Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/frvuaQZXXuytVUiwHlPeqjA44YQ.roa
File: frvuaQZXXuytVUiwHlPeqjA44YQ.roa (raw, json)
Hash identifier: rdW46bcOcQDAAaz2Pg8Hs2gL/ILMotg4ISd5MBZcNi0=
Subject key identifier: 7E:BB:EE:69:06:57:5E:EC:AD:55:48:B0:1E:53:DE:AA:30:38:E1:84
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018ED805DD83BD177D3776B0492CE7CED8C0
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/frvuaQZXXuytVUiwHlPeqjA44YQ.roa
Signing time: Sat 13 Apr 2024 15:14:06 +0000
ROA not before: Sat 13 Apr 2024 15:14:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8480
IP address blocks: 85.143.25.0/24 maxlen: 24
194.190.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d8:05:dd:83:bd:17:7d:37:76:b0:49:2c:e7:ce:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 13 15:14:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ebbee6906575eecad5548b01e53deaa3038e184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:ad:e8:43:87:b9:d3:eb:fd:d4:9f:83:e2:
1e:da:f4:c4:b8:e9:b7:fc:ae:f5:38:41:84:02:85:
0b:c3:b6:78:f7:b4:bb:8b:e4:20:b2:f7:1f:17:fa:
91:60:8a:d0:28:21:dc:3b:d7:e8:a2:a5:75:05:de:
11:1f:ce:53:cf:45:9d:b6:a6:10:61:95:e7:c7:eb:
8a:88:c2:58:29:aa:9f:38:ec:0c:0a:02:93:27:83:
ad:21:a8:91:b6:7c:ce:ca:68:a4:72:45:2a:9f:c9:
d1:3c:1f:83:0f:76:f7:22:86:9c:ff:be:4a:0d:0e:
dd:f4:cd:9a:2a:e4:f7:bb:e5:28:14:61:12:2a:1f:
80:c6:4b:cd:5f:9c:70:8c:bb:a6:ba:0e:44:4a:90:
92:ed:70:6f:f4:a5:91:2b:0f:8c:8f:07:23:37:af:
0a:56:54:82:c3:2b:31:0b:c3:fc:00:78:73:c1:f5:
99:50:1b:bd:38:f7:7f:5b:4e:15:bf:98:40:f2:25:
83:4c:2f:9b:e0:1b:3a:07:1a:84:6f:43:2a:b5:9f:
00:a3:a2:ff:12:8a:b4:61:de:89:a2:67:1f:75:37:
0f:44:00:57:d3:d8:14:e5:25:44:f7:e5:3e:b5:ad:
2f:91:c4:ea:78:23:e9:98:2b:0a:43:f2:01:0a:e1:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:EE:69:06:57:5E:EC:AD:55:48:B0:1E:53:DE:AA:30:38:E1:84
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/frvuaQZXXuytVUiwHlPeqjA44YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.25.0/24
194.190.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:24:f2:18:f6:37:4f:6e:c3:ae:43:06:dd:91:36:33:64:5e:
6d:ad:27:7d:61:59:ba:61:a4:5a:28:95:16:2e:27:50:60:8e:
a1:7e:d2:c0:bb:02:63:25:b7:ab:ba:64:ba:52:70:fd:f3:f1:
60:7c:af:5f:7c:31:20:44:a1:8e:ae:88:0c:b1:a2:9c:43:a7:
04:f3:06:37:f9:d0:5e:84:0c:48:75:47:78:61:e7:44:50:ec:
2f:b9:aa:2c:de:61:d5:90:a2:4c:11:c0:00:ba:e5:2c:00:69:
f7:4e:c8:46:d4:fe:9c:e1:6a:a7:5b:67:7b:78:60:85:e3:bd:
93:11:d6:88:73:5f:7d:cd:a1:a9:06:9d:10:af:8f:93:d5:4e:
ea:98:d5:6b:9a:fc:28:7e:6a:47:7a:15:a5:35:97:d2:13:61:
e8:44:d2:07:1e:34:fa:e5:e8:66:c3:4d:f3:0c:72:55:e3:fd:
d4:dd:c7:77:8b:92:9c:29:51:32:26:06:7a:9e:39:da:41:59:
72:0b:12:8b:47:2b:c4:b8:73:9a:ac:b9:9a:7e:c5:11:dd:56:
90:41:26:7a:df:bf:85:32:8a:7b:a0:19:78:9b:d7:3f:ea:49:
5b:92:e6:a7:fe:d1:9f:c6:3b:66:ce:d2:ce:79:53:5b:a9:85:
b1:1b:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:57 2024 by rpki-client on console-fra.rpki-client.org