Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/J_nDMi7iCdmfxISsRmpZYXOoN7Q.roa
File: J_nDMi7iCdmfxISsRmpZYXOoN7Q.roa (raw, json)
Hash identifier: QsuRJpGPSnd804UM8UmpJqJov68TSi4lh0GqqnPGu0g=
Subject key identifier: 27:F9:C3:32:2E:E2:09:D9:9F:C4:84:AC:46:6A:59:61:73:A8:37:B4
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018CCA29850D70873CBB65392C398494DCB8
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/J_nDMi7iCdmfxISsRmpZYXOoN7Q.roa
Signing time: Tue 02 Jan 2024 12:32:47 +0000
ROA not before: Tue 02 Jan 2024 12:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 85.203.44.0/24 maxlen: 24
85.203.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:85:0d:70:87:3c:bb:65:39:2c:39:84:94:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 12:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27f9c3322ee209d99fc484ac466a596173a837b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:a3:e0:47:ab:51:1b:af:30:62:b2:0a:f0:
3f:33:68:9a:3a:43:a2:1e:cb:62:97:58:bc:bf:94:
07:7f:b0:d4:5f:c4:0a:e7:90:33:09:16:4d:75:ea:
b9:12:0d:c7:0f:bd:38:c6:c7:56:a9:1b:c0:78:3a:
e8:5c:96:e3:a1:0d:fc:56:46:0d:51:4d:2e:11:df:
e2:39:cf:7f:20:75:aa:ca:43:fe:cd:84:e4:29:18:
d9:00:4f:0c:31:09:bf:24:e8:bb:5a:85:3f:44:0a:
4e:15:d5:e6:26:df:98:d4:33:0c:4e:72:ae:1e:76:
d7:ec:c5:5c:2c:47:9d:4e:cc:7b:fb:be:54:98:c5:
13:45:af:26:76:d4:5c:07:9f:a3:fb:c1:f9:a0:fd:
d5:13:f8:34:2a:74:17:c8:a4:ec:e4:ab:f6:ef:c6:
2c:11:dd:dc:64:51:c7:ca:f0:06:2d:f0:fe:e7:4c:
07:d5:06:80:cf:ab:3d:1a:01:6f:4d:43:72:30:32:
3a:1b:f6:c6:72:b0:8f:a7:5c:6b:59:38:e3:d1:a6:
ff:fd:db:a9:7a:0b:cc:8f:c2:6c:c0:56:71:43:e8:
94:7e:c7:72:3c:a3:6c:4c:32:cf:26:a5:2b:84:4f:
4f:28:0c:e5:47:bb:47:dc:53:00:b3:e2:42:15:4f:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:C3:32:2E:E2:09:D9:9F:C4:84:AC:46:6A:59:61:73:A8:37:B4
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/J_nDMi7iCdmfxISsRmpZYXOoN7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.44.0/24
85.203.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4e:2c:d6:74:05:b5:48:0a:8d:0a:58:ce:49:7a:82:5b:32:
2b:57:6d:69:87:05:50:45:37:18:1f:ae:08:a7:cf:c1:69:c1:
4e:29:63:83:ca:7a:51:66:95:80:92:dc:24:30:1d:6b:24:20:
b4:32:f8:ef:e5:b8:c7:db:d6:57:6e:b7:26:d1:01:26:e8:aa:
ad:67:ef:ee:1d:b1:4b:9e:c1:54:f1:3e:d0:3f:e3:6e:7e:b8:
ce:77:c3:d0:0d:d6:93:82:dc:2c:6c:11:b6:6e:87:5f:24:2e:
4c:b6:b3:8f:9b:ea:af:06:11:fc:3e:c2:f2:95:4b:1e:f4:3a:
cc:c1:41:0e:af:09:62:da:68:3f:24:fe:0a:86:5d:8f:f9:87:
92:ca:7c:49:e0:eb:c2:30:5c:b7:2f:aa:f3:cc:eb:c1:da:e6:
0f:47:92:7b:8f:05:57:17:49:8a:8e:87:29:a7:16:98:cc:55:
67:1e:23:f5:58:2a:30:d6:6c:85:ba:3c:49:d9:33:7d:b7:24:
27:77:ce:ea:2f:d0:76:ee:f4:d2:bf:ad:eb:d5:3a:9b:aa:fc:
34:29:47:85:02:31:17:1a:07:81:80:dd:44:80:95:1f:d7:8f:
34:aa:d4:11:a8:50:9a:0d:40:d5:18:92:fe:8c:fe:ca:36:45:
1f:1c:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:36:56 2024 by rpki-client on console-ams.rpki-client.org