Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/3LR0FE0Ix8edE_JFQ7BjwlnJshc.roa
File: 3LR0FE0Ix8edE_JFQ7BjwlnJshc.roa (raw, json)
Hash identifier: hXfYXxAaqY3XL+D4qw5Z+nqV1L/lAIY2DGY2NdL0pbw=
Subject key identifier: DC:B4:74:14:4D:08:C7:C7:9D:13:F2:45:43:B0:63:C2:59:C9:B2:17
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 018CC8DFA62627F3B1DEEC7630ECEED5C980
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/3LR0FE0Ix8edE_JFQ7BjwlnJshc.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200703
IP address blocks: 217.27.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a6:26:27:f3:b1:de:ec:76:30:ec:ee:d5:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcb474144d08c7c79d13f24543b063c259c9b217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:fe:05:6d:9b:3d:47:b9:64:43:e2:45:a8:
48:d8:4c:fb:aa:43:c5:c3:58:a1:67:9a:da:b7:5b:
80:a4:46:29:c8:28:ff:a9:54:e3:f2:51:e3:f4:fd:
d8:b9:f0:b0:1f:ea:9b:a0:bd:e5:1b:57:56:13:1f:
31:b1:92:b4:6d:bf:f8:5c:02:41:4a:b3:a9:e0:5c:
ce:e0:d4:2d:4b:10:01:6f:37:cd:60:75:48:fc:50:
27:91:b4:ea:a5:90:58:80:c2:e0:8b:19:98:a6:0a:
3e:b6:29:73:ae:a2:23:2a:3c:20:78:c5:31:fe:f8:
9a:a9:4d:20:78:f8:12:a1:7e:5d:f0:70:d4:d1:3e:
25:f5:09:88:1a:5f:15:12:58:94:ad:a0:1a:d8:b3:
52:22:0d:23:7b:c7:14:81:25:1b:54:a5:ff:1a:76:
cf:be:80:ec:ba:36:49:fe:df:58:fe:f2:0f:52:ca:
9c:c2:64:53:56:24:20:8b:eb:b8:b2:c8:1e:bd:c5:
eb:a8:24:41:0f:29:56:d1:9d:65:13:2c:b8:e7:d4:
d8:3d:ca:76:18:b1:c7:7b:73:9a:d4:37:33:c1:4e:
33:72:6f:b3:94:dc:c0:75:78:a0:6f:42:ef:6c:10:
9e:c0:35:af:17:77:fd:74:0e:22:72:35:a8:d3:40:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:74:14:4D:08:C7:C7:9D:13:F2:45:43:B0:63:C2:59:C9:B2:17
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/3LR0FE0Ix8edE_JFQ7BjwlnJshc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.27.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c6:90:85:33:63:f3:96:c2:24:df:24:2a:2d:0a:73:55:dc:
3f:b5:cd:aa:09:43:30:e5:9d:a0:1b:21:02:3f:1e:80:d6:67:
2d:25:17:05:4a:72:36:6d:ec:c6:61:77:92:01:58:5b:46:aa:
1f:71:5f:4f:ed:87:35:38:9a:d5:87:c1:cb:13:5c:16:c8:f2:
3c:25:9e:4c:dc:32:1c:ac:9b:2e:09:db:89:6b:98:fd:df:4b:
c1:40:a9:5b:6f:1b:29:88:f5:4a:40:98:fc:fa:54:bc:d3:d8:
05:77:43:a2:10:03:8e:50:2c:f6:00:27:16:87:97:59:b4:da:
96:51:6d:d3:63:8f:fb:2c:fe:0f:cb:9c:d0:75:a3:42:fd:de:
06:52:79:04:ee:c9:1c:b5:d2:ad:20:dd:b4:97:be:56:2e:72:
bb:89:d1:7e:65:4b:9a:85:23:4d:2e:c3:43:19:6d:56:d2:63:
99:52:18:15:ce:1e:d2:0b:70:ff:1e:07:c6:98:8f:08:99:79:
ac:86:d0:28:6d:ee:25:26:7e:77:c1:8e:92:c2:57:03:3f:3f:
40:e0:ac:86:d8:cf:74:cd:b0:b8:66:d1:32:e2:8f:c3:16:6b:
4a:05:af:e1:9a:11:7d:e4:67:9e:b9:9c:7d:d2:04:d4:6f:6e:
6f:68:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 19:48:07 2024 by rpki-client on console-fra.rpki-client.org