Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gFixDlHRxhs9l3gI2hC7tj3UHyE.roa
File: gFixDlHRxhs9l3gI2hC7tj3UHyE.roa (raw, json)
Hash identifier: R8TbSDDv9rdtcyRQNsV8pcnaZZi5Lt350XAIr87koq4=
Subject key identifier: 80:58:B1:0E:51:D1:C6:1B:3D:97:78:08:DA:10:BB:B6:3D:D4:1F:21
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018F295A1D3E2466A8669B084B122739BD0B
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gFixDlHRxhs9l3gI2hC7tj3UHyE.roa
Signing time: Mon 29 Apr 2024 10:15:22 +0000
ROA not before: Mon 29 Apr 2024 10:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202029
IP address blocks: 85.9.104.0/24 maxlen: 24
85.9.106.0/24 maxlen: 24
91.239.214.0/24 maxlen: 24
185.83.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:5a:1d:3e:24:66:a8:66:9b:08:4b:12:27:39:bd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Apr 29 10:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8058b10e51d1c61b3d977808da10bbb63dd41f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:19:87:2c:2f:46:27:4e:22:13:d5:eb:c6:
46:eb:36:12:6d:c0:c3:1f:a2:4d:db:c1:a3:19:6a:
a2:77:fd:ba:41:24:d3:f4:82:05:f3:fe:54:f3:c0:
28:8c:08:54:bb:1f:f4:77:d8:10:61:c9:90:47:d5:
aa:0e:b6:ba:92:12:34:8c:1a:07:e1:2f:98:14:70:
7a:07:7b:57:ca:a7:84:75:40:ee:d8:d1:d6:b5:5f:
5e:3e:97:5d:3e:ab:eb:4a:a5:8d:e3:cd:15:ad:22:
bb:57:a3:18:61:20:45:3a:08:02:8f:52:63:88:69:
84:23:0f:66:07:63:aa:13:33:9f:06:4a:ed:d2:93:
f8:a1:17:22:a9:fe:af:47:12:e9:60:c8:6d:83:d1:
c0:90:84:af:1d:b5:da:3d:b4:7a:f2:8a:74:91:28:
bf:16:8f:1d:5e:04:6e:4a:a5:70:e7:82:c9:4e:8d:
d3:1c:05:6e:2d:8d:9f:6b:57:ae:85:4a:c4:a5:3f:
8b:1a:c9:41:cb:e4:2d:fa:e0:da:4d:6e:4c:f9:8d:
c1:14:16:ed:68:5b:50:3c:0d:b7:7d:27:0c:52:57:
01:23:bd:a7:a7:48:30:21:e6:52:2a:5d:fc:92:e5:
41:c6:7a:d3:cc:9c:a7:82:59:1d:5c:49:d0:27:92:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:58:B1:0E:51:D1:C6:1B:3D:97:78:08:DA:10:BB:B6:3D:D4:1F:21
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gFixDlHRxhs9l3gI2hC7tj3UHyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.104.0/24
85.9.106.0/24
91.239.214.0/24
185.83.90.0/24
Signature Algorithm: sha256WithRSAEncryption
89:39:31:b2:e8:78:73:50:f6:56:75:6f:f1:32:2e:b2:7d:84:
3e:59:34:ae:10:af:6a:fe:f6:91:ba:37:53:fb:e7:31:dc:5e:
01:e1:1f:53:1d:2c:7b:46:7b:ec:dc:2a:e6:bb:0c:f8:c8:a5:
0d:17:3e:ba:76:d1:d0:d5:10:5e:65:32:12:17:55:3a:7a:69:
16:73:e0:c8:bd:25:78:79:bb:f2:bb:dc:a7:5b:6e:05:51:51:
9f:b7:f9:f9:45:e1:57:cf:9c:a5:6b:ca:cb:5c:06:c4:df:19:
af:3d:3e:c7:b8:77:79:66:82:5c:7f:f4:c7:b0:c9:bc:0d:22:
7f:32:a7:99:11:0d:58:17:a1:03:48:41:7c:e4:30:72:9c:29:
2d:dd:ad:8d:28:2a:e1:e0:73:4b:20:72:ae:cc:e6:60:37:11:
5b:27:c9:d9:c9:1f:75:42:41:73:d5:ca:77:47:a6:ea:22:d9:
44:54:48:68:2c:be:74:e2:f6:bc:12:83:c9:04:96:09:4b:ad:
3c:34:42:29:30:c1:b2:8a:ea:39:e0:91:cc:ab:d1:76:9d:8d:
bc:c7:0d:b7:26:49:d8:4a:57:a4:dd:58:51:fc:20:28:35:1b:
62:28:a9:0a:e8:31:bb:75:29:90:ff:8b:67:ce:60:16:e1:c5:
ba:f5:09:e1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY8pWh0+JGaoZpsISxInOb0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjQwNDI5MTAxNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDU4YjEwZTUxZDFjNjFiM2Q5Nzc4MDhkYTEwYmJiNjNkZDQxZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOkZhywvRidOIhPV68ZG6zYSbcDD
H6JN28GjGWqid/26QSTT9IIF8/5U88AojAhUux/0d9gQYcmQR9WqDra6khI0jBoH
4S+YFHB6B3tXyqeEdUDu2NHWtV9ePpddPqvrSqWN480VrSK7V6MYYSBFOggCj1Jj
iGmEIw9mB2OqEzOfBkrt0pP4oRciqf6vRxLpYMhtg9HAkISvHbXaPbR68op0kSi/
Fo8dXgRuSqVw54LJTo3THAVuLY2fa1euhUrEpT+LGslBy+Qt+uDaTW5M+Y3BFBbt
aFtQPA23fScMUlcBI72np0gwIeZSKl38kuVBxnrTzJynglkdXEnQJ5ISGQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIBYsQ5R0cYbPZd4CNoQu7Y91B8hMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvZ0ZpeERsSFJ4aHM5bDNnSTJoQzd0ajNVSHlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVQloAwQA
VQlqAwQAW+/WAwQAuVNaMA0GCSqGSIb3DQEBCwUAA4IBAQCJOTGy6HhzUPZWdW/x
Mi6yfYQ+WTSuEK9q/vaRujdT++cx3F4B4R9THSx7Rnvs3Crmuwz4yKUNFz66dtHQ
1RBeZTISF1U6emkWc+DIvSV4ebvyu9ynW24FUVGft/n5ReFXz5yla8rLXAbE3xmv
PT7HuHd5ZoJcf/THsMm8DSJ/MqeZEQ1YF6EDSEF85DBynCkt3a2NKCrh4HNLIHKu
zOZgNxFbJ8nZyR91QkFz1cp3R6bqItlEVEhoLL504va8EoPJBJYJS608NEIpMMGy
iuo54JHMq9F2nY28xw23JknYSlek3VhR/CAoNRtiKKkK6DG7dSmQ/4tnzmAW4cW6
9Qnh
-----END CERTIFICATE-----
Generated at Sat Jun 8 04:20:52 2024 by rpki-client on console-ams.rpki-client.org