Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/aDcyFHI6jR3vZoDJV0r8kMGlDCc.roa
File: aDcyFHI6jR3vZoDJV0r8kMGlDCc.roa (raw, json)
Hash identifier: 0FUmRW8kKfIPD9f30sDhlHdrP7tTdeCAVlwBwqrzjbg=
Subject key identifier: 68:37:32:14:72:3A:8D:1D:EF:66:80:C9:57:4A:FC:90:C1:A5:0C:27
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01909CBB65C1804857A8163469D012B4C17C
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/aDcyFHI6jR3vZoDJV0r8kMGlDCc.roa
Signing time: Wed 10 Jul 2024 13:00:45 +0000
ROA not before: Wed 10 Jul 2024 13:00:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 85.237.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:bb:65:c1:80:48:57:a8:16:34:69:d0:12:b4:c1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jul 10 13:00:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68373214723a8d1def6680c9574afc90c1a50c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:97:e8:d4:ba:33:07:de:58:45:91:d6:f8:
8f:d6:e3:b7:ef:7f:20:98:1f:9b:b0:f0:0c:e1:8d:
2c:70:37:3e:a0:61:22:f9:3c:cb:47:50:5c:0f:b8:
1a:6f:c8:b6:47:71:d5:fc:11:c2:2c:21:b6:c3:23:
52:1e:99:c0:11:d4:3f:42:68:77:13:93:ec:60:30:
b2:84:5a:b3:78:c5:64:aa:49:b3:04:29:54:b4:51:
9b:d7:7c:9d:f3:77:7e:df:b9:e8:0b:11:8a:54:fb:
b4:4f:fc:4e:34:8b:1d:80:09:f3:b9:9e:5e:15:de:
37:b4:27:4e:c5:9a:0a:44:11:87:84:25:e0:35:f4:
bf:3d:9f:6b:84:b2:7a:05:9f:3c:ea:bc:2e:16:69:
2b:2e:7a:8e:d5:02:1b:79:e0:b4:18:a7:47:d8:4a:
83:e0:f5:e1:f7:88:03:43:a8:bc:35:d7:ae:0e:5f:
2a:6b:e9:94:ae:87:da:1b:f7:e2:b5:9e:b7:14:06:
f6:93:5f:ab:a5:16:52:1c:dc:04:09:47:c4:d0:f1:
60:5b:e5:4b:2a:83:d6:2a:0b:35:23:e9:bf:ad:2b:
3d:2c:5e:14:dd:09:db:d3:b5:54:42:7c:5a:be:b6:
40:3f:ef:5b:95:00:24:15:09:b4:c1:ae:c1:83:42:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:32:14:72:3A:8D:1D:EF:66:80:C9:57:4A:FC:90:C1:A5:0C:27
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/aDcyFHI6jR3vZoDJV0r8kMGlDCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9c:50:f6:c1:3c:42:dc:29:de:71:ac:24:78:e5:71:51:aa:
84:42:41:23:da:b4:cf:2e:17:51:be:d9:20:45:e4:dd:3c:6a:
0f:b2:fd:43:3c:e7:e0:02:f3:2c:18:50:16:94:c3:22:d6:07:
3a:47:63:e6:fa:91:b6:da:2c:28:03:1b:e2:92:5e:7c:26:f1:
67:d8:e6:25:4b:a8:c7:2e:1c:ba:f1:c5:b6:43:eb:40:ef:e2:
ec:bf:45:45:36:12:29:0f:95:03:e8:d5:34:87:ab:6c:a0:93:
c6:3f:e6:58:69:ad:09:c5:38:27:2a:9e:41:78:10:98:23:6b:
66:54:da:d9:7a:ef:87:d9:9b:84:c8:f5:41:57:81:7c:f6:31:
a9:59:64:4d:84:f7:4f:d9:f0:6a:85:b6:8e:e9:91:7d:eb:d6:
ed:05:85:a8:ab:43:40:e9:97:10:fc:4b:73:43:5b:99:1d:b5:
e9:09:5e:30:b1:fd:56:12:39:dc:db:b8:22:39:36:0f:f8:a1:
29:55:d3:6b:25:69:f5:81:77:c4:10:bb:55:bc:5b:0b:56:f9:
2d:3c:3a:aa:95:ab:1d:82:ab:55:26:22:8a:89:1c:c1:7e:c8:
71:58:90:f1:a0:67:0c:0a:e3:ad:37:8d:9a:1f:6f:38:48:b4:
09:76:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:28:19 2024 by rpki-client on console-ams.rpki-client.org