Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m05mxgQD-7SDwmGRaSrmOJ0gv2E.roa
File: m05mxgQD-7SDwmGRaSrmOJ0gv2E.roa (raw, json)
Hash identifier: r/UwV8ARKBLFHPktKjjVA/N8alHS3nAgj5aKUVMi0ls=
Subject key identifier: 9B:4E:66:C6:04:03:FB:B4:83:C2:61:91:69:2A:E6:38:9D:20:BF:61
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 019209A6077FA6B05B625810817144FACE25
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m05mxgQD-7SDwmGRaSrmOJ0gv2E.roa
Signing time: Thu 19 Sep 2024 09:38:48 +0000
ROA not before: Thu 19 Sep 2024 09:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39246
IP address blocks: 85.187.204.0/24 maxlen: 24
85.187.205.0/24 maxlen: 24
85.187.206.0/24 maxlen: 24
85.187.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:a6:07:7f:a6:b0:5b:62:58:10:81:71:44:fa:ce:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Sep 19 09:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b4e66c60403fbb483c26191692ae6389d20bf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:ea:50:25:63:78:71:e0:b3:3a:1b:16:a8:
e2:b0:8d:ae:c3:49:f5:a0:4e:ba:7f:64:ae:0d:03:
31:68:6a:3c:52:57:2e:2e:ca:3e:01:45:9e:71:15:
b0:98:7e:f1:a7:5e:30:a7:b1:ab:c9:bf:e1:7c:f4:
11:67:99:b0:49:c4:ab:3e:53:c3:c6:cf:ee:02:3a:
cf:a1:32:27:79:c0:15:ee:7d:ff:5b:ae:ef:4a:2c:
e4:96:f5:9a:f1:df:af:ff:e3:fc:ec:e7:37:91:55:
07:97:ff:ef:6d:40:c3:ad:94:62:5f:6a:a2:f7:3b:
db:e4:24:c9:2c:e5:45:8d:ad:d6:85:97:7f:b2:98:
22:37:b4:15:1d:65:44:71:f8:10:86:19:54:ea:86:
2b:ec:77:a1:e6:63:0c:10:a0:fc:a9:03:6b:49:60:
5c:38:ad:23:05:3c:51:a8:e3:24:0f:61:e4:74:56:
4b:a3:f7:3b:4e:87:95:d5:eb:8f:1e:d8:56:a2:f3:
b1:13:84:01:0d:35:74:3c:8a:71:04:93:ce:1f:ed:
49:74:bf:2a:39:04:2e:9f:32:d8:44:e4:3c:ec:dd:
89:1f:f7:82:b9:f9:e1:7d:7e:e7:b7:76:a3:d9:1c:
10:b3:b5:18:f6:3d:5b:78:c7:7c:52:48:3f:ee:6a:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:66:C6:04:03:FB:B4:83:C2:61:91:69:2A:E6:38:9D:20:BF:61
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/m05mxgQD-7SDwmGRaSrmOJ0gv2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:5a:34:82:24:ff:59:93:c4:7f:92:a6:9d:e3:ec:07:6f:db:
ae:d2:61:f8:09:d5:29:b1:ea:96:6d:9c:54:58:7a:84:d6:e7:
ef:ee:06:af:f2:0a:eb:8f:08:ae:8f:e2:d8:4c:e4:72:99:95:
aa:14:d9:e5:1b:b4:3b:70:89:b1:f9:8b:3d:d2:d0:bb:58:3d:
a2:c2:71:a8:95:ad:5b:89:2a:5a:c7:07:f4:54:8a:cd:b9:cd:
85:9a:04:0a:63:b3:eb:68:7f:fd:75:4a:78:19:ad:d5:8f:8c:
52:91:9f:31:22:aa:0a:69:3a:ef:98:e8:69:1a:64:76:de:ec:
29:63:4c:6f:be:5b:9b:e1:5f:70:20:29:22:ef:08:fa:8e:0a:
bc:7c:39:dc:68:6b:af:81:6f:30:6c:73:c6:07:0e:93:34:bf:
eb:29:a7:d8:b6:fc:bf:8d:ff:4e:5a:3b:24:ef:db:a5:40:e5:
d1:96:db:71:3d:02:cb:fb:dd:bc:49:68:d5:5c:76:0c:a1:0b:
b8:e5:f2:4c:51:8c:f1:0d:94:0a:85:70:46:c3:3d:a0:8c:c1:
9f:2b:36:eb:4e:50:25:de:17:9b:97:47:2b:78:fa:b6:0d:89:
32:93:84:92:0c:cb:e5:fe:a3:1e:e7:3d:35:5c:08:88:80:92:
6b:cd:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:58:42 2024 by rpki-client on console-ams.rpki-client.org