Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/j3NC3lfR-RD9xfbEyBbdJFl4Y1g.roa
File: j3NC3lfR-RD9xfbEyBbdJFl4Y1g.roa (raw, json)
Hash identifier: pVRbEnt3zgMjsyCsnSccl2aD1UCaO62vqsS0o8stxz4=
Subject key identifier: 8F:73:42:DE:57:D1:F9:10:FD:C5:F6:C4:C8:16:DD:24:59:78:63:58
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 018D768E086C2F0D95D41B33D4DB0BB0BA85
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/j3NC3lfR-RD9xfbEyBbdJFl4Y1g.roa
Signing time: Sun 04 Feb 2024 23:57:16 +0000
ROA not before: Sun 04 Feb 2024 23:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43141
IP address blocks: 185.155.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:76:8e:08:6c:2f:0d:95:d4:1b:33:d4:db:0b:b0:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Feb 4 23:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f7342de57d1f910fdc5f6c4c816dd2459786358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:17:e9:3c:22:81:74:ad:0a:71:fd:8b:0f:
b3:d4:44:6e:e5:99:61:bd:e1:8f:db:51:2c:6c:53:
ac:53:ee:a7:f2:70:3e:fb:80:28:d5:c2:21:92:1f:
47:db:0a:57:d8:84:46:67:8a:61:cb:92:7c:31:70:
1c:36:43:f1:fb:93:28:20:0e:f4:ea:01:99:d3:d5:
07:4f:d7:ae:be:b1:3f:42:90:b3:89:5b:4d:60:c8:
43:85:fd:22:8b:34:9b:b0:4e:90:13:26:bf:78:a3:
1b:fb:c3:b9:d5:c3:d2:ed:d6:e6:d5:5c:21:44:d0:
8b:9f:7b:93:80:68:4d:26:89:73:60:1b:c3:84:1e:
c1:46:29:a2:b6:26:d6:93:b1:80:68:f5:88:a6:18:
3b:59:c3:47:e6:b8:d1:f9:21:6a:a8:1e:1e:00:84:
9a:13:49:d9:2d:00:34:c1:0c:63:41:40:5b:65:4c:
fb:e7:57:2a:c1:eb:c5:29:7c:db:5c:49:f4:02:39:
d1:c2:7c:be:4f:54:b7:9f:f2:59:fe:2b:ba:1e:f4:
a9:0d:fb:0c:6b:28:5a:34:ec:f7:99:31:0f:46:4e:
77:56:e7:36:f9:e4:67:19:b0:d2:8e:b3:33:ae:1d:
d2:86:a3:87:b7:88:12:df:96:e9:d2:d3:60:18:a2:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:42:DE:57:D1:F9:10:FD:C5:F6:C4:C8:16:DD:24:59:78:63:58
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/j3NC3lfR-RD9xfbEyBbdJFl4Y1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.185.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fd:be:94:f3:e0:f6:10:07:11:be:f4:76:94:f2:f6:49:f6:
56:d8:16:ff:9c:64:a3:50:ba:80:05:f9:30:5d:90:71:0e:27:
1d:0c:5c:94:0a:a1:f5:d9:5d:36:0c:ef:e8:26:80:ca:cb:dd:
73:4b:a0:24:5f:69:ba:f3:eb:bc:8c:36:34:c6:d6:fa:7b:f7:
79:b0:d8:c5:8f:2e:87:52:33:cc:2e:67:b9:d9:97:5e:62:08:
fa:f4:b2:1a:1a:01:17:04:d2:a9:55:2a:2c:c6:51:87:ee:c3:
69:c9:a1:f3:c1:de:b8:59:93:70:27:35:5d:a6:3e:02:9b:30:
ce:f0:77:6d:05:a2:7a:03:96:13:b6:90:d2:e0:ad:d1:7c:4d:
d0:48:67:ca:fa:f9:07:99:0e:a1:ca:27:37:64:b3:5d:94:b3:
b8:ee:8d:92:17:13:5a:ef:e2:7b:ba:d7:87:d7:ba:3b:ee:be:
86:91:eb:00:45:27:e4:e8:04:a5:73:8d:9b:31:4f:d4:0f:fd:
25:97:83:00:a2:62:8f:2d:ea:c7:a0:ed:4b:ac:4e:96:7d:e9:
a6:86:30:ca:f7:43:92:f2:dc:c1:c0:c6:00:6d:79:77:86:c1:
54:c1:32:a5:13:b3:ca:d2:a6:f9:31:cc:41:0a:f4:97:12:97:
f9:51:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:47:39 2024 by rpki-client on console-ams.rpki-client.org