Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N27LX-zNDuEJWBfFCs_1GA3XXYI.roa
File: N27LX-zNDuEJWBfFCs_1GA3XXYI.roa (raw, json)
Hash identifier: gnwcwQmtcXMVCvtpuIKzEmKzJrcuZpcybgJjd3ipK4A=
Subject key identifier: 37:6E:CB:5F:EC:CD:0E:E1:09:58:17:C5:0A:CF:F5:18:0D:D7:5D:82
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01912356501D289F65AC2D9C649C9AA375C5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N27LX-zNDuEJWBfFCs_1GA3XXYI.roa
Signing time: Mon 05 Aug 2024 16:19:04 +0000
ROA not before: Mon 05 Aug 2024 16:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41653
IP address blocks: 185.119.254.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:56:50:1d:28:9f:65:ac:2d:9c:64:9c:9a:a3:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Aug 5 16:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=376ecb5feccd0ee1095817c50acff5180dd75d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:b1:2a:92:8f:24:25:01:5b:0d:ca:0a:30:
65:0c:98:a9:26:c1:23:a6:77:37:37:ca:cf:ff:21:
1c:44:00:93:fe:3c:58:70:1f:9a:2b:96:32:d5:38:
62:cd:5d:12:58:9a:d6:02:b5:8c:e2:e8:e4:1e:e9:
27:21:e4:df:2c:b6:e4:2c:28:14:2e:ca:85:7a:e2:
6a:29:1b:8b:d5:69:ea:3a:42:d4:aa:a4:42:5b:41:
b6:52:2b:19:58:f0:67:ff:bc:d9:d5:86:2b:b3:f5:
be:c0:97:b2:42:8f:24:4b:51:6c:0a:76:ed:60:1c:
ae:84:84:b9:ea:d1:dd:80:e9:46:db:e4:34:9f:14:
5b:da:03:54:3a:9f:ee:6a:5e:f3:2d:99:ed:af:a3:
bf:c7:da:49:1e:4a:22:17:b4:63:ac:ed:e8:84:01:
68:c8:7c:23:dd:93:53:da:01:34:88:10:01:91:b3:
a6:d0:69:e9:90:8c:a0:63:36:cb:cb:c5:da:48:64:
a7:ed:e1:0c:35:b5:f2:d1:87:12:96:88:4c:4c:1c:
54:64:6a:24:43:20:d9:91:42:81:e1:e8:85:61:87:
75:d0:00:05:e2:12:25:4e:99:a8:04:3b:6c:b4:4f:
33:ef:c8:8c:e3:65:b0:78:eb:90:89:94:6f:f5:d9:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:CB:5F:EC:CD:0E:E1:09:58:17:C5:0A:CF:F5:18:0D:D7:5D:82
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N27LX-zNDuEJWBfFCs_1GA3XXYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.254.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7d:fd:a6:0c:61:22:ef:a5:42:64:7e:21:32:c9:30:2e:57:
d5:cd:eb:9b:28:7a:d0:1b:30:53:03:1e:28:05:cd:dc:70:af:
9c:bc:57:cb:05:4a:7c:f7:4c:6c:43:23:24:d6:2c:d7:5e:6a:
de:28:93:66:18:2b:60:a0:36:23:da:79:46:83:47:8c:20:e6:
c9:45:5c:69:d4:b8:51:65:22:a4:13:60:c7:b3:61:4a:6d:f9:
21:86:84:27:ab:84:f5:0e:63:85:0d:75:bf:5b:35:85:0d:2b:
8f:57:9e:91:b1:b0:70:2d:8b:84:8f:f1:18:05:29:2f:15:59:
ec:51:c4:03:af:37:d4:5d:59:7e:f3:5d:84:f5:b0:71:b9:4a:
1b:8e:bc:15:7c:7c:42:8d:67:e4:da:a0:ce:ac:db:5f:dc:03:
31:5c:74:81:84:29:85:b2:7b:f2:21:c9:f7:b2:45:27:37:73:
08:02:72:38:f8:d8:1f:37:e2:24:d4:64:dc:38:55:05:20:49:
51:5a:0a:14:54:55:8b:bf:69:d1:40:95:2f:c0:9c:3e:3e:87:
7c:03:b5:ac:06:6f:31:8f:30:81:d2:16:79:99:50:60:e4:b2:
d6:10:51:bc:de:7e:35:ae:43:53:ca:80:82:72:9a:a8:dd:34:
b6:73:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:47:06 2024 by rpki-client on console-fra.rpki-client.org