Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pMGNJIaq8Pi5heQntipQPqoNXzU.roa
File: pMGNJIaq8Pi5heQntipQPqoNXzU.roa (raw, json)
Hash identifier: PtUOgRxIpeN1pr/QnmwmeTpmyuA3DyJqRMgBd1Q3GjY=
Subject key identifier: A4:C1:8D:24:86:AA:F0:F8:B9:85:E4:27:B6:2A:50:3E:AA:0D:5F:35
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93B5145E85768ECEC84A73E4ECBCE
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pMGNJIaq8Pi5heQntipQPqoNXzU.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60182
IP address blocks: 85.187.233.0/24 maxlen: 24
85.187.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3b:51:45:e8:57:68:ec:ec:84:a7:3e:4e:cb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4c18d2486aaf0f8b985e427b62a503eaa0d5f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:f8:92:75:b8:00:ee:8f:51:dd:c8:66:d5:
a2:38:f8:39:02:bf:c2:46:b9:d6:ee:1c:12:cd:5d:
17:4c:c0:65:5d:e0:78:ff:10:9f:88:ab:a8:0b:b4:
bd:39:c2:57:0c:b2:bc:f3:ac:1e:77:46:a6:54:6d:
a4:5e:5c:9b:64:a4:c4:ee:96:d8:18:d8:39:51:c7:
91:ec:00:3e:43:4a:be:57:ca:53:80:49:28:ab:a4:
1b:8b:0b:c9:c0:6d:56:42:01:27:10:c5:6f:fd:4a:
38:1f:76:07:b9:af:48:97:0f:62:94:c6:71:e5:c2:
d0:7c:7b:07:3e:0f:c6:fd:ba:7e:ad:57:03:c8:78:
90:7c:af:00:02:3c:25:db:52:f8:20:9b:2f:c6:a6:
4c:f2:9d:b4:b4:be:42:00:f0:1c:99:37:c3:b5:23:
ea:5c:f0:09:8d:a1:25:22:e2:f6:2b:a9:f3:ce:62:
e3:0f:4a:e6:f0:ed:b8:1c:c1:c2:15:b5:28:3f:8f:
31:d4:a1:2b:25:09:db:39:d8:62:42:72:e6:72:d8:
96:d7:83:94:ee:36:a5:ce:a0:32:82:90:49:7e:2a:
48:d6:61:16:cd:fb:1c:a2:82:54:76:5b:1e:7c:54:
e3:37:b8:57:44:56:23:d9:cb:ed:32:bf:36:f7:85:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:8D:24:86:AA:F0:F8:B9:85:E4:27:B6:2A:50:3E:AA:0D:5F:35
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/pMGNJIaq8Pi5heQntipQPqoNXzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.233.0/24
85.187.242.0/24
Signature Algorithm: sha256WithRSAEncryption
00:11:0b:b8:fa:e3:9b:19:e9:e1:3a:dd:17:b0:47:45:a9:ab:
a5:5a:6f:d9:81:21:01:94:f3:d0:6e:e0:73:05:1a:62:2e:b4:
1c:83:e4:b8:4b:34:e1:a2:1d:b2:33:39:0d:ca:09:46:46:7b:
6d:01:24:7a:5b:6b:84:07:5a:be:05:9d:8f:d7:9f:01:62:ca:
73:74:cc:d8:e2:9d:a2:50:49:6d:bc:fb:31:57:ca:6d:bb:e6:
7c:e4:2b:3a:1e:4a:0d:6c:d5:4c:c5:00:90:c6:33:fc:23:b1:
db:8d:f4:92:09:a6:92:8a:4b:83:62:07:2b:16:10:a1:e2:f3:
4a:08:b4:e1:3e:16:50:57:5d:18:48:77:a2:e3:f3:bb:d6:c6:
17:f5:d4:5b:84:94:a7:45:6b:ff:30:d3:2b:8d:b4:52:cb:39:
6d:0a:67:54:c7:d4:94:ec:b5:c5:06:72:83:15:c9:82:7e:d3:
72:d3:20:36:fc:b6:df:bf:eb:53:05:dd:bb:40:af:1e:73:34:
25:57:9d:0c:5b:c4:ae:dd:14:84:98:3d:83:57:a4:b0:e5:a2:
c5:3d:33:54:81:8f:c6:02:65:fd:53:22:ac:92:fc:96:cc:65:
54:bd:9b:c5:a7:aa:32:8f:60:61:aa:58:b8:71:0e:d4:f6:1e:
e9:40:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:15:01 2024 by rpki-client on console-fra.rpki-client.org