Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g8vAni4VtVnCzwA7D75U72BWb_I.roa
File: g8vAni4VtVnCzwA7D75U72BWb_I.roa (raw, json)
Hash identifier: JcVVfvJx500EweZ986Bm9qrrUSo2B5ZzKujWNmuvbrQ=
Subject key identifier: 83:CB:C0:9E:2E:15:B5:59:C2:CF:00:3B:0F:BE:54:EF:60:56:6F:F2
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC72777677E05ECCA13051A3F8999B74D
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g8vAni4VtVnCzwA7D75U72BWb_I.roa
Signing time: Mon 01 Jan 2024 22:31:41 +0000
ROA not before: Mon 01 Jan 2024 22:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51783
IP address blocks: 85.143.168.0/22 maxlen: 22
85.143.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:77:67:7e:05:ec:ca:13:05:1a:3f:89:99:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83cbc09e2e15b559c2cf003b0fbe54ef60566ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:71:b2:cb:ca:74:6c:93:65:9f:db:55:0c:
ea:72:09:9b:b7:c4:f6:fa:00:50:7d:c0:1a:52:58:
18:a5:8b:bf:c4:11:eb:3d:60:b2:fb:fc:d6:f7:94:
0d:d0:a0:0f:55:a1:17:b6:de:2f:b7:05:33:b1:79:
f5:a5:dd:62:43:00:f4:bb:35:88:bf:e3:65:1a:64:
93:e6:83:8c:1a:b4:dc:bc:df:d2:a3:18:64:0f:d2:
01:6f:7a:b9:04:a9:b9:23:b5:6c:27:99:a7:e4:f6:
73:5d:02:7e:82:80:af:9c:a3:88:45:29:b1:03:9e:
5e:0f:a7:9f:7a:b8:24:e2:33:55:01:ee:9a:ae:9b:
65:ef:51:ee:e5:7a:c8:81:43:ab:19:3e:a3:0d:ec:
da:78:1f:05:f0:84:31:4b:e5:c6:46:cf:1f:ad:6e:
38:a7:a4:b7:26:b0:96:41:77:23:44:f9:ac:21:9b:
11:3a:14:90:0f:1b:fa:a9:d8:07:a2:60:7f:f3:83:
fd:d7:85:1b:6d:ba:dc:55:47:2c:ea:c5:b0:de:7f:
3f:f5:49:f9:fd:5c:ea:ea:e5:07:d5:35:05:47:1e:
9e:0d:0a:62:1e:50:58:b6:6d:02:de:1d:d2:09:78:
91:fe:50:6b:ef:a3:2b:f4:d8:d8:0e:63:03:11:08:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:C0:9E:2E:15:B5:59:C2:CF:00:3B:0F:BE:54:EF:60:56:6F:F2
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g8vAni4VtVnCzwA7D75U72BWb_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.168.0/22
85.143.188.0/23
Signature Algorithm: sha256WithRSAEncryption
23:cc:6d:d5:ca:1f:b2:24:96:ba:05:b7:70:dd:b7:5a:5a:14:
72:5c:13:4c:97:08:5c:21:ac:f7:47:fc:72:80:bf:99:d3:09:
94:75:c8:11:b0:1a:d6:42:0d:38:a0:39:33:dd:32:ef:0f:30:
6c:68:e3:9c:0e:14:e9:39:14:3e:aa:08:6f:56:dc:99:7a:bf:
cf:5d:bf:b5:c1:23:d1:23:14:a5:b2:d0:cf:94:8b:9b:8d:5b:
2b:a2:89:00:f1:7d:07:fe:36:e7:1a:38:4f:bf:03:55:d6:bb:
6e:6c:1f:bd:e3:8a:8b:2d:f6:58:7f:cd:0a:d2:99:60:39:62:
ed:dd:68:2d:f6:c4:2f:1c:4c:02:c5:e3:71:29:36:fa:ee:25:
07:94:47:fb:87:3d:15:ff:b2:6f:c4:44:ba:6a:10:b6:cc:2a:
52:24:f1:2a:e1:d0:ed:b4:7a:17:ac:81:1e:66:bd:32:39:76:
79:56:52:a3:18:05:6d:3a:e4:3a:ec:56:af:01:0e:7d:32:80:
b8:b8:63:49:4b:ef:94:27:c0:d0:49:8f:60:34:13:b6:0c:80:
b8:20:6e:2c:7e:33:e9:31:1e:97:0a:91:a3:86:9d:30:77:7a:
bc:b1:98:d9:fa:3e:cb:fa:f5:e0:9a:77:b7:a0:37:d0:0f:c6:
05:78:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:33:30 2024 by rpki-client on console-ams.rpki-client.org