Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/8HtPxaRYmVHUPnBjfzFGqCBz92A.roa
File: 8HtPxaRYmVHUPnBjfzFGqCBz92A.roa (raw, json)
Hash identifier: HQfACH88YQOdZisxsGiSvx+alueGTZNC++9f9DqGFOM=
Subject key identifier: F0:7B:4F:C5:A4:58:99:51:D4:3E:70:63:7F:31:46:A8:20:73:F7:60
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 01933E39B6C0F978A6DC5772FC567EA17C60
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/8HtPxaRYmVHUPnBjfzFGqCBz92A.roa
Signing time: Mon 18 Nov 2024 07:43:09 +0000
ROA not before: Mon 18 Nov 2024 07:43:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39891
IP address blocks: 185.139.8.0/24 maxlen: 24
185.139.9.0/24 maxlen: 24
185.139.10.0/24 maxlen: 24
185.139.11.0/24 maxlen: 24
212.215.129.0/24 maxlen: 24
212.215.208.0/22 maxlen: 22
212.215.212.0/22 maxlen: 22
212.215.216.0/22 maxlen: 22
212.215.232.0/22 maxlen: 22
212.215.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:39:b6:c0:f9:78:a6:dc:57:72:fc:56:7e:a1:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Nov 18 07:43:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f07b4fc5a4589951d43e70637f3146a82073f760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:9f:58:5d:62:be:7e:0a:b3:05:b5:57:b4:
9d:30:fe:d1:0e:f0:2b:98:93:78:3b:ed:e5:51:af:
d7:12:4d:38:69:90:91:b3:d9:48:8b:58:f5:e1:7f:
c7:d3:5b:97:cd:3b:04:d6:4a:3f:63:44:46:f1:6c:
e7:1a:2a:f6:e4:2c:da:d2:24:df:e4:77:b6:79:a8:
8c:f7:3e:ef:17:e5:75:4c:61:55:49:73:6e:43:15:
0b:b3:dd:9e:b1:19:40:2c:ef:cb:01:29:7c:ab:2d:
ed:a8:51:7b:4f:8f:22:42:6f:d5:30:d8:1b:70:ea:
be:db:d9:e1:19:8a:6d:93:00:b6:ff:e2:f2:4e:02:
3f:66:3e:5e:c6:38:c9:db:f6:0c:c3:2b:0a:79:be:
b3:2d:3a:d1:74:88:82:78:00:0a:52:4c:25:40:0c:
c7:4c:e4:43:8b:57:30:c4:f3:8b:19:5e:e0:f0:0f:
79:e8:25:ed:9e:0c:67:c8:26:17:ac:99:70:f1:32:
ce:a6:09:92:35:a3:5b:73:5a:18:d5:e6:6e:99:44:
f2:74:15:f6:b6:cc:e1:ae:56:24:62:68:36:81:d3:
90:cf:a7:69:1e:47:a6:9c:e2:05:68:51:84:fb:47:
92:9d:2b:4c:98:9d:07:c7:00:dd:4d:ed:8d:21:de:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7B:4F:C5:A4:58:99:51:D4:3E:70:63:7F:31:46:A8:20:73:F7:60
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/8HtPxaRYmVHUPnBjfzFGqCBz92A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.8.0/22
212.215.129.0/24
212.215.208.0-212.215.219.255
212.215.232.0/22
212.215.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e7:81:56:80:bb:ca:cf:9a:18:34:74:15:a5:74:a5:3f:ad:
7b:39:21:86:9a:61:b8:cb:32:17:89:6c:28:99:fa:40:64:71:
d1:9b:e6:c4:33:40:28:2b:42:17:a4:c4:21:84:05:a2:e9:55:
e8:d5:86:3a:3d:f4:a1:9b:30:60:ac:bc:3a:64:a8:c8:1c:b0:
52:75:de:a2:ca:d7:6f:b7:34:49:df:90:15:21:e7:14:d1:8e:
78:73:c7:30:56:37:e6:bf:69:db:7f:5a:3d:94:18:83:37:a4:
13:74:08:75:59:bb:02:4c:9a:69:6e:0f:95:d2:ac:b1:aa:47:
53:cb:c4:c4:78:02:52:14:a6:32:1f:b9:1e:00:52:ce:32:e8:
ac:6c:45:8f:d3:50:c5:f5:cb:95:44:cc:13:ab:77:d1:7c:5c:
ad:ec:86:cd:e4:17:a1:1f:00:09:f2:41:e3:2f:ae:56:28:47:
1d:41:f3:c1:01:7f:be:6c:7f:11:d9:cc:a8:c4:df:09:9b:1c:
23:af:37:a7:50:d6:22:f6:33:0f:2a:00:fa:00:99:ab:8b:6b:
41:2a:06:5d:d6:5c:a2:e0:5f:86:eb:b3:4a:52:c2:3e:d4:69:
56:ab:ec:2c:6f:ca:36:a1:3c:65:98:1c:03:df:3f:21:c1:86:
2e:48:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:28:10 2024 by rpki-client on console-fra.rpki-client.org