Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ikjOg3DuV3dG0XMGGKFbvmv93U0.roa
File: ikjOg3DuV3dG0XMGGKFbvmv93U0.roa (raw, json)
Hash identifier: 0zoiK/IqK/ToLPo7OA7ij/m06EFT/E55yXhhbtK4O4w=
Subject key identifier: 8A:48:CE:83:70:EE:57:77:46:D1:73:06:18:A1:5B:BE:6B:FD:DD:4D
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 018CC94E683BC660AC33F4260FF7C7F73C9F
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ikjOg3DuV3dG0XMGGKFbvmv93U0.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 85.239.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:68:3b:c6:60:ac:33:f4:26:0f:f7:c7:f7:3c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a48ce8370ee577746d1730618a15bbe6bfddd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:2d:1b:a4:88:e7:40:a0:27:bc:05:06:52:
17:0f:71:83:15:5e:51:78:b3:a5:f5:a7:7f:b2:22:
f0:4f:76:83:d1:ea:e6:40:ea:70:9a:11:f0:92:5e:
65:17:cc:cc:42:1c:a5:62:3f:73:2d:ff:05:a4:12:
f3:8c:e6:8e:ab:52:a9:8a:b0:7d:ff:e8:b3:e4:0d:
18:94:c1:e2:cf:0a:9a:70:bc:a8:70:d8:ac:0d:7d:
d8:4a:53:ce:8f:c4:ea:df:42:74:e4:6f:fa:81:cc:
18:7d:f6:12:56:ff:1c:91:e3:ca:dd:b7:99:b9:b1:
49:0c:ea:5e:05:5d:65:3c:01:06:0e:56:1e:0c:c1:
85:84:32:8d:46:ec:cd:a6:68:e4:ee:e5:ca:f9:eb:
68:1e:5a:7f:67:09:47:8b:d9:87:15:cb:03:43:b8:
44:e1:d4:3e:29:63:e1:e9:25:20:07:8d:62:6f:3c:
09:6c:d7:b1:80:0a:18:c7:c3:f8:a7:08:53:7e:ce:
38:b4:79:34:78:68:fe:02:7f:1d:3d:e6:c6:bb:ef:
f5:3b:a3:ac:c6:88:ac:a5:93:bf:0b:3f:8e:f0:13:
44:f1:12:5c:23:35:eb:ca:6d:0b:62:c4:df:66:9c:
0b:55:51:40:87:b2:46:ab:a1:66:8d:68:ae:c3:4f:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:CE:83:70:EE:57:77:46:D1:73:06:18:A1:5B:BE:6B:FD:DD:4D
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ikjOg3DuV3dG0XMGGKFbvmv93U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:be:83:2d:3c:99:80:bb:5d:4b:f0:8c:5a:32:d3:ea:b8:93:
b1:23:19:21:61:85:99:55:67:7f:a4:32:ca:f2:23:dd:b2:9d:
65:39:23:db:a2:10:2e:75:4d:7c:34:23:62:bb:a4:d3:22:a0:
08:ea:78:c9:0c:42:a0:55:2d:35:4f:9e:26:17:94:23:42:ce:
d7:ac:5c:a3:ec:c5:71:ec:42:46:4d:c9:83:a4:60:02:ca:a8:
66:e8:9b:1d:38:ce:53:0d:4e:05:ae:1e:ab:e0:c4:d2:54:ef:
2d:41:d5:09:3e:a7:2e:90:8d:6c:46:5a:3f:44:ad:8f:a3:df:
1a:19:a5:51:6d:a0:bf:c4:66:f6:fd:6d:da:ec:20:07:02:57:
d5:38:b6:90:88:36:56:6b:9c:4b:47:05:23:a1:7f:16:39:d3:
ea:d8:d6:7b:c9:3b:0c:53:8f:f4:47:27:15:5c:3e:b5:5b:25:
6b:a2:1e:50:ea:53:29:79:4b:2d:6e:96:dc:b9:c2:ea:70:31:
e8:f7:20:da:2d:f4:4e:6b:d0:d5:32:b6:a3:65:f9:4b:0d:75:
4f:08:4a:dd:1d:dc:e7:c6:a2:5c:7e:b6:39:55:da:f9:7a:f2:
70:17:0e:ea:22:c0:04:55:1c:c2:f4:66:01:8c:78:a5:cf:a6:
b8:d0:3b:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTmg7xmCsM/QmD/fH9zyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2VjOTQyM2JmOTBjODFkMjJkOTQ4NDFjMTAzNTdhNTQy
NjAzNzkwHhcNMjQwMTAyMDgzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTQ4Y2U4MzcwZWU1Nzc3NDZkMTczMDYxOGExNWJiZTZiZmRkZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6ktG6SI50CgJ7wFBlIXD3GDFV5R
eLOl9ad/siLwT3aD0ermQOpwmhHwkl5lF8zMQhylYj9zLf8FpBLzjOaOq1KpirB9
/+iz5A0YlMHizwqacLyocNisDX3YSlPOj8Tq30J05G/6gcwYffYSVv8ckePK3beZ
ubFJDOpeBV1lPAEGDlYeDMGFhDKNRuzNpmjk7uXK+etoHlp/ZwlHi9mHFcsDQ7hE
4dQ+KWPh6SUgB41ibzwJbNexgAoYx8P4pwhTfs44tHk0eGj+An8dPebGu+/1O6Os
xoispZO/Cz+O8BNE8RJcIzXrym0LYsTfZpwLVVFAh7JGq6FmjWiuw0+/KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpIzoNw7ld3RtFzBhihW75r/d1NMB8GA1UdIwQY
MBaAFDt+yUI7+QyB0i2UhBwQNXpUJgN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQt
MWQxMGYzYzcwYmI0LzEvaWtqT2czRHVWM2RHMFhNR0dLRmJ2bXY5M1UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQtMWQxMGYzYzcwYmI0
LzEvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe8sMA0G
CSqGSIb3DQEBCwUAA4IBAQAKvoMtPJmAu11L8IxaMtPquJOxIxkhYYWZVWd/pDLK
8iPdsp1lOSPbohAudU18NCNiu6TTIqAI6njJDEKgVS01T54mF5QjQs7XrFyj7MVx
7EJGTcmDpGACyqhm6JsdOM5TDU4Frh6r4MTSVO8tQdUJPqcukI1sRlo/RK2Po98a
GaVRbaC/xGb2/W3a7CAHAlfVOLaQiDZWa5xLRwUjoX8WOdPq2NZ7yTsMU4/0RycV
XD61WyVroh5Q6lMpeUstbpbcucLqcDHo9yDaLfROa9DVMrajZflLDXVPCErdHdzn
xqJcfrY5Vdr5evJwFw7qIsAEVRzC9GYBjHilz6a40Dth
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:57 2024 by rpki-client on console-fra.rpki-client.org