Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/AdAPtZ0268klX5aJP0aGu9ZeYOM.roa
File: AdAPtZ0268klX5aJP0aGu9ZeYOM.roa (raw, json)
Hash identifier: bFGAZgteazAOYXQWG5Ch8jbE9ttybXjfXeVAiRYOZnQ=
Subject key identifier: 01:D0:0F:B5:9D:36:EB:C9:25:5F:96:89:3F:46:86:BB:D6:5E:60:E3
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 018CC79364D3A80CB0B21559B0AD4C03645A
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/AdAPtZ0268klX5aJP0aGu9ZeYOM.roa
Signing time: Tue 02 Jan 2024 00:29:34 +0000
ROA not before: Tue 02 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 85.28.48.0/22 maxlen: 22
85.28.57.0/24 maxlen: 24
85.28.58.0/24 maxlen: 24
85.28.56.0/24 maxlen: 24
85.28.54.0/23 maxlen: 23
85.28.52.0/23 maxlen: 23
85.28.59.0/24 maxlen: 24
85.28.60.0/24 maxlen: 24
85.28.60.0/22 maxlen: 22
109.238.205.0/24 maxlen: 24
109.238.200.0/24 maxlen: 24
109.238.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:64:d3:a8:0c:b0:b2:15:59:b0:ad:4c:03:64:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 2 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01d00fb59d36ebc9255f96893f4686bbd65e60e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:a6:1e:d3:62:ef:9d:99:87:78:0b:b5:31:
d2:bf:68:08:47:3d:02:3e:4b:d4:61:0b:ae:51:0d:
83:4b:49:05:b9:ed:25:4e:76:50:25:31:a3:61:fc:
a4:b5:ff:e0:f5:12:4d:de:9d:bd:20:04:f6:fe:44:
88:f3:4a:35:9c:10:ae:25:b6:94:b3:ab:07:0a:61:
d6:ba:ec:38:76:d5:c2:e0:0e:08:e8:37:8a:9c:f8:
b2:61:c6:54:64:71:37:af:e9:d5:f8:42:8c:9d:93:
2f:57:7e:f3:98:25:44:77:ae:69:dc:81:48:d0:d7:
9d:73:1a:68:41:d5:85:bf:8d:b6:a1:db:3b:d1:b2:
22:b2:56:e4:9c:1d:34:9d:26:fc:e3:fe:56:bc:27:
e9:85:0f:25:a8:61:82:ad:0a:fe:b2:61:02:44:92:
06:b1:76:f1:34:f8:bf:3b:e0:aa:52:2f:04:38:27:
0d:35:36:f8:43:10:d7:b6:76:ab:67:b1:77:5b:f1:
d1:d3:c4:32:1d:c0:6b:cc:3c:b6:e0:63:67:32:b9:
3a:74:85:ef:c1:e2:74:0c:c8:1d:f4:8e:89:25:75:
37:16:cc:da:62:3d:20:d3:8c:1b:33:49:5e:ef:79:
db:9f:aa:e5:74:c7:66:be:b3:ed:bd:0f:00:69:d2:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:0F:B5:9D:36:EB:C9:25:5F:96:89:3F:46:86:BB:D6:5E:60:E3
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/AdAPtZ0268klX5aJP0aGu9ZeYOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.48.0/20
109.238.200.0/24
109.238.203.0/24
109.238.205.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1b:79:e7:64:ae:c5:c8:f2:e6:af:31:26:74:10:cc:ab:89:
e8:b5:7a:06:81:39:d8:fe:9c:a4:e3:f6:94:d8:42:4b:79:17:
99:6b:60:a0:89:2f:03:24:1a:2c:d3:d0:db:af:4a:33:00:de:
4c:5b:17:46:80:f6:0d:1a:bd:36:6f:b8:71:6d:85:8a:ca:3a:
01:b5:83:ab:66:09:b8:25:24:30:a4:df:38:b1:c5:4f:eb:43:
4e:1d:7d:63:fb:2b:32:1b:b2:8e:45:33:ea:97:13:53:dc:93:
26:bc:7d:5c:80:69:b7:99:a7:bd:15:8b:67:1c:15:1f:0e:f5:
15:ab:2e:c2:d1:d8:76:39:e4:8c:25:28:bf:03:85:f0:1b:88:
ee:87:c7:3f:bf:48:46:75:62:48:07:fc:d6:75:49:bc:c4:b2:
39:48:2b:9f:f0:86:40:b7:df:d6:74:f6:cc:77:50:85:2d:10:
34:78:d2:f0:a6:d0:45:50:df:61:8e:f5:93:80:aa:63:5a:50:
d2:09:a5:35:3d:dc:7f:17:7d:74:fc:bb:92:9c:48:21:de:18:
ce:8f:fa:ab:ed:c9:36:4d:5a:81:f0:0f:c4:21:d0:c5:d5:b9:
71:37:6a:ff:31:30:41:96:6b:a9:7a:57:cc:16:c0:5a:0a:f4:
36:83:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 07:28:08 2024 by rpki-client on console-fra.rpki-client.org