Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/o-4rXRZ67pAoeqLbbraT5mnstBw.roa
File: o-4rXRZ67pAoeqLbbraT5mnstBw.roa (raw, json)
Hash identifier: OrqbzixmUqjIbtHkVE8GhiJV4FqL2Gj5rLfW8f9XPt0=
Subject key identifier: A3:EE:2B:5D:16:7A:EE:90:28:7A:A2:DB:6E:B6:93:E6:69:EC:B4:1C
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 018CC94CABD3FD3A7EA8A5378763EA329CB7
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/o-4rXRZ67pAoeqLbbraT5mnstBw.roa
Signing time: Tue 02 Jan 2024 08:31:34 +0000
ROA not before: Tue 02 Jan 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210393
IP address blocks: 85.31.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ab:d3:fd:3a:7e:a8:a5:37:87:63:ea:32:9c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jan 2 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3ee2b5d167aee90287aa2db6eb693e669ecb41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:95:e5:ee:03:62:62:f1:b0:46:02:6a:f6:
e2:9b:e2:38:46:a7:ed:fa:06:49:8a:3e:13:7d:67:
be:21:09:a4:bf:bb:7f:a5:ae:6e:5a:76:5f:b5:ac:
17:15:bc:39:39:d9:7e:70:35:0c:e7:6b:ae:db:31:
aa:8c:a9:65:33:6a:eb:0e:d0:3a:be:62:01:2f:80:
39:6e:83:83:b3:40:d8:d9:48:36:ac:1c:8f:e2:9a:
94:03:8b:3a:1e:ae:a2:32:e7:14:fb:90:35:44:b1:
d1:ef:49:7b:53:2e:41:31:ee:4e:98:38:7a:6c:5c:
b6:ef:30:8c:12:a0:ba:59:05:4b:35:7a:6d:a5:ff:
b8:01:41:1b:38:7e:a0:5f:ee:16:04:9c:b5:fc:96:
1a:96:23:2e:e7:67:d8:22:7e:88:cf:a8:44:8f:6e:
4f:6e:34:8a:92:52:88:a5:a9:0a:7d:b7:88:4b:96:
93:62:ee:73:61:b3:05:f5:cd:31:5b:a7:e8:78:c7:
1a:b6:f6:52:b0:f0:08:c1:2b:fe:65:c0:a2:63:ff:
bb:8a:c2:99:72:b6:7a:ed:63:71:d7:08:af:86:09:
e5:36:a5:27:a5:32:ed:32:68:5c:e3:71:59:4b:bf:
c4:2f:2b:38:17:10:d6:4a:e5:3f:77:c8:a2:a6:89:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:2B:5D:16:7A:EE:90:28:7A:A2:DB:6E:B6:93:E6:69:EC:B4:1C
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/o-4rXRZ67pAoeqLbbraT5mnstBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2e:e9:64:cb:cf:e3:9d:a0:f4:16:1f:f9:d2:bb:b8:be:d2:
25:7f:4c:d1:7d:43:77:9b:df:3b:33:d5:db:31:43:cc:68:ea:
66:c4:58:6f:c3:9f:04:52:40:46:cb:39:e1:54:1b:b1:14:2a:
61:55:59:66:cf:ee:f3:48:ae:1f:d1:30:34:23:33:7c:6d:26:
52:51:f5:45:34:7d:74:25:a7:d8:fb:9d:fd:5b:af:09:7a:8d:
a8:85:d8:fa:d0:9d:f4:f4:b0:24:ab:7d:46:72:de:7f:e7:f9:
d1:0d:c9:a2:c7:d8:27:19:20:9c:41:11:b1:05:22:ac:53:15:
d0:b1:4d:5e:40:64:fe:33:cf:87:b7:ec:18:be:fd:9f:73:f6:
42:c5:ea:37:ae:19:d7:29:28:d2:16:a0:63:f3:77:56:1a:48:
ef:3f:c0:c0:78:85:ab:75:59:f0:62:a4:b4:a1:93:26:bf:19:
38:ec:31:0c:37:c8:dd:52:00:a6:e3:bc:c9:22:34:79:9b:03:
11:bd:34:4b:40:c4:4e:ab:b6:0d:78:a1:b1:b2:85:fd:10:87:
67:20:57:33:f8:b3:64:c2:82:67:ad:51:c5:cc:73:ef:6c:e1:
94:8b:67:20:9a:60:94:ca:86:58:4e:db:07:b6:5d:98:90:c6:
5f:96:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:52:01 2024 by rpki-client on console-fra.rpki-client.org