Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/4FllAirFpCcZiXFq_JEB4mevO_4.roa
File: 4FllAirFpCcZiXFq_JEB4mevO_4.roa (raw, json)
Hash identifier: 7p577lxB/De578C9VuTjnSvMAPW+bHlRUUKBklTt0R0=
Subject key identifier: E0:59:65:02:2A:C5:A4:27:19:89:71:6A:FC:91:01:E2:67:AF:3B:FE
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 01909B1D6936FA33886BED1502F3DA7A5D47
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/4FllAirFpCcZiXFq_JEB4mevO_4.roa
Signing time: Wed 10 Jul 2024 05:28:34 +0000
ROA not before: Wed 10 Jul 2024 05:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 85.203.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:1d:69:36:fa:33:88:6b:ed:15:02:f3:da:7a:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jul 10 05:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05965022ac5a4271989716afc9101e267af3bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:19:47:ad:96:05:34:e1:04:d2:02:69:12:
37:ba:a7:39:c6:86:cd:ad:16:5d:de:77:ce:c2:da:
c6:f0:f6:e3:d2:cb:de:b5:41:2a:69:a9:dd:7d:d7:
86:9f:82:b1:8b:ea:e8:81:6d:b7:26:6c:7c:ae:c6:
3c:65:04:bb:17:78:9c:7e:f0:07:ad:76:9c:10:a8:
4f:7e:c0:8d:1f:22:05:59:de:b2:5a:11:0f:63:21:
c6:b1:af:dd:ea:6a:3a:64:45:17:83:40:e1:ad:44:
58:3a:89:dc:46:99:2b:86:61:c9:21:9d:26:26:a4:
a5:7f:e3:90:41:61:bd:e6:88:6a:54:17:26:59:b6:
3f:39:aa:67:79:73:2d:b7:01:42:4c:a6:fa:25:14:
72:7f:73:05:c6:a8:0a:10:06:56:4c:5f:38:fe:23:
3a:ae:7c:63:cb:86:a1:c7:a0:ad:a5:78:98:73:bd:
d3:94:f6:d6:10:27:76:e3:96:92:a6:27:1b:f3:32:
c8:79:ff:ee:ba:96:5f:8a:7f:dd:fb:ea:31:4c:32:
61:2d:ac:50:2d:ae:53:63:fd:57:c9:f2:c6:7c:a4:
09:dd:e2:fa:a6:cf:32:c0:f8:06:22:66:56:84:94:
a6:e7:d4:b2:84:1f:36:c7:c8:8f:17:f7:a0:08:bb:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:65:02:2A:C5:A4:27:19:89:71:6A:FC:91:01:E2:67:AF:3B:FE
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/4FllAirFpCcZiXFq_JEB4mevO_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2b:15:b8:5c:04:e6:c2:04:0a:50:46:4a:51:c4:47:ae:c1:
f0:bd:2e:7a:1d:53:ba:3f:e5:65:01:fb:29:c9:f8:c6:84:09:
b5:bf:e9:ff:5f:a5:9a:58:23:b1:26:6c:2e:34:92:d4:45:29:
36:c0:a3:46:7b:86:3e:1f:88:de:98:bc:db:a4:72:7d:d0:75:
07:df:54:43:36:fa:53:5a:c0:55:8b:57:bb:d4:fb:df:00:e7:
a8:0d:84:39:86:5e:4a:b4:b8:0a:a8:0f:78:39:2e:d5:d7:ef:
35:e9:f5:8a:90:0b:ef:7e:25:49:67:d8:31:1d:1e:04:65:70:
a7:47:29:57:dc:0a:40:60:29:76:9d:99:26:57:35:9a:65:a7:
97:0a:4a:1d:41:93:d7:40:e1:bf:70:22:0c:d5:55:b6:bc:77:
1a:a2:0e:5c:98:ce:df:6f:06:bd:e7:aa:25:c7:0c:4c:0b:cf:
25:22:5f:cc:96:ff:33:0c:ff:a5:95:80:92:d6:96:b1:c3:be:
f7:35:92:35:1d:4a:74:28:7d:a0:ae:51:25:2d:98:dd:1b:e5:
e2:c7:24:80:e8:5c:c2:44:5f:99:e9:81:bc:ee:50:d3:04:fa:
d6:1e:50:e1:a1:60:a8:b8:d9:7a:d0:79:74:92:45:12:78:21:
f0:4a:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:09 2024 by rpki-client on console-ams.rpki-client.org