Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/plVM2OYYPrtJit7L-xOks71b_EA.roa
File: plVM2OYYPrtJit7L-xOks71b_EA.roa (raw, json)
Hash identifier: bedcFy7cjmf2H7Vp8gPQSk8kJ5uU6flcsz9v8aA/6Lw=
Subject key identifier: A6:55:4C:D8:E6:18:3E:BB:49:8A:DE:CB:FB:13:A4:B3:BD:5B:FC:40
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 018CC94CCBFC7249799C15D6AFF6F89AA53E
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/plVM2OYYPrtJit7L-xOks71b_EA.roa
Signing time: Tue 02 Jan 2024 08:31:42 +0000
ROA not before: Tue 02 Jan 2024 08:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208769
IP address blocks: 85.208.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:cb:fc:72:49:79:9c:15:d6:af:f6:f8:9a:a5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jan 2 08:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6554cd8e6183ebb498adecbfb13a4b3bd5bfc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:5f:9d:4e:a4:6c:dc:d6:51:c7:88:42:71:
54:cb:d6:44:8d:77:53:38:8c:f6:15:b2:59:9b:8e:
e8:92:a8:11:9f:07:6c:0f:dc:d2:75:da:6c:82:b8:
d9:2b:f1:03:6d:a2:28:e1:93:67:36:f8:52:37:d7:
b3:6d:58:12:9b:22:a4:7e:f2:96:25:20:8d:49:ab:
84:63:32:6d:d0:77:f8:77:e8:c4:aa:60:b7:9c:74:
ce:36:07:7a:ee:2e:77:78:3c:7b:b6:ba:f2:87:11:
f9:e9:bc:ed:28:c7:5f:96:48:e0:72:9f:75:51:a2:
e1:11:05:bd:97:64:d9:b9:1e:81:77:7b:f2:c7:66:
2f:b5:aa:2e:d7:21:68:d0:00:fd:7e:7a:25:ca:a4:
4b:a3:14:7f:d5:17:c0:c2:f2:5e:d0:8c:45:f1:95:
ff:ca:82:f6:5c:3f:d1:41:79:5b:be:fe:ea:7a:f7:
a3:9e:f1:8a:4d:4d:47:7e:37:17:1c:84:e1:ad:d0:
e7:f0:b5:b1:ac:66:fa:aa:b7:c6:dc:5c:28:a5:ff:
f8:62:ed:94:4a:55:27:69:df:99:78:d8:7d:5e:47:
cf:03:01:bf:6c:4e:da:8f:7e:51:5e:f6:69:8f:36:
a3:1d:3a:20:3a:7d:88:62:39:f5:39:96:0c:7c:04:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:55:4C:D8:E6:18:3E:BB:49:8A:DE:CB:FB:13:A4:B3:BD:5B:FC:40
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/plVM2OYYPrtJit7L-xOks71b_EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.102.0/24
Signature Algorithm: sha256WithRSAEncryption
59:47:11:17:af:7a:23:8b:7b:f0:af:bf:44:65:33:fe:d6:20:
56:84:7c:83:64:b5:68:e9:88:92:f2:f6:d3:58:9d:e5:bb:ff:
16:64:bd:3a:d6:e3:c6:83:4f:cd:74:7b:28:2b:1f:b8:11:f2:
a0:5e:5e:d2:bc:c5:49:7f:0b:67:04:ad:ac:5b:d0:5c:a1:45:
f7:79:3f:f0:a7:08:24:db:12:fd:9b:ec:46:e2:02:a0:07:17:
04:fa:4e:e1:ab:0f:d4:e6:36:5e:40:df:56:0e:e9:f0:81:0a:
de:01:b2:47:5f:07:d4:9f:e2:e7:b2:3e:5b:79:dd:e7:70:34:
5e:28:44:2a:23:30:9e:26:5a:2e:2f:7a:7a:b3:70:cc:3e:c0:
ce:60:a2:0a:9c:40:df:3d:ef:c3:98:f3:d7:65:10:5c:b3:a7:
3f:e5:35:3f:2b:2e:f1:d4:25:ee:0c:9a:14:3a:23:d5:1a:2c:
dd:93:b1:00:d0:fb:44:1c:dc:40:aa:6e:97:b9:38:a8:a7:45:
1a:e5:81:d3:1d:35:32:d4:a5:b8:5e:0c:22:0b:6a:e9:d4:9a:
9a:85:5d:f2:e1:18:d9:ad:12:0a:ff:5d:d2:f5:bb:5d:91:e0:
ec:25:79:4c:7d:2a:c3:45:be:88:bd:71:f9:38:a5:dd:1c:7a:
d0:db:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:47:53 2024 by rpki-client on console-fra.rpki-client.org