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1-6ViOLWMSOqXq9WJcJ34mvjxIl8.roa
File: 1-6ViOLWMSOqXq9WJcJ34mvjxIl8.roa (raw, json)
Hash identifier: X5HCDgfLD2ITU3M8hc6TFwg35lAsNG8kKkxJIYsg1f4=
Subject key identifier: FB:A5:62:38:B5:8C:48:EA:97:AB:D5:89:70:9D:F8:9A:F8:F1:22:5F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0193075F39DC98E9412F9EBCC20E002CA1F7
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1-6ViOLWMSOqXq9WJcJ34mvjxIl8.roa
Signing time: Thu 07 Nov 2024 16:05:01 +0000
ROA not before: Thu 07 Nov 2024 16:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 85.142.192.0/22 maxlen: 24
85.142.222.0/24 maxlen: 24
85.142.231.0/24 maxlen: 24
85.142.234.0/23 maxlen: 24
85.142.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:5f:39:dc:98:e9:41:2f:9e:bc:c2:0e:00:2c:a1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Nov 7 16:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fba56238b58c48ea97abd589709df89af8f1225f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:4c:b2:93:66:3f:cd:e0:8c:54:e2:3d:14:
79:5d:a2:f2:d1:e1:fb:ec:1e:f8:f6:73:19:5c:3a:
e5:1f:2d:d6:7e:9a:ae:24:9a:85:46:22:f6:09:1e:
3e:2e:68:0c:14:0c:88:55:4b:98:e4:3d:ee:e4:3d:
52:88:b8:45:82:e3:1e:74:d2:50:c1:ec:74:2f:b5:
ac:fa:6b:45:2b:8f:42:91:91:8d:7b:a3:ce:38:90:
ec:7e:db:c8:85:45:9c:09:4f:60:3f:70:48:c6:5e:
1b:ef:21:06:c9:9a:cc:e8:f2:c7:79:20:fa:a6:6d:
81:68:9f:41:20:4c:85:b6:0b:55:16:dd:20:a9:ba:
7b:fd:92:01:d8:fe:6a:8c:33:55:f2:b0:cb:19:be:
52:ca:f1:31:88:38:62:8a:30:02:3d:67:59:2d:d3:
20:ae:83:d5:83:30:0a:24:c7:6d:66:0a:a2:d8:5b:
4a:2b:16:a3:65:7b:eb:c8:55:79:ed:0c:2c:81:f4:
25:d9:a4:b4:53:1e:21:8e:68:c7:82:7a:e1:46:be:
ff:29:7f:78:59:53:b3:89:74:ea:0a:10:4b:a9:15:
5e:b3:43:1a:bd:15:96:23:30:64:0c:dd:38:58:67:
36:1c:d6:df:02:e7:57:46:72:41:51:08:88:fd:65:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A5:62:38:B5:8C:48:EA:97:AB:D5:89:70:9D:F8:9A:F8:F1:22:5F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1-6ViOLWMSOqXq9WJcJ34mvjxIl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.192.0/22
85.142.222.0/24
85.142.231.0/24
85.142.234.0-85.142.239.255
Signature Algorithm: sha256WithRSAEncryption
60:91:e0:d3:b8:b8:9e:5c:7d:78:9d:86:f9:65:f2:e5:54:97:
55:3f:89:91:91:9d:29:43:44:66:e2:19:76:31:31:5b:54:7f:
6a:dd:d3:17:29:b1:a9:94:49:b2:ba:6f:18:60:dc:2f:63:59:
d2:a8:19:99:38:ae:a8:a5:2a:cc:b3:3c:54:2e:52:46:81:8e:
0f:f9:9f:48:55:80:16:0c:54:7c:58:11:d5:c5:d6:e4:53:43:
65:16:03:0a:4a:62:91:f1:4d:41:67:3e:04:f4:f0:61:9b:21:
c4:20:d4:c1:77:57:f8:b2:70:9d:0f:2c:12:cf:58:2b:5f:81:
b6:ba:64:f8:57:fa:6c:01:da:78:f3:b1:71:0b:a1:34:f2:e3:
3b:35:15:9a:72:66:e0:f0:2a:de:f0:85:45:23:b7:32:84:c9:
df:32:90:fd:d6:f1:61:82:ba:ad:10:94:bb:a0:78:68:7f:f8:
d7:7a:51:77:17:fd:dc:2f:e6:48:18:c2:c0:e4:60:52:ee:7a:
ed:3b:5a:d4:cc:e6:1a:4e:c6:30:98:11:e1:77:c2:ba:57:de:
e7:e9:3c:4f:f4:79:b3:2f:45:04:1d:bd:0d:67:7a:ef:b0:e4:
33:e7:ff:55:16:83:0a:c4:fd:72:1b:71:b2:46:08:a1:32:9c:
e4:84:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:15 2024 by rpki-client on console-ams.rpki-client.org