Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/H7HY1Fi6-bxvoVFZCFK_Vs9m7-M.roa
File: H7HY1Fi6-bxvoVFZCFK_Vs9m7-M.roa (raw, json)
Hash identifier: 8UhgTk9yO7lcVpxZ6vTH7QDmANgMOL0m7zAJqhswCgM=
Subject key identifier: 1F:B1:D8:D4:58:BA:F9:BC:6F:A1:51:59:08:52:BF:56:CF:66:EF:E3
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 018ECCE4BE6656BEF6B11C31A83E7F837759
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/H7HY1Fi6-bxvoVFZCFK_Vs9m7-M.roa
Signing time: Thu 11 Apr 2024 11:22:06 +0000
ROA not before: Thu 11 Apr 2024 11:22:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35302
IP address blocks: 85.15.230.0/24 maxlen: 24
95.131.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:e4:be:66:56:be:f6:b1:1c:31:a8:3e:7f:83:77:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Apr 11 11:22:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fb1d8d458baf9bc6fa151590852bf56cf66efe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:3c:1b:33:79:97:b1:9f:ea:f1:b1:fe:12:
f9:67:60:0e:1b:1a:29:12:62:70:09:16:05:6f:b9:
6a:57:81:14:c4:7e:09:ee:32:9d:75:39:d2:f5:e0:
d1:93:89:21:6b:aa:6f:df:cf:fa:fd:cd:e2:77:35:
f3:2b:c9:3b:38:0e:28:9a:ed:c1:96:9c:d9:22:b2:
e5:dd:cf:f2:ec:b1:9d:d1:db:03:8c:b0:dc:08:65:
bb:e1:cc:3e:9c:ab:83:98:2c:5b:74:ed:f7:0a:b0:
67:66:7c:f1:60:0e:de:34:1f:f2:1a:f8:6b:63:da:
24:33:3f:36:bf:1d:c0:ab:8c:2e:17:f3:07:15:34:
df:14:7f:e2:12:98:0b:32:b6:4f:13:0c:1e:74:cc:
fb:7b:93:bb:44:3d:97:e3:e8:3d:77:56:bc:4e:69:
6d:7f:86:c8:75:f3:53:d8:38:c3:4b:6f:4e:f0:41:
ca:b2:4b:62:cc:ad:52:e0:a7:64:4e:cb:38:35:f5:
8a:fe:c2:de:87:53:1e:35:8d:54:45:47:67:64:40:
19:ae:39:2c:43:38:7f:90:05:87:f0:7a:2e:92:fc:
a4:a1:f1:bf:79:11:67:62:fd:ba:3f:64:f4:e0:59:
28:59:cd:d9:53:e5:93:f0:40:63:79:10:64:b0:fd:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B1:D8:D4:58:BA:F9:BC:6F:A1:51:59:08:52:BF:56:CF:66:EF:E3
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/H7HY1Fi6-bxvoVFZCFK_Vs9m7-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.230.0/24
95.131.118.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:01:62:0f:cd:21:b2:cf:e8:b0:0f:ab:14:46:bb:b8:4b:f9:
48:df:e0:d5:11:23:38:7d:2b:92:8b:7d:e6:d6:38:ed:a4:33:
d8:2e:de:5b:e6:e3:b6:22:df:51:79:61:c1:ca:14:fb:28:6e:
1c:04:6e:c2:95:39:52:c1:4d:d6:c4:73:7b:f9:c6:2d:ea:61:
22:31:55:36:f1:44:49:ce:36:1f:fb:c1:01:b4:b8:4a:16:d4:
e4:f8:78:73:07:1f:9a:aa:f3:f4:b3:0e:93:26:29:98:67:03:
9f:4a:7c:41:3c:b9:ab:04:8a:b1:5c:b9:7c:1f:e9:f8:fd:70:
79:3e:1e:46:cd:3d:6c:64:fc:01:a9:e2:ce:b3:c5:72:f5:14:
fa:20:13:34:69:91:7e:e0:eb:4d:6f:19:8d:35:13:d1:db:4f:
7d:d3:6c:e9:4b:b0:4a:34:87:c9:76:c1:b7:b7:4c:ab:20:c9:
87:14:83:30:ce:54:9f:c7:e9:51:46:0a:af:12:6f:8c:69:59:
b8:5c:c2:f2:02:66:5a:9c:3b:eb:aa:34:9e:66:d9:3e:1c:28:
4b:12:cb:f5:22:b3:b4:2c:7a:99:d7:39:b5:bf:1b:9f:75:c4:
d6:c8:4e:b2:b3:27:9a:b3:d6:83:10:13:0c:0a:97:20:90:27:
b5:24:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:02:11 2024 by rpki-client on console-ams.rpki-client.org