Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JN04oatfnxDQIWCxPT0eoAnC_8s.roa
File: JN04oatfnxDQIWCxPT0eoAnC_8s.roa (raw, json)
Hash identifier: Rear6BX9Yb2CULOl7fzjajNLz27tqHsQOwd1qT9R/Kk=
Subject key identifier: 24:DD:38:A1:AB:5F:9F:10:D0:21:60:B1:3D:3D:1E:A0:09:C2:FF:CB
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01916FDD8E51F13858F263EA5B03074AA786
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JN04oatfnxDQIWCxPT0eoAnC_8s.roa
Signing time: Tue 20 Aug 2024 12:57:56 +0000
ROA not before: Tue 20 Aug 2024 12:57:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56382
IP address blocks: 185.244.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:dd:8e:51:f1:38:58:f2:63:ea:5b:03:07:4a:a7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Aug 20 12:57:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24dd38a1ab5f9f10d02160b13d3d1ea009c2ffcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:45:3f:8f:87:67:81:a4:d5:8a:f1:f9:25:
c5:a0:de:28:aa:71:d4:b1:82:4d:c0:a9:80:7b:aa:
4c:ce:78:89:b8:45:eb:90:06:13:5d:14:c6:01:bf:
bc:23:fb:27:0f:3a:3a:38:d1:60:01:9b:72:a5:4a:
f8:c8:88:4f:57:34:28:a2:8e:c0:29:a7:11:9d:58:
32:e5:70:3a:36:51:8a:63:84:77:86:32:05:93:e2:
b1:c6:e3:0b:2c:ff:29:22:5d:8c:a9:a2:16:ff:7e:
c6:97:ea:ba:52:7a:fc:aa:51:78:a3:bd:6c:e5:f2:
1e:02:97:bd:01:fc:9e:3a:84:10:6a:cf:99:00:5d:
03:1d:37:3c:c9:33:74:1b:69:07:0a:42:aa:54:db:
0f:70:a7:40:e1:c9:63:dc:c5:6d:e2:0d:f2:02:88:
39:e1:0e:c2:e4:8d:ad:e3:21:f6:d7:dd:15:7e:8e:
0b:a0:93:c9:e8:da:98:d2:53:b3:6b:b3:d1:ab:75:
db:19:7f:3c:2c:37:92:ca:71:21:93:1b:f0:fc:3d:
39:ae:72:7d:b9:54:f1:c5:78:4c:b6:fe:32:92:24:
75:4f:9d:23:3d:f9:50:2d:b7:ba:c8:df:c7:68:35:
02:f4:f1:2f:72:fd:70:b9:b2:d1:92:7c:aa:38:e3:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:38:A1:AB:5F:9F:10:D0:21:60:B1:3D:3D:1E:A0:09:C2:FF:CB
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JN04oatfnxDQIWCxPT0eoAnC_8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.27.0/24
Signature Algorithm: sha256WithRSAEncryption
58:89:cc:2d:49:fe:a3:78:86:e1:89:23:8e:93:21:79:74:2c:
93:24:48:e0:4c:39:c2:10:9f:44:93:8a:0f:12:72:9e:ab:92:
30:62:5d:15:7e:ad:f4:3d:6b:68:02:8f:54:70:fb:b8:39:21:
50:7c:3a:77:77:cf:9a:5a:fc:e0:80:93:28:f3:a4:34:a4:61:
1c:53:1b:09:d6:07:65:f5:b1:26:21:4d:62:96:46:8e:60:71:
1a:18:fd:39:1c:31:04:fc:85:58:08:c2:f3:02:6c:f6:b4:8e:
d9:94:f8:54:01:80:55:33:cc:1d:f1:4b:19:10:10:a2:f2:e4:
57:65:9a:a2:9a:53:da:50:d3:7b:10:62:03:39:d0:fa:8e:d8:
d9:72:ed:7a:4d:60:f7:33:7f:04:0f:da:98:08:37:22:60:4c:
21:1d:ba:63:80:e7:42:92:5e:55:9a:ca:ae:a1:25:a8:d8:4e:
c1:5b:83:fe:30:2e:b9:7b:a7:4a:83:70:a2:32:67:77:43:55:
d9:dc:76:c0:ef:94:cb:ff:60:ff:d7:59:95:f9:4f:4f:b5:c0:
ee:cb:8a:2f:4e:83:a6:19:9b:b5:44:e7:dc:02:6d:31:77:f3:
8e:be:2e:36:43:dc:97:f1:d4:1c:5e:02:b3:cf:79:88:ed:85:
ee:8f:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:43:44 2024 by rpki-client on console-ams.rpki-client.org