Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/triQGWEOBD9Y3w_kvYXOYFbvIBQ.roa
File: triQGWEOBD9Y3w_kvYXOYFbvIBQ.roa (raw, json)
Hash identifier: 88lJeF7wOGB08gxKXar+Y/4b0yWyjxrXR9fEqsEz+Dc=
Subject key identifier: B6:B8:90:19:61:0E:04:3F:58:DF:0F:E4:BD:85:CE:60:56:EF:20:14
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B5E4B48AE88DDB1883F749E6913F6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/triQGWEOBD9Y3w_kvYXOYFbvIBQ.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138145
IP address blocks: 85.209.254.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5e:4b:48:ae:88:dd:b1:88:3f:74:9e:69:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6b89019610e043f58df0fe4bd85ce6056ef2014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:45:c3:a6:30:11:35:eb:56:b7:c7:5f:5e:
b5:13:3a:ca:57:4e:93:7e:a5:6c:45:f1:d4:18:8c:
c4:bc:38:86:06:d3:ea:c8:5a:60:d3:85:59:36:fd:
10:b0:93:fb:88:83:e3:3f:57:d2:17:2e:36:52:a9:
2c:27:70:78:e7:21:28:f5:f1:c3:db:6d:ef:3e:b3:
98:95:ec:ca:01:37:c3:1c:44:4c:7a:4d:bd:ca:2e:
c9:a9:62:e9:0e:42:d0:62:12:08:1e:cb:16:59:d7:
4a:08:e0:cd:67:42:ab:07:9d:52:dc:69:f2:c0:56:
25:a2:15:02:0b:97:09:23:81:9a:bd:41:b1:b6:4f:
bf:2a:36:ba:7f:c9:80:38:5c:28:34:b9:90:48:df:
5d:47:1e:92:27:9a:9c:b1:84:7b:b1:bb:07:24:85:
32:b2:1e:92:12:89:3b:0d:c8:3c:d8:3c:95:3b:d2:
e6:1b:89:52:3d:af:34:fb:f5:06:db:7b:24:21:46:
28:b9:89:e0:57:e6:ed:cd:02:6d:ba:d9:50:95:b4:
ab:2f:2f:a8:38:58:77:b8:8c:da:1c:fc:d5:2e:82:
4b:4a:f2:b2:40:bd:a2:7c:96:da:c4:be:a1:a2:84:
39:4c:6b:a0:3d:2d:9d:04:e6:04:e7:4d:6e:6b:d8:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:90:19:61:0E:04:3F:58:DF:0F:E4:BD:85:CE:60:56:EF:20:14
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/triQGWEOBD9Y3w_kvYXOYFbvIBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
30:bf:45:7d:d8:2b:40:65:f2:e8:98:77:d2:34:cf:18:5c:f7:
ef:64:df:9c:bb:b9:2a:b1:45:27:b1:d9:49:f5:f2:a7:04:2e:
48:62:1a:4e:68:d4:1b:0b:60:44:31:da:84:2a:d3:b3:6a:26:
0e:e7:d3:f2:74:f5:24:ff:b3:e2:6d:3d:88:63:82:d4:88:13:
d9:c4:64:64:78:3c:08:3a:06:cd:d3:38:a6:b2:2e:e6:de:b5:
d6:95:5d:c5:b9:15:01:7b:0c:49:5d:fb:22:b4:b6:c1:5a:75:
2c:39:b4:bc:7f:93:cc:08:a2:97:86:b5:8b:e3:67:57:b4:68:
c7:f6:ef:20:fb:a2:8c:bd:e0:49:25:24:b9:23:4a:65:2f:3e:
dc:67:5b:64:62:47:ce:a7:11:84:d6:92:0c:63:7a:82:40:05:
1a:9d:50:59:c7:0f:c5:2e:09:d6:dc:44:8e:61:d5:e9:89:59:
a8:0d:67:ca:28:c7:94:24:6a:18:22:ae:1f:b5:91:9b:b5:91:
73:4b:96:a8:fb:a9:11:19:10:ba:c5:31:e3:94:56:91:f3:0e:
dd:ee:3d:1f:d7:4f:a8:26:c5:64:ca:30:d2:4a:68:d5:41:a3:
6f:4b:de:ca:9b:28:a6:32:a5:a4:eb:2f:45:40:a8:e8:05:d4:
30:77:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:25:58 2024 by rpki-client on console-fra.rpki-client.org