Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PUrH-pPoK31ZLWaOkXpmrUZeAMM.roa
File: PUrH-pPoK31ZLWaOkXpmrUZeAMM.roa (raw, json)
Hash identifier: pqqChjkL5YxAj+8sCGzbKon660+HxsuzAOZ19WuIVSA=
Subject key identifier: 3D:4A:C7:FA:93:E8:2B:7D:59:2D:66:8E:91:7A:66:AD:46:5E:00:C3
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42563C9F900D9EC9CD26A0052B17C18
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PUrH-pPoK31ZLWaOkXpmrUZeAMM.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138195
IP address blocks: 185.227.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:63:c9:f9:00:d9:ec:9c:d2:6a:00:52:b1:7c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d4ac7fa93e82b7d592d668e917a66ad465e00c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:30:ff:cc:d6:b2:b1:b4:ca:6e:e7:c3:c9:
a6:2e:50:3e:ca:ed:a6:d0:d0:08:48:27:e0:ff:5a:
3c:df:c6:23:7b:5b:3b:a5:be:fb:bc:6a:e1:ce:76:
9c:90:bc:b8:6c:1e:00:2b:7b:5c:cc:ad:f4:a8:cc:
8c:99:1a:79:04:31:ef:6a:6a:72:3e:ba:11:d6:49:
96:1a:b6:0f:31:60:41:69:2b:41:db:5f:b5:ce:1a:
3e:c4:e9:b2:cb:af:4e:ce:24:2d:96:cd:b5:4f:32:
fa:be:0d:3c:12:a8:09:f8:1e:bc:89:60:6b:09:e5:
1e:54:8d:18:a0:ef:c7:f0:51:3d:f6:75:d2:58:30:
41:52:a8:c9:5b:0d:6e:ad:32:52:03:89:de:7b:dd:
d3:71:0b:95:d6:21:71:7d:51:3c:35:0e:f7:16:23:
7f:f4:bd:2d:bc:a3:91:41:7f:7b:52:5f:fb:b8:80:
08:d7:06:aa:46:b0:41:9f:4f:a3:b9:72:3c:87:ec:
30:cc:e4:b5:90:9f:68:35:09:7c:7b:e2:31:65:a5:
b2:c5:2f:35:63:f3:53:55:ad:d7:e9:19:79:f8:32:
84:e8:90:ba:ae:9f:a2:f2:16:c0:d5:e8:45:ec:34:
53:80:07:0b:a0:79:e5:55:df:02:ea:6c:34:ed:2d:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:C7:FA:93:E8:2B:7D:59:2D:66:8E:91:7A:66:AD:46:5E:00:C3
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PUrH-pPoK31ZLWaOkXpmrUZeAMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.70.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:cc:2b:88:26:62:a9:ae:00:80:fc:dc:64:46:04:1b:2a:c1:
40:9e:0b:16:70:10:64:55:39:5f:b3:f0:34:76:21:d4:c4:f8:
8a:d0:6f:a6:4e:98:de:f8:98:6b:d9:54:ee:f8:ad:76:e8:f6:
49:bb:64:a2:22:a3:a9:cb:11:38:76:16:3a:76:39:13:b7:4c:
53:e0:38:f8:6d:da:31:51:1f:5b:1d:67:9b:33:9b:90:f1:4e:
bd:b1:b3:21:f0:50:f1:e5:57:d8:b4:95:85:7a:4c:a2:0d:63:
7a:e1:97:f8:c2:11:e1:31:12:4c:f9:40:91:5d:3a:bd:e1:50:
d9:c8:cf:36:aa:5b:24:5c:84:4d:88:1f:a6:4f:87:bb:3a:0b:
81:81:d9:a4:79:f2:4d:cf:e8:fc:86:a5:63:6e:18:d7:80:4b:
12:00:20:8e:32:8e:8f:31:e0:cf:09:23:19:e8:6b:c5:a5:2c:
fc:83:41:95:d3:96:d3:7c:d1:bb:12:eb:34:38:65:7f:3a:88:
b7:12:7c:36:a9:7e:80:8a:e8:e7:f7:ed:fb:df:fd:f1:ea:fe:
97:a2:e6:0f:dd:87:8d:5c:79:96:ec:47:eb:54:0b:fe:7c:29:
d3:29:88:96:98:68:5c:c2:55:db:28:4d:1c:62:3c:7c:78:85:
2f:2e:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:59:06 2024 by rpki-client on console-fra.rpki-client.org