Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/o55MNskiql8hnmyH2UmgWnjUsc0.roa
File: o55MNskiql8hnmyH2UmgWnjUsc0.roa (raw, json)
Hash identifier: b60bfn9y1ApqzE5ufwtWlRXpvtAUKkiA3HdYxgqLDnM=
Subject key identifier: A3:9E:4C:36:C9:22:AA:5F:21:9E:6C:87:D9:49:A0:5A:78:D4:B1:CD
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B931EE5A05AABC2DDF917367AE12ED
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/o55MNskiql8hnmyH2UmgWnjUsc0.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20750
IP address blocks: 151.237.72.0/21 maxlen: 24
85.187.240.0/23 maxlen: 23
85.187.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:31:ee:5a:05:aa:bc:2d:df:91:73:67:ae:12:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a39e4c36c922aa5f219e6c87d949a05a78d4b1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:4a:dd:cf:36:8b:59:97:66:9a:f2:38:d1:
ab:99:37:45:d0:e4:3d:02:e1:83:60:c2:40:4a:6e:
cc:9e:71:10:7b:47:68:e0:79:c6:94:33:24:9a:a2:
a6:39:78:99:68:c9:71:cd:35:5b:63:a9:e1:56:8b:
7f:c7:ab:89:93:29:2f:57:44:5a:e5:3b:39:b8:48:
ae:d3:da:09:c4:6e:02:2a:92:09:51:26:0a:33:88:
93:fa:d6:27:54:e5:bc:bf:0b:c8:aa:71:f5:02:3a:
f3:6f:fb:88:a3:9c:b5:39:82:ce:0b:b7:15:8c:5d:
e9:b5:94:e0:cb:8b:8b:49:91:5b:81:e1:d8:b5:8a:
89:c7:60:ee:c7:08:8f:82:23:92:3e:66:38:d3:80:
ab:bb:66:5b:35:54:65:fa:b4:41:2a:c6:84:8a:b4:
6c:15:a4:51:88:5c:72:a8:22:f0:a6:ca:07:c3:4a:
68:8d:40:99:71:08:c6:ec:0e:e6:c7:27:f4:5c:6c:
71:83:61:40:39:d0:ac:06:50:a3:ba:cf:7b:4f:f3:
76:58:22:b7:a0:c4:e5:b3:95:cb:5d:44:89:9a:98:
8e:d9:8f:f2:b3:68:04:56:f7:18:4a:b8:cf:d2:6e:
87:2c:ed:92:8c:49:52:d9:11:22:88:77:4f:8c:42:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9E:4C:36:C9:22:AA:5F:21:9E:6C:87:D9:49:A0:5A:78:D4:B1:CD
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/o55MNskiql8hnmyH2UmgWnjUsc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.236.0-85.187.241.255
151.237.72.0/21
Signature Algorithm: sha256WithRSAEncryption
04:15:16:64:10:68:85:1e:a1:35:ce:4e:a1:fb:99:8a:8c:68:
e3:7d:e8:f1:59:34:ba:00:2a:04:55:ac:4f:8d:3c:a1:b6:83:
03:3b:a1:32:93:a3:51:1d:b3:92:b1:b3:21:40:cf:ad:32:a3:
7b:dd:8f:3c:04:46:ce:fe:e6:4a:f0:f3:70:20:34:c7:64:ca:
76:90:3f:90:34:77:1f:db:9a:a7:1c:df:d7:9d:95:ce:aa:07:
13:c4:b2:ce:37:c0:39:41:c5:01:35:e1:4d:2d:11:3b:2a:03:
78:32:61:9b:ac:a0:28:50:a3:14:bb:f5:5c:c5:00:39:81:69:
3d:d5:f8:91:1b:85:be:94:99:45:90:1d:8e:26:24:63:f7:ce:
23:6c:01:f5:de:5b:8a:83:be:4c:a9:7a:cd:7f:e0:92:8c:e8:
20:10:92:40:0b:c7:e7:44:14:00:b7:fe:73:57:d4:fd:fd:e2:
b5:45:50:d8:62:58:28:ef:cb:8a:0d:6a:a9:3d:a8:31:86:7a:
ef:ad:d9:ad:fd:aa:9a:7a:90:63:37:c6:b1:39:3a:be:fb:f2:
92:f5:90:9e:da:d0:cf:aa:0a:23:9a:7a:27:7a:88:37:be:04:
70:3b:0a:63:a2:f1:c7:d4:40:93:1c:29:c0:c9:e3:39:3f:92:
f1:15:2c:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:47 2024 by rpki-client on console-ams.rpki-client.org