Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/j0_pJ-9yv5JkalmBmhNNHbDthxI.roa
File: j0_pJ-9yv5JkalmBmhNNHbDthxI.roa (raw, json)
Hash identifier: QtDJ4M7dm78++jaQvdQXFCezqmW1TlKkBXhgDtJp/ew=
Subject key identifier: 8F:4F:E9:27:EF:72:BF:92:64:6A:59:81:9A:13:4D:1D:B0:ED:87:12
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 018CC8015E687ADA3E303A5FFE4B38890D4C
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/j0_pJ-9yv5JkalmBmhNNHbDthxI.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 185.149.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5e:68:7a:da:3e:30:3a:5f:fe:4b:38:89:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f4fe927ef72bf92646a59819a134d1db0ed8712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:81:e2:c3:4b:9e:79:d1:4f:41:11:0b:61:
5c:2b:ef:1e:7a:03:a6:7d:28:7f:6d:ba:df:67:42:
dd:c8:e5:57:b7:60:7b:f9:93:b8:f6:a7:68:5f:0b:
c5:94:73:89:61:e1:43:98:d4:2b:0c:95:17:12:7e:
95:cd:07:8f:43:6c:fd:81:6c:e5:9a:de:39:84:70:
71:0d:d6:a1:b1:ef:1f:23:e5:f6:0e:be:59:5c:3f:
1d:69:f1:21:01:02:3b:f9:46:43:63:fb:67:db:eb:
61:43:96:fd:06:c7:c7:8a:b9:0b:a2:7d:64:32:96:
00:18:4a:f6:10:cb:8a:c5:33:8e:72:09:9c:ff:3e:
16:33:70:27:f2:01:79:7f:5e:8a:77:05:7e:7c:ef:
be:ff:79:08:0d:d3:aa:9e:c5:6b:cd:c8:12:74:bd:
82:e9:7e:a2:62:0c:99:17:b6:2f:02:c0:a2:33:c9:
85:96:c5:05:89:9d:9f:2d:ca:75:fc:99:1e:14:ef:
d6:05:8e:45:7b:3b:ec:68:8b:5d:a3:d6:2d:a1:be:
e3:0c:b3:c6:6e:f1:7e:97:17:f7:18:1e:05:97:14:
6f:de:03:83:cd:bc:8b:c0:8a:4c:d4:2b:a2:64:b5:
c9:61:0a:a4:e4:e4:c4:30:fe:12:db:33:19:9a:e0:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:E9:27:EF:72:BF:92:64:6A:59:81:9A:13:4D:1D:B0:ED:87:12
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/j0_pJ-9yv5JkalmBmhNNHbDthxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.231.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2d:fc:87:87:66:ae:e5:23:f6:47:4b:ab:bf:a3:6c:02:5c:
78:e2:01:2d:e8:56:0c:17:f0:b2:62:1b:64:aa:b2:6d:45:d4:
0f:ae:35:b3:2d:f4:b3:e2:be:1d:45:a3:e5:42:57:a0:30:2a:
9d:30:e5:cb:ec:fc:53:79:1d:37:99:51:5f:0c:12:8a:be:5e:
9b:fa:9e:60:34:d6:7b:48:ff:37:4e:40:41:2d:74:fe:4f:69:
ed:9c:e6:77:46:f1:17:2c:1d:2f:2b:5b:df:bd:81:01:32:f6:
f9:f8:06:b6:41:33:19:c1:9e:9a:2d:ac:8c:9a:ef:34:9a:36:
98:de:a0:18:26:b6:e3:34:1a:ae:74:ee:ac:bd:0e:e4:f2:2c:
d5:82:2b:d2:1d:34:24:be:7a:65:9f:85:69:54:c9:5b:b4:f2:
03:e4:ad:ee:4f:40:9c:e5:20:a8:b1:f1:00:8a:a6:03:ce:d9:
fe:2c:e9:fb:87:22:20:d3:b2:d0:9f:47:17:b2:90:c4:e1:78:
f5:b2:65:28:18:02:a9:7f:ce:9f:b6:e9:b9:b5:c3:17:07:ea:
f4:52:78:15:5b:3a:d1:97:1e:7a:3a:f7:06:cb:b0:d0:31:64:
6d:53:1b:b6:63:7e:21:d8:30:09:2e:b4:58:d1:8a:60:a8:89:
3f:f5:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:40 2024 by rpki-client on console-ams.rpki-client.org