Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/h8jflufKn2op2SQpFK-AhmS4PtM.roa
File: h8jflufKn2op2SQpFK-AhmS4PtM.roa (raw, json)
Hash identifier: JQDxWANbwdxPwdsIEQKMlagVxPMf4FUxihWd4MfujO4=
Subject key identifier: 87:C8:DF:96:E7:CA:9F:6A:29:D9:24:29:14:AF:80:86:64:B8:3E:D3
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018FFC311B01A2FB3747831D0F9839937AF0
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/h8jflufKn2op2SQpFK-AhmS4PtM.roa
Signing time: Sun 09 Jun 2024 08:50:27 +0000
ROA not before: Sun 09 Jun 2024 08:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215350
IP address blocks: 217.60.236.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fc:31:1b:01:a2:fb:37:47:83:1d:0f:98:39:93:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 9 08:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87c8df96e7ca9f6a29d9242914af808664b83ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:82:99:3e:47:98:53:32:e5:58:5b:32:12:
12:b8:52:f4:40:82:d4:e7:84:51:07:2a:59:24:28:
cc:dc:69:68:f5:38:50:32:83:b0:78:98:fc:79:48:
b6:73:ee:14:14:4b:8b:99:04:2c:0f:f6:6f:f4:d2:
b7:2e:ab:a1:09:6f:ea:03:85:ed:75:be:ab:f8:3a:
27:04:a5:5a:f9:17:0e:51:90:ef:16:ec:88:67:a7:
14:8b:da:58:18:a7:d0:81:15:f6:77:85:d7:94:86:
1f:50:06:53:3c:71:bd:15:78:7b:0e:fc:79:38:25:
5e:0c:8e:37:76:a2:69:20:db:8e:93:6c:5b:2b:03:
20:c0:df:27:e6:4e:27:a8:1b:e9:be:e3:6b:ed:b9:
d7:d9:74:a6:28:7c:a4:49:db:bf:5f:48:86:97:8f:
2f:d3:46:49:34:af:7b:76:1d:de:51:1e:52:35:aa:
4f:d2:a1:62:69:a6:0a:de:90:ca:76:3f:a1:ee:ef:
df:f1:42:ad:18:56:85:13:73:89:0d:56:a4:4f:26:
1a:87:5e:77:be:1b:78:e0:2c:03:f2:cd:88:93:50:
c6:73:e7:53:38:11:ec:a0:f2:8b:bd:1d:dc:91:f7:
af:f6:9a:3b:a7:70:9f:bc:c7:34:b3:3c:23:d8:bc:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:DF:96:E7:CA:9F:6A:29:D9:24:29:14:AF:80:86:64:B8:3E:D3
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/h8jflufKn2op2SQpFK-AhmS4PtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.236.0/24
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fb:5e:7f:74:54:17:5a:75:d2:02:43:28:52:0a:06:d7:40:
47:72:68:2c:02:8a:83:38:b4:6f:bd:5f:38:26:ca:73:7e:fa:
28:d9:ba:09:65:9b:b1:87:52:c0:5e:30:1c:a8:35:3b:85:da:
4f:ed:83:ed:d5:48:dd:cf:49:92:29:58:9b:69:0b:ee:f6:ce:
5d:79:1e:09:b8:40:04:f9:9b:6f:6c:13:19:88:05:e6:b7:a2:
b8:fa:dc:7d:93:46:52:aa:bd:40:cd:53:0a:3c:b6:ee:c2:6b:
ba:b4:83:b5:86:f4:93:22:65:f0:1a:fb:7f:75:9b:60:ba:88:
b3:2a:b3:82:c6:ba:4b:c9:a0:60:76:f4:ce:e9:57:e4:2b:91:
ac:c8:83:57:e8:17:a0:1a:ed:87:dd:06:0d:9a:74:f8:88:86:
85:f3:72:d0:18:19:53:8d:a3:00:64:52:a2:73:ca:27:e5:e9:
08:1a:5b:bd:d2:d3:c3:81:a6:50:9a:ba:ec:c8:7c:b0:d8:35:
23:ac:e2:72:cb:2d:5c:65:70:36:4a:ed:b8:b7:7e:5e:20:9b:
24:0d:f8:fe:5e:f5:f9:55:d6:60:c9:fb:24:16:b4:7a:3a:84:
17:a5:e5:4d:87:11:6c:fe:ba:29:ac:9f:f4:a9:6b:31:e2:d8:
82:58:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:53:39 2024 by rpki-client on console-ams.rpki-client.org