Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/J92UePL1w68KMvF09eUKnQO9sSM.roa
File: J92UePL1w68KMvF09eUKnQO9sSM.roa (raw, json)
Hash identifier: SKDlzrutQzkB+I4e1SOTfiCsuvX+zu9CvFI22nNjgbc=
Subject key identifier: 27:DD:94:78:F2:F5:C3:AF:0A:32:F1:74:F5:E5:0A:9D:03:BD:B1:23
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 018D3CF5671F5CFB7EE7D6A585522B8CE06F
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/J92UePL1w68KMvF09eUKnQO9sSM.roa
Signing time: Wed 24 Jan 2024 19:32:11 +0000
ROA not before: Wed 24 Jan 2024 19:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 45.85.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3c:f5:67:1f:5c:fb:7e:e7:d6:a5:85:52:2b:8c:e0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 24 19:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27dd9478f2f5c3af0a32f174f5e50a9d03bdb123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:cf:7f:6a:7b:de:96:8b:6e:b1:58:57:9f:
35:02:b1:45:02:10:15:45:4a:19:cf:52:1b:79:26:
c6:c6:9d:1c:10:33:e4:c1:fb:07:fc:80:7e:db:32:
8f:24:55:ee:ea:47:06:2f:cb:ae:dc:e8:8c:a2:77:
ff:d9:b0:91:6c:49:50:5d:ae:e8:33:e0:24:72:b7:
2d:e6:a5:b2:99:0a:95:c0:26:0a:c5:e7:49:42:26:
7c:18:5a:29:cf:4e:50:56:75:db:1e:8a:4e:f1:95:
2b:83:f1:4d:72:1e:e1:9e:c6:03:30:16:00:66:62:
b9:6e:21:d7:ad:79:0b:3b:f7:99:7f:8d:d0:77:99:
0b:3c:40:0d:68:6e:f6:0c:35:22:88:d7:db:71:2e:
46:3f:9f:60:b7:37:e2:d6:1c:51:55:07:f2:1c:04:
47:89:37:b3:d1:ef:1c:e2:26:94:f6:6d:dc:ad:67:
fa:fe:ff:7b:80:98:ee:be:f4:51:d2:a8:fd:fd:7e:
e3:9c:9e:af:23:91:ac:66:f9:7b:0d:48:f5:e2:f3:
58:27:4b:fb:b0:61:f5:a0:7d:85:77:4a:75:ac:e6:
68:ed:b5:c0:64:22:ec:7f:e4:0f:aa:81:f0:4f:ad:
28:e4:57:ff:0b:3b:d3:d4:79:50:2c:7c:02:d1:74:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DD:94:78:F2:F5:C3:AF:0A:32:F1:74:F5:E5:0A:9D:03:BD:B1:23
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/J92UePL1w68KMvF09eUKnQO9sSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
Signature Algorithm: sha256WithRSAEncryption
61:98:49:3f:2d:40:ac:5a:67:02:c2:06:ed:be:9a:3b:8d:95:
4c:d2:7d:5b:ba:a8:1a:f2:22:a8:f9:2f:7b:6a:77:91:ca:7f:
c2:8d:27:28:63:9c:1d:df:75:f3:d5:e5:0d:f4:6f:ee:b9:bf:
be:cd:c1:95:d9:09:ce:0f:c6:81:fc:1d:69:93:6c:bb:fa:65:
19:81:9a:26:01:d0:fe:8c:f8:c0:47:8c:c2:7a:a5:75:40:79:
e8:4d:c8:e4:82:3d:a1:86:d3:f4:d9:8f:ec:47:c4:14:70:9b:
50:3a:03:c0:5b:ce:0d:a8:bf:8b:47:b5:4f:b2:e7:d8:a1:d1:
1d:d0:70:43:e7:d6:b0:07:15:7f:15:ef:2a:02:4d:c6:bb:6f:
89:da:97:65:55:cf:d2:b3:5f:82:f1:67:b0:a1:d2:2b:f9:99:
1c:9a:4f:82:78:ba:54:6d:b2:b9:61:3b:49:b2:1e:62:ee:d1:
b0:26:41:b7:38:2b:31:04:5f:64:c5:df:e5:f2:83:04:56:91:
08:cf:c5:40:dc:3a:d6:78:b7:d9:94:85:f3:82:70:76:02:b2:
2d:d2:1f:38:39:c4:5e:cc:da:6e:83:e6:dd:6d:e1:01:31:76:
c1:04:f2:54:22:f0:ca:f0:9a:e3:5a:7f:7d:54:23:7c:e2:84:
03:fc:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:31:58 2024 by rpki-client on console-fra.rpki-client.org