Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/d3EmMkHi3BHjSYAbw0SOpDVvF0Q.roa
File: d3EmMkHi3BHjSYAbw0SOpDVvF0Q.roa (raw, json)
Hash identifier: Z6wqQX1HkGABN23lXsqtSdSrxhePPN2WOsymZTeTm2g=
Subject key identifier: 77:71:26:32:41:E2:DC:11:E3:49:80:1B:C3:44:8E:A4:35:6F:17:44
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 018CC86F637B9AC131532CF23848835964A5
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/d3EmMkHi3BHjSYAbw0SOpDVvF0Q.roa
Signing time: Tue 02 Jan 2024 04:29:52 +0000
ROA not before: Tue 02 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.102.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:63:7b:9a:c1:31:53:2c:f2:38:48:83:59:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 2 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7771263241e2dc11e349801bc3448ea4356f1744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:5c:5e:b5:30:f1:70:7a:05:68:0c:be:83:
7c:9e:da:41:5c:b9:44:1c:95:34:06:01:49:da:88:
ec:ef:c1:88:40:99:98:af:2e:03:23:1f:a2:a8:67:
95:28:bc:d8:e1:3b:ba:f5:8a:e0:21:e4:9c:e2:3d:
3d:ba:89:f6:60:01:bb:ef:0f:7c:d5:6d:46:43:4d:
bf:db:f5:2e:07:aa:1e:c3:1a:04:51:a9:aa:d5:57:
50:f2:d9:ea:36:c4:ec:d0:10:f0:96:86:56:29:fc:
2a:a6:51:80:c5:2c:04:f9:5a:c0:1c:91:89:6e:f5:
97:0f:f6:69:b6:df:20:6a:42:38:13:64:9b:a2:f5:
0b:73:07:55:18:6e:5f:22:93:35:56:d5:41:21:a3:
88:ac:0f:f3:74:52:d4:48:c1:c3:3c:5e:9d:46:16:
01:4a:31:0c:94:23:12:05:3f:0f:ee:f5:0c:87:39:
fd:e8:b0:87:50:17:78:4a:7a:5a:7d:a5:65:91:cc:
63:5b:4c:41:34:2c:76:73:57:b5:31:1b:3e:21:8e:
22:45:36:13:1d:1d:9e:e4:5a:43:4a:96:ed:2b:f6:
04:a7:bc:ce:f3:36:17:8e:cb:f5:f8:d1:13:d3:f0:
28:76:6b:f7:b3:f0:e0:6c:50:e0:6e:d2:73:b2:d0:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:71:26:32:41:E2:DC:11:E3:49:80:1B:C3:44:8E:A4:35:6F:17:44
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/d3EmMkHi3BHjSYAbw0SOpDVvF0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:45:1c:78:18:33:7a:ff:37:06:a6:b8:69:40:d6:65:2a:27:
20:4e:75:7e:6a:ac:87:0e:96:44:25:4b:2a:5c:db:45:f3:c1:
28:ad:00:03:75:aa:fc:ee:93:85:ae:fa:28:fb:19:ee:22:bf:
6e:85:ea:85:51:0d:05:c1:a6:80:c7:af:4e:a1:bf:8e:cb:67:
16:c3:bb:4d:d2:80:be:0d:30:23:8f:c3:82:38:26:b9:40:50:
63:0f:09:f7:37:cc:3d:11:bb:91:9c:a5:ca:fd:b7:0c:56:57:
c5:f1:fe:58:08:28:e0:1e:03:b9:c8:b0:df:0a:bf:e2:de:79:
2c:b9:e1:f0:8d:5b:a9:6e:26:40:81:42:a5:d3:32:53:0f:a5:
d3:7b:43:37:42:1a:4a:50:7d:af:00:54:b7:0b:95:f3:96:96:
9a:39:71:b5:c9:aa:ac:f9:4b:de:62:f4:a3:51:7c:39:b1:ba:
d1:8a:69:5f:f0:3c:bc:d3:82:54:da:1a:81:96:f3:44:9d:ce:
88:b6:5b:cc:8f:fe:ac:aa:d4:55:14:c1:0e:17:78:db:05:f3:
16:ce:45:cd:8e:1c:45:dc:33:09:7e:5f:df:37:6f:b3:2d:7d:
1e:2c:eb:b7:05:11:21:db:72:3b:08:47:49:12:53:b7:83:37:
ce:6d:40:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:46:31 2024 by rpki-client on console-ams.rpki-client.org