Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/0ccDbi9UgXgSY3RCU2sGmSifiD0.roa
File: 0ccDbi9UgXgSY3RCU2sGmSifiD0.roa (raw, json)
Hash identifier: wezi8p49jSWjYUisfaSLoJI5KdvYBvIqnIEYVANFBIY=
Subject key identifier: D1:C7:03:6E:2F:54:81:78:12:63:74:42:53:6B:06:99:28:9F:88:3D
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01902F86B01A796DB89BAF0843D519EDCDE8
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/0ccDbi9UgXgSY3RCU2sGmSifiD0.roa
Signing time: Wed 19 Jun 2024 08:04:34 +0000
ROA not before: Wed 19 Jun 2024 08:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216319
IP address blocks: 85.28.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:86:b0:1a:79:6d:b8:9b:af:08:43:d5:19:ed:cd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jun 19 08:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1c7036e2f54817812637442536b0699289f883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:85:92:cd:d5:8e:af:a6:c8:77:2a:c1:c5:
d8:02:85:9d:6e:43:85:11:39:81:c6:5d:e1:84:6f:
31:fd:6a:c5:aa:1c:20:74:b4:44:22:a8:b1:92:26:
ee:19:2d:fd:c4:57:87:3d:5e:d6:51:8c:45:ac:40:
b3:4e:47:0c:dd:1b:5f:9a:b0:ba:23:c1:f5:2c:e5:
d7:1e:44:23:64:24:9c:be:44:b9:db:d5:ae:c1:f2:
fa:b6:40:8b:b9:c1:77:fd:1a:8c:d5:4b:3d:e8:4a:
bd:57:b2:31:02:fb:5e:12:7f:e8:bd:d5:06:15:a0:
16:57:44:2d:bd:94:0e:3c:4c:42:87:08:57:bf:94:
b8:a5:bd:3c:7b:41:19:8f:21:0e:22:58:01:ba:5d:
45:d0:96:b6:a4:52:74:94:4b:63:b5:84:77:67:fc:
8b:95:8e:0f:f6:36:7a:74:2d:fb:5d:3c:68:65:d7:
4a:3c:70:a9:6f:75:27:34:64:cd:77:10:99:19:71:
6e:3e:80:8f:d0:10:89:ee:96:c6:e7:46:05:2c:ac:
cb:f5:02:e9:de:0c:35:0b:ec:88:94:a0:c9:c9:f2:
50:86:06:9e:66:24:87:12:d4:7b:3e:f7:5e:41:e9:
78:25:73:bb:9e:48:c9:e0:c5:0e:da:ec:b6:4d:2a:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C7:03:6E:2F:54:81:78:12:63:74:42:53:6B:06:99:28:9F:88:3D
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/0ccDbi9UgXgSY3RCU2sGmSifiD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.47.0/24
Signature Algorithm: sha256WithRSAEncryption
10:df:5c:9a:3d:49:ed:6b:c4:00:f8:69:f9:1a:47:19:49:9f:
bd:e8:84:36:ec:70:6e:95:04:5f:96:43:7e:4a:bf:d8:ad:bd:
f9:d2:db:e4:0d:41:73:51:92:e5:92:7e:91:a7:83:35:44:ff:
90:71:b1:09:f3:7e:b7:65:31:f7:04:32:17:95:b8:d7:37:31:
99:df:66:39:97:e0:10:46:2f:fc:10:2b:55:81:59:6d:bf:35:
00:fd:b4:8f:6a:6f:67:76:e1:74:14:ee:ab:73:2c:c4:dc:4b:
25:3a:7b:cc:34:3d:1f:db:9e:08:36:5d:a6:6f:8e:d6:d9:57:
15:3f:7c:12:c1:86:ac:9b:b7:ac:84:ca:08:c0:6b:5b:c1:28:
0a:29:ad:04:c7:54:28:69:9f:f8:6d:6b:68:7f:ef:b7:cc:4a:
20:6a:bf:93:18:74:9b:e8:1b:46:b2:ca:72:22:ef:96:bd:cd:
38:fb:5f:92:ab:7e:e8:e0:3c:be:de:6f:2d:c3:41:fb:6c:c5:
6d:58:c1:f6:6f:4d:81:0d:12:42:85:25:44:31:71:9b:77:7c:
89:98:32:f4:7a:84:0a:11:cd:36:8b:3f:7c:ca:97:0b:69:a5:
e0:36:57:1b:53:cc:77:53:bf:5f:8c:0b:b5:59:29:d0:9e:f3:
79:d2:47:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:40:37 2024 by rpki-client on console-ams.rpki-client.org