Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/J7r3hz3XXnPhCh_hkh-3C_q3r5w.roa
File: J7r3hz3XXnPhCh_hkh-3C_q3r5w.roa (raw, json)
Hash identifier: abmXLUUNR9uSmYBW1U2gfsvslKlWL2wNUNKDGGer0U8=
Subject key identifier: 27:BA:F7:87:3D:D7:5E:73:E1:0A:1F:E1:92:1F:B7:0B:FA:B7:AF:9C
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 018CCA2BC78ED67C39B642194C4B5B65D136
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/J7r3hz3XXnPhCh_hkh-3C_q3r5w.roa
Signing time: Tue 02 Jan 2024 12:35:15 +0000
ROA not before: Tue 02 Jan 2024 12:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209217
IP address blocks: 92.119.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c7:8e:d6:7c:39:b6:42:19:4c:4b:5b:65:d1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jan 2 12:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27baf7873dd75e73e10a1fe1921fb70bfab7af9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:54:28:17:d7:57:79:6c:98:dd:88:de:82:09:
76:85:94:02:25:b5:39:e7:b1:30:ab:d0:4a:a6:ae:
9f:98:6c:a9:29:9b:f0:68:17:e0:01:05:b4:d5:73:
ff:e6:4a:8b:63:81:ff:70:78:06:95:fe:ae:c8:c7:
7a:79:4b:0a:f3:71:4b:ff:2f:c4:6a:01:c7:46:a7:
b8:fd:5d:54:70:22:b5:af:4a:0f:e1:3a:22:c7:84:
b2:a8:d0:86:11:ac:44:29:54:d2:bd:32:9b:c8:e3:
e9:c8:b9:1a:5f:47:fd:bf:28:0f:78:d8:cf:c0:ad:
56:c7:47:c5:5a:ca:0d:f1:5e:68:52:91:4c:e2:09:
02:ce:76:1c:e6:85:27:48:61:81:aa:a2:68:7d:d8:
c2:e8:9d:a7:a2:64:e6:fe:73:32:e1:bf:68:bb:3c:
5d:c8:77:1e:7b:71:31:60:a8:99:dc:4f:52:b4:8d:
a1:f7:e3:49:89:be:63:9e:d5:74:a5:de:34:a7:05:
00:99:45:d3:f8:2c:a3:06:5e:c9:40:c6:33:bd:07:
35:da:d3:aa:14:ef:a5:8b:f6:04:e0:01:4e:0a:27:
e9:a3:72:17:46:92:04:3f:07:d9:76:d9:17:68:62:
60:42:7f:c4:8f:72:d5:0b:22:93:a5:0f:f4:1e:62:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:F7:87:3D:D7:5E:73:E1:0A:1F:E1:92:1F:B7:0B:FA:B7:AF:9C
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/J7r3hz3XXnPhCh_hkh-3C_q3r5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.219.0/24
Signature Algorithm: sha256WithRSAEncryption
21:50:d1:4e:38:ef:1c:17:34:b7:d9:d3:cb:f3:3f:88:77:d6:
d3:11:69:0e:a3:07:0d:c9:ef:fb:32:e0:3f:99:d7:f1:37:e7:
9e:f6:f8:56:08:3e:03:b0:18:ad:66:46:e8:2f:84:9d:8b:88:
b6:4b:79:b7:33:58:ee:8c:b4:c8:3a:a9:f4:6c:ab:a5:44:f1:
c9:eb:8c:8b:4b:04:17:82:f1:8c:55:53:72:7a:66:b5:3f:db:
2d:7a:b4:da:7e:40:a8:1a:08:1e:ed:de:31:dd:58:8b:90:ac:
2c:b3:b7:6d:c8:b4:45:bb:e3:3c:36:f1:eb:4d:ce:06:65:69:
50:c9:47:b2:bd:d3:41:50:9c:2c:e1:14:00:cd:7f:75:52:3b:
08:ef:bf:f2:ef:b0:5b:ce:f0:07:46:e8:40:2b:de:d6:6d:3a:
59:d1:a0:9f:d0:a1:12:fc:2d:df:a3:86:d8:73:23:75:76:3b:
a2:86:60:e3:68:39:1c:d6:94:dd:35:8e:28:b7:78:c1:31:7e:
1e:23:a2:4b:75:c2:67:3e:f4:68:39:80:d2:27:b8:6e:51:97:
cd:f2:6b:d6:cf:d9:e8:d7:d4:01:d2:98:68:b9:1d:d7:e2:aa:
1b:6a:40:bc:61:d3:c7:4f:17:d3:07:17:42:ee:0d:ee:32:f8:
00:9a:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:40:00 2024 by rpki-client on console-ams.rpki-client.org