Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/n8m9rV5Jny2tual3PiuDuyKQYzg.roa
File: n8m9rV5Jny2tual3PiuDuyKQYzg.roa (raw, json)
Hash identifier: 7ZaRlsnxcpwy6D1Shqsur1nWXScYf13NisiVH9mIHbQ=
Subject key identifier: 9F:C9:BD:AD:5E:49:9F:2D:AD:B9:A9:77:3E:2B:83:BB:22:90:63:38
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018CC3B6E154274AED3D398CE661CFAD027F
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/n8m9rV5Jny2tual3PiuDuyKQYzg.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204504
IP address blocks: 185.227.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e1:54:27:4a:ed:3d:39:8c:e6:61:cf:ad:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fc9bdad5e499f2dadb9a9773e2b83bb22906338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:b4:ea:e8:7d:05:bc:ea:3e:c9:c9:a4:0a:
5a:32:b8:a1:eb:f5:d0:d3:44:08:52:a8:bc:81:4d:
b7:6b:16:3b:a4:48:dc:17:13:82:7a:47:aa:1e:8c:
ec:aa:df:5f:ee:68:a3:4e:45:9c:48:53:20:cf:4d:
9e:d5:f2:e1:8c:6d:b0:67:d9:94:17:62:d9:35:36:
98:e9:69:0a:ea:9e:2f:ba:fd:7d:c0:95:5e:08:e3:
f5:ac:bc:71:a6:93:b7:5a:e5:ab:5b:7e:90:a8:37:
b9:25:e9:05:76:2e:23:d0:2a:63:b9:68:50:27:bc:
43:5e:03:37:8d:fc:68:a3:25:e4:bb:a9:f4:9c:01:
92:e3:d8:db:bd:5b:50:7e:77:64:fc:dd:6a:5d:33:
d7:34:0e:99:2d:94:f6:4f:bb:9b:a0:77:f6:62:fa:
79:17:93:3c:e9:30:7b:b9:28:5a:a3:a0:2a:11:b3:
44:60:c6:5c:e3:5f:5a:05:4b:d8:54:66:61:33:35:
3a:73:55:5c:1e:b7:86:3b:9d:8f:d9:35:d7:6c:64:
2d:73:b1:7b:c9:01:63:24:23:d2:56:df:85:7e:80:
d2:3b:ff:9f:45:c6:2e:9a:fc:6a:92:78:c4:7a:fe:
2a:95:36:a7:a9:79:63:3e:04:6b:cd:c8:fb:02:b8:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:BD:AD:5E:49:9F:2D:AD:B9:A9:77:3E:2B:83:BB:22:90:63:38
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/n8m9rV5Jny2tual3PiuDuyKQYzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.244.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ca:76:bb:26:de:f1:31:e4:fd:ae:bb:0f:97:39:ca:22:da:
73:9f:a9:68:25:a7:be:eb:57:ea:ed:99:61:af:4e:17:a8:ee:
fe:e2:08:c6:59:fc:1c:7b:35:a3:5f:85:e7:a7:27:22:d8:e5:
a2:85:7a:26:95:3e:f0:0e:03:52:38:b8:14:3e:52:bf:9a:e6:
44:49:c5:f2:b0:54:9d:4b:c3:38:41:89:82:bf:22:92:55:61:
72:89:9b:49:61:aa:ba:13:96:1f:94:80:bb:e1:1c:19:4d:5a:
d1:6e:8a:44:11:1d:db:00:66:de:66:94:4c:33:63:b3:15:67:
dc:47:4b:2d:47:95:1d:9c:5e:d9:63:e5:04:5d:54:57:b0:f3:
e0:a6:d6:66:8b:d2:6d:23:5a:d3:cd:24:db:6d:94:32:26:19:
c8:9f:26:27:c9:5b:7d:c5:20:88:8f:78:12:c1:7b:23:89:92:
40:1c:96:e0:b7:3c:0f:67:ef:2c:7a:c5:5b:be:d1:97:0c:7c:
d4:68:f5:b4:71:aa:c5:a3:13:ad:92:0b:0e:44:4c:84:6e:b2:
93:a1:30:90:b1:b8:d8:4a:09:ee:e2:ed:0e:69:87:4e:e5:09:
fc:70:2b:bb:ff:77:da:95:6d:3f:b3:b7:b2:f0:4c:fe:2e:56:
a4:a9:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:04 2024 by rpki-client on console-ams.rpki-client.org