Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/J-jGy0xECmvnP2YvCUF_PeZMSMo.roa
File: J-jGy0xECmvnP2YvCUF_PeZMSMo.roa (raw, json)
Hash identifier: ch4wm3/Gc/s5l6lzOvWNUOg8TKSew+tP5G01oYhuBVQ=
Subject key identifier: 27:E8:C6:CB:4C:44:0A:6B:E7:3F:66:2F:09:41:7F:3D:E6:4C:48:CA
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 018CC4936D8162294DF03927286CA4017ED7
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/J-jGy0xECmvnP2YvCUF_PeZMSMo.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60154
IP address blocks: 193.0.184.0/24 maxlen: 24
193.0.212.0/24 maxlen: 24
193.0.129.0/24 maxlen: 24
192.251.230.0/24 maxlen: 24
2a0f:7ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6d:81:62:29:4d:f0:39:27:28:6c:a4:01:7e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27e8c6cb4c440a6be73f662f09417f3de64c48ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:74:8f:df:8c:dc:ab:85:f7:4a:3c:e3:9c:0b:
2c:ca:00:2c:5f:3a:c3:44:5a:31:28:80:c5:34:36:
e0:4a:62:fc:76:3b:e5:cd:69:04:4e:d1:de:6b:1e:
85:e3:7c:19:63:0b:8e:fd:6c:93:f9:2b:f5:4b:0b:
67:1d:cc:88:13:e9:17:db:cb:50:e5:dc:22:b2:2f:
8d:13:5a:84:fe:3c:28:22:69:fa:88:bc:17:07:8f:
96:6f:9b:3d:ee:65:1e:87:d8:f2:8f:c9:0c:1e:90:
4d:86:a7:a9:b5:bf:dd:7a:49:c6:61:32:7e:7e:ea:
c9:14:8a:37:cb:f0:58:3f:b9:55:89:ab:b7:fa:9f:
e0:91:6a:d3:ed:3e:a9:dc:8e:e9:5f:83:95:70:7b:
c9:ac:d8:59:6a:8e:6b:78:42:70:43:26:38:b5:d1:
d1:40:ae:9a:a1:be:29:88:03:35:b6:e6:3f:44:d6:
ec:63:a2:08:c9:0c:34:12:27:c1:dc:6a:00:79:10:
a9:16:d4:44:90:20:c8:00:02:f8:d6:3f:8b:d0:5b:
ca:76:a1:cb:6d:af:83:08:73:ad:13:94:34:0f:8c:
8c:08:82:0a:53:0e:ee:2d:c2:c5:68:d4:c1:47:5a:
cc:4d:c2:33:10:47:5f:10:0b:55:61:7a:29:ca:db:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E8:C6:CB:4C:44:0A:6B:E7:3F:66:2F:09:41:7F:3D:E6:4C:48:CA
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/J-jGy0xECmvnP2YvCUF_PeZMSMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.251.230.0/24
193.0.129.0/24
193.0.184.0/24
193.0.212.0/24
IPv6:
2a0f:7ac0::/29
Signature Algorithm: sha256WithRSAEncryption
34:f6:4d:20:50:cd:ff:e5:73:f3:22:cc:15:1a:b8:92:97:7c:
6b:f6:c0:8c:8a:d4:60:bb:c8:9c:e8:39:64:2f:9d:a9:26:f5:
15:45:36:80:f0:48:f3:77:bf:f3:e3:69:a0:d9:68:24:1b:57:
67:4a:54:e3:77:14:d9:49:92:60:21:24:be:33:66:4b:64:ec:
26:97:3a:60:6b:2b:79:03:f8:7f:3e:e4:6b:a8:0b:7f:31:4d:
4a:78:c9:5a:b9:9a:18:47:a2:be:96:33:0a:3b:f6:65:8f:1d:
96:9c:e8:41:a5:69:37:ba:e5:bb:ed:d2:1f:ed:53:a9:68:18:
b8:d9:79:11:17:6c:a3:ea:bb:2c:52:e4:c1:32:11:48:bd:0a:
8d:f7:41:5b:fc:51:d3:0d:74:65:d0:91:c3:1b:a1:e4:33:5c:
15:25:b4:1d:bf:d1:44:e9:46:4c:78:fd:8f:93:33:f6:f9:2f:
7d:ab:9e:13:11:5f:ba:e4:ef:0d:b9:fc:18:cf:3b:2e:f5:23:
fe:57:a5:f7:d4:7c:ed:e9:ce:0d:7f:22:4e:75:a4:7a:5f:bd:
34:d1:ab:98:39:39:85:64:a2:14:f0:c4:cf:7c:65:52:bd:ed:
78:9c:8d:33:2d:c0:6e:ed:e9:0a:83:17:6b:14:63:fb:2f:88:
de:84:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:39:05 2024 by rpki-client on console-ams.rpki-client.org