Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/coYAvtXdqOOJkD-ikSZYxBsnFsY.roa
File: coYAvtXdqOOJkD-ikSZYxBsnFsY.roa (raw, json)
Hash identifier: 5O7N8oinyAGkl4ZWfU0O9EGzcZFwaDRINoqVw84X3yY=
Subject key identifier: 72:86:00:BE:D5:DD:A8:E3:89:90:3F:A2:91:26:58:C4:1B:27:16:C6
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 018CC49366F56F75F9FE9F1451401358F7FB
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/coYAvtXdqOOJkD-ikSZYxBsnFsY.roa
Signing time: Mon 01 Jan 2024 10:30:43 +0000
ROA not before: Mon 01 Jan 2024 10:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201455
IP address blocks: 185.170.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:66:f5:6f:75:f9:fe:9f:14:51:40:13:58:f7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Jan 1 10:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=728600bed5dda8e389903fa2912658c41b2716c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a0:ab:b4:73:9c:32:c3:35:20:a2:33:97:2c:
6b:83:c8:9b:a6:c9:b0:a6:e0:31:88:13:67:2b:3d:
3e:03:c3:f0:94:c4:97:94:7c:09:9d:80:48:90:bd:
e9:e5:82:a5:bf:88:a3:8a:8a:84:8d:2a:f9:5e:11:
a0:0b:c6:67:75:6f:e1:73:26:7e:5e:a7:e3:74:f6:
a9:6a:00:ec:7a:2b:18:c3:0c:d0:95:72:19:eb:14:
04:a3:03:6f:ac:68:d5:06:24:21:f7:2b:19:93:16:
f6:98:3a:0f:8a:86:ef:a7:ce:3f:21:14:f0:61:e5:
aa:9e:5b:c8:9b:cd:aa:ad:29:20:52:d8:b1:d6:5c:
6f:da:7d:08:54:98:eb:32:97:69:0c:43:1e:67:f7:
eb:67:08:ec:8e:25:f7:47:96:fd:f5:9a:ea:97:fe:
d0:f9:1b:1e:21:e5:2f:b7:5d:d9:be:e7:78:44:98:
30:30:a6:a5:96:b5:9b:97:bd:8b:4b:3b:f5:f3:b7:
b3:c2:13:ca:82:dc:82:56:ac:01:d1:3e:b6:b7:b7:
c4:02:e0:ed:0e:2b:6f:77:18:e8:83:a4:a7:b7:ff:
5c:17:d9:1f:8f:9e:d5:75:71:a6:2b:37:9e:79:f4:
54:3a:98:f3:dd:27:19:10:01:ee:5a:f4:17:f6:40:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:00:BE:D5:DD:A8:E3:89:90:3F:A2:91:26:58:C4:1B:27:16:C6
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/coYAvtXdqOOJkD-ikSZYxBsnFsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ee:2d:cf:26:8a:ad:26:02:03:04:12:84:d1:c3:b9:14:09:
eb:6e:c5:c6:08:fb:84:ba:5a:d9:36:c7:3f:82:c7:ae:da:e2:
8b:aa:25:37:ae:8b:13:c7:bf:fb:93:86:02:72:04:0b:bd:b4:
37:9f:03:37:3b:8e:15:90:1f:45:3e:98:ef:c1:df:04:f5:99:
c9:d9:24:6b:85:b5:67:50:85:3b:9b:01:4e:84:02:d9:47:86:
83:9d:06:9f:7e:39:4f:63:0c:e3:cb:ce:e3:17:c7:dc:55:2b:
4e:70:52:d1:fb:b8:75:65:5b:1b:88:74:1e:06:cd:39:50:e8:
c9:f4:3d:9c:5c:12:c2:bb:03:7a:a7:98:1c:b3:01:8a:b3:2d:
49:99:5e:2f:7d:8e:da:3a:0a:55:46:f3:fb:3c:16:53:27:b4:
5d:47:b5:06:71:9d:df:ad:2f:d3:bd:24:15:e0:d4:63:5c:bc:
3e:4e:58:99:02:19:8f:15:83:7d:b6:12:38:3c:a7:a6:f8:73:
1e:17:0a:30:2c:2f:40:28:c2:8d:87:a0:33:b1:3f:a5:8a:2f:
ad:65:cf:dd:ca:5a:f9:3f:a0:3b:f8:0f:d1:d2:a3:83:38:94:
68:a8:3b:1d:87:ec:0c:9a:67:cf:e8:05:0b:b5:a5:65:39:6f:
ed:2a:d6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:33 2024 by rpki-client on console-fra.rpki-client.org