Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Jz5y5G95sSvH5ArYkJm9xIKyXyw.roa
File: Jz5y5G95sSvH5ArYkJm9xIKyXyw.roa (raw, json)
Hash identifier: jkaLRXBT0MqjZV0cjVtdUP73N0w+WYp/xnyTle/OOHk=
Subject key identifier: 27:3E:72:E4:6F:79:B1:2B:C7:E4:0A:D8:90:99:BD:C4:82:B2:5F:2C
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 018CC501561E60C47F71170DC6E0DF939E9D
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Jz5y5G95sSvH5ArYkJm9xIKyXyw.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34388
IP address blocks: 185.1.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:56:1e:60:c4:7f:71:17:0d:c6:e0:df:93:9e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=273e72e46f79b12bc7e40ad89099bdc482b25f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:57:86:8d:7d:2a:80:c4:ec:94:25:27:09:
41:bf:8a:32:2b:e3:6c:38:1a:91:57:69:e1:e8:db:
7d:c0:67:93:fe:ab:fc:06:a4:88:3c:88:24:8c:3c:
5a:27:74:7f:87:7a:52:52:72:01:92:91:99:4f:10:
53:02:24:46:dd:84:97:c6:5b:18:e1:3d:4b:cb:92:
1c:66:f1:80:ff:a2:a8:f3:ec:d4:6c:a5:db:bd:d6:
7f:bb:2e:0c:8e:9a:99:56:e6:37:02:62:b1:95:44:
87:1d:79:21:b5:38:79:47:a6:42:9f:15:c1:0c:ea:
95:ef:27:56:54:70:8a:5a:65:74:a1:66:a4:d8:5a:
f6:10:5b:58:0e:b6:55:d2:e1:73:56:e4:5f:95:29:
f5:b5:ce:19:7f:9e:bf:3b:99:7a:60:18:98:60:bf:
ce:f4:3d:41:38:8f:27:0e:ff:11:c0:bd:28:c4:e5:
79:85:28:c8:c6:2f:e2:85:57:a8:e5:14:4b:38:48:
d6:1b:f4:a0:9c:8d:97:64:a8:02:29:d9:1e:29:57:
ac:72:e0:b9:99:f8:c0:2f:92:e8:a2:68:f4:df:57:
af:6b:50:00:cb:6d:80:ec:fe:27:99:61:f3:71:92:
19:e2:e3:27:09:cf:fa:5c:51:26:f7:ec:14:20:de:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3E:72:E4:6F:79:B1:2B:C7:E4:0A:D8:90:99:BD:C4:82:B2:5F:2C
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Jz5y5G95sSvH5ArYkJm9xIKyXyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.158.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0e:1a:a8:ed:25:73:39:f0:42:ea:a7:21:12:f6:b1:65:6b:
13:33:a0:ed:e5:a3:dd:f7:33:23:a6:95:88:45:2f:9c:3b:29:
1f:ad:5e:06:48:c0:a7:9b:05:f3:56:01:d5:d7:e0:99:c5:a9:
c4:f1:9b:b2:d5:c0:c0:06:c6:33:db:78:c6:0c:00:ed:aa:a7:
eb:d0:31:19:d8:fe:d9:40:28:da:82:08:80:84:d0:c7:04:82:
50:9a:17:83:41:a0:48:6c:5a:05:7b:4e:96:4f:38:ff:9d:5a:
59:9c:41:a4:28:c1:73:bf:66:c2:64:6e:b8:ea:f5:a4:02:aa:
17:ea:5c:c1:12:c5:4b:67:31:73:34:f4:b4:e5:d0:96:05:45:
b8:02:2a:4f:a9:65:d0:7e:15:f6:4d:08:be:ff:26:12:b3:0e:
66:f3:0a:f2:b4:c0:b3:02:e2:01:10:9b:51:22:81:bf:b9:4d:
dd:69:e3:66:61:71:69:b2:88:c8:0c:21:7c:6c:1e:d1:34:8c:
c5:fc:3c:52:d7:b1:05:88:5c:75:53:ee:c6:b8:80:d8:23:6a:
07:a0:dc:2c:4c:e4:55:82:09:84:68:6b:f3:31:ee:3f:a1:75:
8b:3d:34:aa:5c:eb:d0:f7:14:66:ea:1e:b2:85:39:72:08:74:
7b:c4:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:06:52 2024 by rpki-client on console-fra.rpki-client.org