Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/I75AFHQZs2FHHKbxdiP8IKUp57o.roa
File: I75AFHQZs2FHHKbxdiP8IKUp57o.roa (raw, json)
Hash identifier: WDJu9DJCgr3zQeIgNRzXfP6ircNnDksOs987YAq+0Qs=
Subject key identifier: 23:BE:40:14:74:19:B3:61:47:1C:A6:F1:76:23:FC:20:A5:29:E7:BA
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 018CC3B7423F01FF357A8FB1A80ADC256DF0
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/I75AFHQZs2FHHKbxdiP8IKUp57o.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34913
IP address blocks: 185.227.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:42:3f:01:ff:35:7a:8f:b1:a8:0a:dc:25:6d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23be40147419b361471ca6f17623fc20a529e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:07:4b:6a:52:4f:3a:4a:ee:d7:0f:c6:54:
46:cc:f3:02:6f:48:7a:88:80:42:f2:b4:7a:ad:d1:
f1:a7:96:5e:50:12:2d:2a:57:66:76:62:3a:7f:ff:
8b:30:41:cc:23:1f:55:ef:61:3a:ea:a2:85:98:f3:
ab:d3:ae:8c:c8:c2:53:1b:ad:93:d3:10:e8:dc:fa:
f0:47:3d:94:f8:f9:b3:29:0d:af:69:97:df:d2:10:
c8:50:0d:a0:14:66:f8:ad:6a:02:62:5c:23:03:2d:
1e:69:c0:00:a8:64:fa:16:12:7b:57:8a:1e:69:0c:
0a:83:3a:8d:ef:9f:0e:4c:b8:46:00:86:67:72:dd:
7a:1e:1f:99:b8:7d:b8:96:84:8b:f7:0d:46:8d:71:
b2:da:c1:09:e0:f4:46:c5:10:3b:51:7d:fe:be:38:
ed:a7:0b:8e:6f:ea:1b:26:81:0b:5d:27:5b:c8:4f:
3c:cb:aa:4f:d6:b4:01:79:16:8a:f9:61:f5:d7:a4:
aa:8c:4f:ed:4b:89:70:d2:75:b8:fb:b6:bd:83:f7:
c7:f1:eb:4d:e7:99:12:07:d8:aa:7f:41:bb:a4:f7:
a2:d8:b7:51:29:0e:5a:61:3d:ce:93:b9:fc:b4:2f:
f6:2b:55:09:e2:3e:ed:19:90:68:cb:86:6c:61:0b:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:40:14:74:19:B3:61:47:1C:A6:F1:76:23:FC:20:A5:29:E7:BA
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/I75AFHQZs2FHHKbxdiP8IKUp57o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.233.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:84:47:0f:f5:6d:2e:7f:af:97:41:6e:7d:f3:00:a2:0f:fa:
bf:9c:36:c1:48:3c:f8:0a:dd:b0:b7:15:6d:ba:fb:44:7c:3b:
2c:ba:a9:db:33:08:a7:7d:0e:94:b5:cd:46:20:92:66:55:e4:
14:ab:0c:37:0a:9e:1f:6d:89:42:02:fa:a6:0a:2b:27:19:4b:
85:02:60:6f:97:06:2b:42:11:c5:da:aa:72:8c:56:0a:1c:ac:
79:77:c7:5e:c5:f3:ae:fa:53:99:92:dc:df:2a:9e:12:39:c3:
fb:9f:cb:0c:a4:2d:47:60:d7:b1:1a:8e:b0:1f:e7:b3:d1:66:
b9:b8:d7:d3:32:be:57:b1:5f:11:29:03:01:5c:67:42:7f:5d:
39:76:49:4a:9c:91:ce:27:c3:8a:e8:bb:2c:c9:83:23:a5:af:
4f:66:24:5c:60:2f:d2:34:f0:4c:87:c0:8a:ea:7c:7d:bc:73:
35:5f:e1:7f:c0:f4:b1:b5:4b:98:e2:a7:06:12:8e:d5:11:78:
32:5d:bb:a9:86:cd:cc:eb:db:4c:f2:7a:e2:14:a4:02:f6:54:
7d:6c:c4:ac:ae:ff:19:a2:e2:0c:90:e2:c9:33:48:25:1c:b9:
36:d6:a6:db:63:93:a8:4e:0e:9a:c9:1f:12:0e:de:9f:14:a0:
01:ad:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:01:33 2024 by rpki-client on console-ams.rpki-client.org