Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/SRHxzuYAaWMBXp0ooH5vOlqYKpY.roa
File: SRHxzuYAaWMBXp0ooH5vOlqYKpY.roa (raw, json)
Hash identifier: 0qRDWWER+Tx421z4D9mqg5zt71uTP398w3RNKAkbtb0=
Subject key identifier: 49:11:F1:CE:E6:00:69:63:01:5E:9D:28:A0:7E:6F:3A:5A:98:2A:96
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 018E3977A0EADBA11AEF16E34C3B47D175BB
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/SRHxzuYAaWMBXp0ooH5vOlqYKpY.roa
Signing time: Wed 13 Mar 2024 20:18:45 +0000
ROA not before: Wed 13 Mar 2024 20:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62263
IP address blocks: 185.42.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:77:a0:ea:db:a1:1a:ef:16:e3:4c:3b:47:d1:75:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Mar 13 20:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4911f1cee6006963015e9d28a07e6f3a5a982a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:75:74:89:8a:f9:d6:58:d7:7d:a7:64:91:
f2:16:36:94:cc:c8:f3:70:f6:03:bb:a9:86:62:9e:
3f:12:f9:39:51:5b:8d:e6:d9:6c:a5:e7:7d:e1:f1:
93:a8:a9:44:8a:92:e1:61:73:b5:3e:21:cf:ec:75:
79:ce:f9:96:17:1e:38:64:5c:75:f1:87:77:09:8e:
ce:80:5c:04:3a:19:50:14:e3:22:70:c4:13:e2:43:
91:b8:43:43:61:35:0d:f2:3b:80:3b:29:d8:7b:04:
3c:0f:cd:67:3e:6a:49:76:e6:3d:89:09:6c:80:4b:
2b:52:24:06:cf:d5:83:d5:04:d3:b1:93:93:53:04:
94:9c:68:82:c0:d1:ff:ec:2c:16:68:46:7c:c8:0b:
34:3f:73:54:31:0c:88:01:bc:cd:fe:05:8b:98:34:
af:25:0e:5a:3e:b8:90:00:1d:2b:f1:64:52:83:3a:
41:54:84:db:e0:31:8e:0e:04:f5:4b:60:cd:89:64:
9d:2b:8b:8c:cb:a0:f4:36:da:81:ed:8d:ed:5e:8f:
af:4d:87:c5:e6:bf:96:09:ca:03:21:5c:ae:8e:2e:
60:eb:55:75:4e:11:64:cc:8a:32:20:ec:e3:19:69:
51:ef:31:98:ab:11:34:4a:fb:8a:7c:38:f7:b0:e7:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:F1:CE:E6:00:69:63:01:5E:9D:28:A0:7E:6F:3A:5A:98:2A:96
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/SRHxzuYAaWMBXp0ooH5vOlqYKpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fe:87:b5:f5:d3:6a:93:1b:8b:2f:a5:9e:68:a2:b2:0b:e0:
d5:72:c1:57:e9:00:5d:e1:ee:58:9d:03:fd:3c:bf:f7:4a:87:
48:0f:78:b5:ce:74:e6:8a:76:a1:9d:03:60:73:36:41:56:c4:
7d:51:56:d7:99:b1:c0:c5:f2:b6:6d:ab:de:63:16:e0:1e:36:
0e:1f:e0:ba:6d:97:f5:85:01:d6:1c:2d:d7:da:11:c9:4c:a3:
99:a9:31:06:ca:9c:d1:2b:36:c5:4a:61:c4:19:9f:8b:23:1a:
a2:e4:1f:4e:34:8d:90:33:7f:b6:5f:b0:63:ce:b8:f3:f3:83:
27:c9:c3:b8:d7:53:06:51:59:7b:c0:a6:51:47:30:af:e5:61:
92:36:5f:5b:0c:2a:fb:36:f1:63:1d:9c:ea:cb:77:05:b3:19:
17:48:72:8e:37:99:38:c2:0b:0c:d0:f2:ba:60:22:a7:b8:dd:
a3:9e:ac:d6:41:b4:77:9b:76:8f:44:b3:df:ab:4b:9e:f9:fc:
37:6f:9f:4b:5d:56:2b:a2:ef:f6:ce:4e:0c:cd:a6:3a:6d:db:
0a:db:60:dc:ce:f8:88:ea:1b:01:5d:97:f3:74:8e:b9:43:98:
2d:a7:c5:26:7e:e2:69:ec:94:49:09:8c:eb:a2:8d:6e:c9:c8:
a3:5f:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:54:17 2024 by rpki-client on console-ams.rpki-client.org