Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/J7Z9D30Ll-SuPpV-y_zBbtvx7Ec.roa
File: J7Z9D30Ll-SuPpV-y_zBbtvx7Ec.roa (raw, json)
Hash identifier: TABzqxbm4xtSJLkCeMGwILRjMovtFAc2oiOYMujOQKI=
Subject key identifier: 27:B6:7D:0F:7D:0B:97:E4:AE:3E:95:7E:CB:FC:C1:6E:DB:F1:EC:47
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 018CC4930ABEB68903FDE299827C7B0C9545
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/J7Z9D30Ll-SuPpV-y_zBbtvx7Ec.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198682
IP address blocks: 185.87.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0a:be:b6:89:03:fd:e2:99:82:7c:7b:0c:95:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27b67d0f7d0b97e4ae3e957ecbfcc16edbf1ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:49:56:f9:b0:a4:82:f8:69:d4:9c:b1:3e:
be:6f:6f:be:30:8d:23:4b:dc:cd:a4:3e:54:0e:fc:
14:15:b7:46:83:6e:4d:2b:5f:86:2d:d2:61:93:93:
10:03:56:9b:5d:07:50:29:c0:d6:0c:83:93:4b:9c:
52:c5:5d:1b:e5:ab:6e:71:c0:83:ac:aa:54:19:ff:
67:57:b2:b4:48:8f:35:cb:f4:67:af:a3:6f:87:ad:
84:0d:b8:1f:32:32:34:d1:b3:db:d4:3b:8d:3c:2f:
fb:0c:16:41:a5:e6:66:03:d2:80:a1:2e:46:39:e7:
8d:5b:91:aa:14:16:6a:16:3c:35:a3:ac:f5:be:ca:
33:4d:51:76:e3:c5:8f:87:87:51:0c:cb:f8:c4:c5:
55:39:c2:84:ad:99:9f:17:ed:49:c7:bd:6c:ca:b7:
43:cb:24:78:b9:24:38:d9:8e:39:ef:8d:a9:5e:cc:
6f:e9:f9:73:31:e1:3e:ee:6a:af:2e:1e:84:b9:25:
2c:0d:ca:78:03:fc:6d:25:60:47:04:9b:58:b7:9d:
f9:ea:60:35:af:75:45:5c:d0:b9:99:7a:b1:69:82:
bd:c1:4c:e0:62:45:c3:20:8e:9b:56:d2:ac:08:36:
b9:67:2e:8f:01:e0:7b:09:76:9b:ff:29:5b:c2:4e:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:7D:0F:7D:0B:97:E4:AE:3E:95:7E:CB:FC:C1:6E:DB:F1:EC:47
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/J7Z9D30Ll-SuPpV-y_zBbtvx7Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.64.0/22
Signature Algorithm: sha256WithRSAEncryption
33:e0:09:85:59:41:43:b9:c1:76:35:f1:d5:a4:d1:8c:a8:5c:
de:70:67:1e:8e:44:7c:ee:17:f5:17:e9:5e:d2:18:03:27:aa:
78:63:39:97:89:15:fd:a8:b2:b5:ba:58:d0:1b:1d:06:18:2d:
8f:29:ba:0d:63:87:01:d5:2c:19:2f:dc:bd:91:88:32:a0:51:
c3:22:55:d5:93:51:fa:fd:f7:6b:ef:51:08:8b:f9:9b:4c:e9:
27:11:39:24:cd:c0:48:48:8a:6e:93:65:fb:a5:b1:21:13:da:
28:e9:cd:5c:8e:b4:00:7c:a2:5d:7e:35:b6:b9:2d:a0:7d:8c:
4a:67:6c:b4:fe:6b:93:ab:74:5d:48:ef:0e:84:0f:33:42:ae:
96:8a:d9:34:b6:1e:b3:d8:82:d4:bd:0a:6f:16:a0:3a:80:05:
34:67:0f:89:74:70:cc:78:7f:96:21:a5:95:29:2e:e8:1c:c2:
cc:18:ab:49:43:19:a5:75:f7:55:8e:ec:66:a6:f2:4b:44:bd:
e5:e4:aa:49:f1:e7:0f:99:85:5f:8f:2e:01:f7:7a:01:05:90:
bf:82:90:e5:69:7d:e1:6e:a6:1d:75:4f:18:d6:7b:ac:09:b2:
67:32:c6:24:a2:68:05:47:2b:14:f3:c9:6c:b4:6e:55:89:17:
4e:6b:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:32:37 2024 by rpki-client on console-ams.rpki-client.org