Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/pNCa5J9tGq60ph-rdyiwzdaH4eM.roa
File: pNCa5J9tGq60ph-rdyiwzdaH4eM.roa (raw, json)
Hash identifier: AjAsuwelgG02zMxKjyxvBMi1MAFfbV4qbCyj0QsfmgQ=
Subject key identifier: A4:D0:9A:E4:9F:6D:1A:AE:B4:A6:1F:AB:77:28:B0:CD:D6:87:E1:E3
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 018CC424844A8A3A1AB333358BEB2CB183B8
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/pNCa5J9tGq60ph-rdyiwzdaH4eM.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48551
IP address blocks: 185.221.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:84:4a:8a:3a:1a:b3:33:35:8b:eb:2c:b1:83:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4d09ae49f6d1aaeb4a61fab7728b0cdd687e1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:31:35:30:da:26:25:74:6e:8f:ec:20:ef:
f2:db:ce:35:11:9f:9b:dd:0f:ce:40:6f:c7:7f:29:
dd:2e:54:22:17:85:1a:8b:cd:f3:62:68:79:73:0f:
e0:a0:58:91:dd:c9:0a:85:80:7d:ba:48:8f:3a:71:
a3:c8:f1:0e:f2:64:e8:a8:2f:da:7c:85:7a:e1:92:
63:cf:b6:75:79:21:22:a4:22:92:6a:cd:50:42:d3:
25:fe:a5:47:98:d9:ee:31:db:d9:1c:49:59:cb:48:
f5:23:b0:8d:1d:1f:a6:83:55:19:7b:ed:0d:fd:25:
ff:f9:bb:92:7f:0b:1b:ab:b2:bc:90:29:a4:30:6d:
65:96:d8:69:b9:95:37:7f:a5:3d:a2:ff:ad:6d:e2:
5d:c9:67:db:aa:f5:07:3c:5f:ea:71:15:be:26:2d:
83:8a:d3:9b:3b:30:d4:48:67:b2:e5:3c:e1:10:a6:
d2:92:79:40:0d:b1:fd:de:5c:d1:ed:42:88:23:94:
fa:34:b7:a5:7d:a7:84:3d:af:20:a0:86:a9:55:fe:
2a:0b:a3:6b:54:a6:b9:d1:25:91:4e:67:02:81:01:
af:e0:0e:93:ff:11:0d:76:8b:6e:f7:41:d0:fc:1b:
5f:53:30:d3:d5:79:64:47:a3:c7:c0:8f:29:6a:02:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D0:9A:E4:9F:6D:1A:AE:B4:A6:1F:AB:77:28:B0:CD:D6:87:E1:E3
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/pNCa5J9tGq60ph-rdyiwzdaH4eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e8:1e:d4:5b:84:d5:b8:c2:fa:fc:f7:be:85:d1:08:08:21:
8b:4f:91:b2:a5:b9:b0:d2:52:8b:3b:12:d1:59:a2:a0:08:c1:
0d:c3:ff:6f:c0:c8:cf:2f:74:bb:16:6e:6f:1e:d1:f3:e2:87:
d3:e9:c3:6d:47:b6:f1:c4:cb:a7:f9:32:3c:f3:92:ae:0f:87:
77:7a:ce:7b:96:2d:5b:59:9f:df:ff:47:e9:c0:09:54:27:96:
62:79:a9:b2:3c:85:f5:c8:6a:bd:ec:f3:b7:bf:23:87:59:ae:
04:c9:b1:d5:06:8d:5a:a2:e4:49:25:c3:ec:c6:3c:64:43:0f:
19:2b:cd:69:bf:ab:aa:33:67:b7:d4:5d:8b:b5:3a:40:a2:a0:
49:16:87:b3:b6:84:43:67:f2:e0:5e:b2:92:63:ae:2b:c3:19:
64:69:f0:33:1c:13:bd:ce:f2:59:d2:00:0f:11:43:0c:95:02:
45:a8:4a:85:0b:03:aa:58:58:88:0e:6a:71:a4:af:99:2a:32:
1b:51:fa:3a:78:11:3d:3e:7f:b8:69:84:89:2f:83:f2:01:2b:
95:d3:09:20:b1:af:22:ab:50:3f:d8:50:aa:04:e1:01:f4:2e:
41:be:36:aa:1c:6e:f7:0f:58:08:03:ef:2a:3f:a8:8e:da:03:
89:94:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:04:00 2024 by rpki-client on console-ams.rpki-client.org