Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/DJm-iSmzMk5loXiXtuy9OfWbKA0.roa
File: DJm-iSmzMk5loXiXtuy9OfWbKA0.roa (raw, json)
Hash identifier: ciquzsk20UFIv1FAJthHfs186zKmVTAFE+j/WDiv1ZM=
Subject key identifier: 0C:99:BE:89:29:B3:32:4E:65:A1:78:97:B6:EC:BD:39:F5:9B:28:0D
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018ED8031E80B81AC017E05A533F4DFBD6CD
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/DJm-iSmzMk5loXiXtuy9OfWbKA0.roa
Signing time: Sat 13 Apr 2024 15:11:06 +0000
ROA not before: Sat 13 Apr 2024 15:11:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8941
IP address blocks: 85.143.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d8:03:1e:80:b8:1a:c0:17:e0:5a:53:3f:4d:fb:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 13 15:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c99be8929b3324e65a17897b6ecbd39f59b280d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:6c:38:57:4d:fe:23:b7:d0:7a:c7:9e:41:
e5:fd:4d:7e:65:18:fd:b5:ff:7b:77:8f:d6:2d:61:
86:12:09:aa:9b:ae:82:94:26:7f:ea:89:d5:db:02:
1c:4d:77:0e:8b:d5:3e:95:18:af:e5:e3:44:db:e7:
42:a2:c6:ca:82:bc:78:9f:99:19:03:6c:d5:c7:d3:
d3:93:bd:2b:2c:85:4b:43:70:48:b8:d5:33:bd:05:
c3:74:58:4a:f8:5f:41:34:85:50:12:a5:a0:a9:a1:
c2:e0:f0:1d:6b:38:be:1d:bb:52:7a:26:3a:30:de:
09:7a:d7:bd:31:44:2a:d7:c8:c5:0b:dc:bd:31:4e:
b3:e2:f6:0f:b1:e7:2c:52:a2:22:4a:b9:92:e2:52:
27:7c:9d:71:9a:40:64:73:8d:2c:75:16:ee:3d:f8:
b6:4b:36:0c:08:d0:d6:8a:40:c8:f8:4f:68:35:8d:
5e:bf:4d:48:11:6c:a0:3c:81:1a:70:48:cb:db:e7:
ae:e5:10:53:b8:d4:7d:ae:5c:6b:31:3a:76:ee:8d:
18:29:55:51:f3:f3:21:31:06:b2:4e:1f:eb:61:56:
9c:a1:2d:36:4c:59:24:17:4e:f2:1e:12:9d:01:48:
fe:c6:1f:ed:54:5d:69:4c:ba:8d:c2:d4:f5:99:05:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:BE:89:29:B3:32:4E:65:A1:78:97:B6:EC:BD:39:F5:9B:28:0D
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/DJm-iSmzMk5loXiXtuy9OfWbKA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.20.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b4:9d:a2:be:5f:00:a1:66:b7:af:fb:d4:3d:74:27:65:79:
f0:48:d8:35:95:e9:f7:00:68:52:fd:72:c7:b9:98:b3:fd:54:
ac:05:02:d5:7e:43:48:5e:5a:13:2e:4e:a9:b3:db:e5:1c:79:
b9:18:58:10:4f:a6:9f:fe:8f:43:8b:ed:82:d8:28:35:d3:bb:
94:30:2e:9e:c5:19:c4:6e:2d:d5:e7:fb:31:80:96:a5:fe:03:
d4:1d:97:46:25:a4:c0:3a:ff:6e:e0:ed:b0:b4:e7:4f:ee:07:
1f:1a:ef:b5:5c:25:f3:85:eb:de:c2:a1:f0:dc:64:4b:7f:ba:
0d:45:af:0f:14:e9:3e:91:08:30:40:9e:a7:fb:eb:71:61:8a:
cc:09:30:4c:ba:dd:a6:be:f7:ac:07:55:a2:e8:e1:ad:c9:b8:
e5:27:5e:88:2c:cf:1e:59:81:05:d1:68:2d:c9:9e:f4:93:bd:
3f:f0:da:a6:83:bc:05:2b:e2:c5:30:02:46:95:82:98:99:6f:
c3:3d:0b:b8:f3:23:39:7f:91:b6:be:31:ec:e5:36:4f:10:68:
c1:5c:4b:2c:46:65:1e:f3:08:0b:c4:38:6c:72:94:9f:c0:e9:
67:59:85:2e:64:bb:af:9a:f1:e3:37:b9:e6:9d:b4:1a:1d:ca:
28:d1:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:54:47 2024 by rpki-client on console-ams.rpki-client.org