Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/xpl614R9Z8u7sl72SFEwouOPBCs.roa
File: xpl614R9Z8u7sl72SFEwouOPBCs.roa (raw, json)
Hash identifier: slpAAI6CQ1J+hf5oB8oZDMl1N4vjKUGPlQ0w2O1YElM=
Subject key identifier: C6:99:7A:D7:84:7D:67:CB:BB:B2:5E:F6:48:51:30:A2:E3:8F:04:2B
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 018CC8DF9E309F3FC1913C8ED53017AC1485
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/xpl614R9Z8u7sl72SFEwouOPBCs.roa
Signing time: Tue 02 Jan 2024 06:32:27 +0000
ROA not before: Tue 02 Jan 2024 06:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25478
IP address blocks: 85.112.96.0/19 maxlen: 24
2a00:1b30:8000::/33 maxlen: 33
2a00:1b30::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9e:30:9f:3f:c1:91:3c:8e:d5:30:17:ac:14:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Jan 2 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6997ad7847d67cbbbb25ef6485130a2e38f042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:04:f3:55:1d:d0:06:4a:22:e1:2a:dc:44:
75:9d:b1:6f:2a:eb:5b:86:11:e3:eb:1f:1d:6e:14:
1b:ea:a3:bc:af:b9:69:de:59:d8:f5:bc:08:47:27:
02:a8:65:18:de:02:b3:45:25:7d:c5:7f:8d:95:b3:
de:fd:55:96:b0:58:ad:45:5d:52:e0:af:d6:d7:58:
2a:ac:86:a7:9c:fa:6f:8d:c2:3f:ec:20:0d:c1:23:
f2:aa:83:99:ce:c4:a6:46:6e:fa:e6:ce:81:0e:5a:
31:c9:73:72:bb:d5:71:0b:03:2f:6e:81:29:d3:37:
5a:52:4b:fe:14:f8:e7:59:7c:99:46:e6:ad:2b:80:
45:e1:96:37:17:e6:e3:f8:ef:0d:bf:ab:5e:51:20:
45:d1:f5:8b:9d:02:a4:5f:fa:8c:4b:05:17:a1:fc:
67:f4:cb:48:94:20:af:87:f7:8e:97:37:38:55:1c:
c2:34:9b:15:6b:1e:c2:56:92:9f:6d:9e:18:b3:d2:
a1:f9:6a:b4:b3:ce:b2:a5:9a:1b:61:f5:93:6e:ab:
79:0d:28:23:42:ab:8f:c1:2c:d3:7b:fb:e8:77:a4:
5f:48:fb:75:ad:94:1d:d0:60:cd:c0:81:73:4d:80:
df:5b:00:db:0b:8f:b0:66:ce:1d:c8:5e:8a:71:9a:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:99:7A:D7:84:7D:67:CB:BB:B2:5E:F6:48:51:30:A2:E3:8F:04:2B
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/xpl614R9Z8u7sl72SFEwouOPBCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.96.0/19
IPv6:
2a00:1b30::/32
Signature Algorithm: sha256WithRSAEncryption
71:42:25:76:8d:d1:33:b4:ec:54:9e:1c:08:b5:5e:bc:ee:ca:
0f:6f:f7:96:37:e0:6b:78:b5:e6:dc:dd:b9:8b:f4:f4:0d:5b:
63:be:bc:a5:44:5a:13:dc:1f:5e:3b:55:0b:ba:c5:f0:18:fb:
ff:7e:d0:6d:bc:89:f6:ac:46:d1:93:07:68:db:bb:d6:a4:50:
09:39:ba:b5:ec:71:20:58:cc:8a:26:61:36:58:a4:13:5a:68:
de:97:4b:4f:2c:37:cf:28:df:d1:d8:bd:14:29:bb:01:90:1b:
25:94:fa:9b:86:4d:ac:aa:a8:f3:65:4f:e1:c0:dd:ea:40:56:
48:87:48:82:4c:7b:6b:a8:6c:8c:af:ea:ba:11:ed:4e:49:8f:
16:3b:b1:93:a1:5b:54:f5:2e:36:4a:bd:9c:30:e6:c5:e5:43:
e8:51:c9:ea:04:38:14:3d:30:18:d8:d0:82:58:e0:8b:a2:c7:
2d:41:08:4c:9f:b9:30:d1:80:f4:69:15:4e:09:ae:39:a2:60:
36:77:ba:ef:64:ae:32:7a:ac:a1:29:38:0f:81:1f:a4:06:bb:
3d:86:34:ae:ca:c5:a4:27:40:d3:20:9d:64:53:bd:cc:dd:17:
96:b1:bc:ba:08:b1:56:d7:49:3a:32:bd:eb:fe:27:8b:9a:c4:
61:70:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:48:44 2024 by rpki-client on console-fra.rpki-client.org