Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pa7zQrXzR-pBdCrcc94CVsayUtE.roa
File: pa7zQrXzR-pBdCrcc94CVsayUtE.roa (raw, json)
Hash identifier: g/++4CZxke1A4z4EAiHaz19iTDon+oYrHXWm3vJCLA0=
Subject key identifier: A5:AE:F3:42:B5:F3:47:EA:41:74:2A:DC:73:DE:02:56:C6:B2:52:D1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8E8DE86A060776C9BA5248468A5C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pa7zQrXzR-pBdCrcc94CVsayUtE.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200289
IP address blocks: 85.31.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8e:8d:e8:6a:06:07:76:c9:ba:52:48:46:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5aef342b5f347ea41742adc73de0256c6b252d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:9f:ff:9f:ee:f0:fc:f8:84:9e:63:2d:25:
ae:26:1b:1a:12:9a:69:a0:fb:b4:59:e2:a6:0f:a9:
bc:73:34:1a:dd:93:da:51:fc:6b:39:af:11:7e:0a:
85:a1:cd:05:fb:79:e9:7a:bf:b8:7b:90:1e:50:a4:
2f:f4:ca:f9:14:cd:bc:cd:19:a6:df:ae:f6:fa:6c:
93:41:34:04:65:20:52:f9:c2:30:a5:6e:2d:9d:da:
91:a5:a4:90:11:87:18:95:f5:fb:0c:ec:26:a9:83:
61:73:d9:e3:01:60:e0:47:bf:4e:ae:4d:74:8c:df:
f0:c9:6a:ef:92:b9:5b:ab:9e:25:db:29:6f:3c:30:
43:a2:6c:bd:1f:8c:50:ad:7e:c9:62:7d:a6:47:0c:
96:47:9b:1d:01:2e:ed:8e:59:3c:40:0b:59:e3:3f:
6b:da:ac:00:db:3f:ee:67:1e:41:93:34:08:a1:8d:
46:13:96:df:fd:39:d0:e2:ea:9c:53:61:d0:84:8a:
fc:62:6e:07:e1:2d:41:0e:2c:78:fc:ad:19:92:4b:
26:4a:f1:bd:27:cb:8f:b8:72:11:27:09:1b:41:01:
cf:74:60:7b:2f:bb:2b:64:30:fc:00:4f:c7:5b:fb:
37:2f:8e:e7:36:bf:fd:99:8b:94:85:a3:9d:4b:b5:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:F3:42:B5:F3:47:EA:41:74:2A:DC:73:DE:02:56:C6:B2:52:D1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pa7zQrXzR-pBdCrcc94CVsayUtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.245.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c2:e8:34:87:4d:a1:88:80:7c:df:ff:37:97:59:87:e0:8f:
5d:a8:9b:7f:01:20:10:7e:0f:20:77:c8:c2:ad:eb:e5:4b:c9:
a1:01:19:47:3d:14:17:21:f4:3d:53:84:a9:e0:69:49:2b:0b:
7a:9e:45:84:bf:15:c1:72:7e:d6:b9:b4:7a:12:4b:7f:18:d5:
4c:a2:8f:e6:08:35:0c:16:d3:0b:4f:90:d4:1d:46:3d:81:4e:
71:7c:7f:12:68:76:15:20:8d:84:c3:bc:94:69:38:22:c4:04:
6e:0e:a4:85:c6:5a:82:69:d3:0b:c9:31:12:15:61:a7:16:67:
9f:bc:01:32:d2:8d:dc:5d:f9:06:a7:c0:b9:17:ed:34:55:f0:
8e:ce:60:12:d8:83:cf:91:86:e0:78:2e:3f:f2:01:b4:c5:a7:
35:cd:7a:2b:53:66:03:47:93:8e:de:fd:9f:55:d9:9d:77:71:
89:20:ae:28:a2:2a:05:74:18:43:56:ad:25:03:7c:c7:1e:5f:
0b:6e:fd:ed:37:44:88:87:62:3d:9e:ee:b1:80:97:2d:f9:bc:
e3:93:1d:f6:06:fd:05:19:bd:a0:bd:7e:77:ca:82:d1:fe:4b:
9e:a3:5f:0e:db:17:d0:77:6c:82:46:dc:16:90:42:2e:67:c3:
bb:a2:32:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org