Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kpQPoBIe8-54AqcKQ9kNBkDUBn0.roa
File: kpQPoBIe8-54AqcKQ9kNBkDUBn0.roa (raw, json)
Hash identifier: 8gAtot1v6bV5U1h5p5zuVvNY3grHFn0wgO/nWe9dTus=
Subject key identifier: 92:94:0F:A0:12:1E:F3:EE:78:02:A7:0A:43:D9:0D:06:40:D4:06:7D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018EA8D1FC372C67ADFA1958F4EA45AF5B3A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kpQPoBIe8-54AqcKQ9kNBkDUBn0.roa
Signing time: Thu 04 Apr 2024 11:15:17 +0000
ROA not before: Thu 04 Apr 2024 11:15:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53363
IP address blocks: 85.208.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:d1:fc:37:2c:67:ad:fa:19:58:f4:ea:45:af:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 4 11:15:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92940fa0121ef3ee7802a70a43d90d0640d4067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:5a:6e:33:0e:50:15:4f:4a:70:d3:d3:4b:
06:07:51:b5:f4:58:95:e0:9f:f0:fc:ea:d4:be:75:
3e:67:a3:74:22:e7:be:8c:8c:44:8e:38:f1:f3:d5:
e1:cb:05:dc:02:65:f6:38:47:c0:51:21:ac:98:05:
f5:31:52:1a:b4:b9:46:71:66:7c:bb:37:07:ba:ca:
c2:ba:1a:de:4d:38:7d:db:49:54:b3:02:af:04:7e:
b2:c6:6c:09:a1:ee:3d:ed:a1:80:a3:05:7b:95:2c:
48:3f:48:ff:b9:ff:ac:f3:f4:ac:8c:6e:d2:93:c7:
a9:64:9d:86:cb:99:6e:53:a1:5e:cb:8b:3e:08:87:
a0:5b:0a:59:80:4d:fb:45:9a:3c:dd:53:76:0b:91:
ce:44:93:20:5f:07:9e:0a:10:b1:e1:f8:49:4f:40:
20:28:fc:ed:8a:94:1d:38:b3:35:e3:86:99:5c:80:
d0:c1:81:e2:bd:27:7b:7d:c5:b9:23:84:46:7d:d0:
fa:39:88:46:dd:3a:f8:6f:92:f2:db:58:f7:43:32:
4e:88:c0:29:71:1b:ab:a7:2f:d6:48:ae:64:9e:58:
75:3a:9f:79:5f:09:f6:3c:72:ed:61:2d:7f:21:58:
d2:a1:4a:a6:ef:e4:66:ae:fd:98:84:aa:3e:f0:b8:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:94:0F:A0:12:1E:F3:EE:78:02:A7:0A:43:D9:0D:06:40:D4:06:7D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kpQPoBIe8-54AqcKQ9kNBkDUBn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.108.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:82:9f:ec:d5:83:be:cc:64:b4:a3:95:1a:76:23:16:93:f9:
cc:35:e0:35:a5:2e:12:43:92:ad:c9:72:61:52:25:3b:22:15:
9d:2f:af:69:ae:bf:be:cf:e1:3d:e2:ee:37:6d:5b:03:05:49:
c9:af:46:b6:34:75:55:60:9a:04:d6:da:68:19:ca:bc:28:9e:
21:4f:39:4d:73:29:6c:2d:31:56:6f:65:27:9c:21:92:99:7b:
21:70:de:40:a7:c5:b0:e5:42:00:35:e8:b5:3a:24:32:fd:07:
56:45:7c:2b:4b:10:57:e7:66:0a:50:a1:27:73:dc:ef:cd:7a:
c5:f4:7e:6c:a8:d5:66:89:5c:53:a1:7c:6e:56:f6:a8:95:b8:
60:49:e2:51:d9:c1:9c:d3:f0:05:e9:74:20:28:93:4f:e1:98:
2b:2c:83:ca:73:8c:63:df:4d:2f:fb:08:ab:a7:80:68:ca:a8:
05:39:d2:0b:da:49:d9:60:c8:1f:a6:d2:5d:e0:dd:49:86:73:
ee:ff:67:5d:f9:b0:35:c7:bd:6b:68:02:24:da:2d:3c:20:42:
5e:98:0d:5d:8f:69:13:07:2f:ef:90:81:92:6d:e9:e0:2e:dc:
53:a5:d1:c5:8e:83:e6:10:1a:0b:34:3b:d5:1c:a1:7e:27:78:
80:cb:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:29:20 2024 by rpki-client on console-fra.rpki-client.org