Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/JqeMVcj88VGKQX7j05Zavd9Ln14.roa
File: JqeMVcj88VGKQX7j05Zavd9Ln14.roa (raw, json)
Hash identifier: lwjo+Kna4AFhbOaBhLgIoXL1nOylvrVla6RReH6EI9c=
Subject key identifier: 26:A7:8C:55:C8:FC:F1:51:8A:41:7E:E3:D3:96:5A:BD:DF:4B:9F:5E
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 018DA788780BB702E825C049B7773F2BBD17
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/JqeMVcj88VGKQX7j05Zavd9Ln14.roa
Signing time: Wed 14 Feb 2024 12:12:35 +0000
ROA not before: Wed 14 Feb 2024 12:12:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 79.121.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:88:78:0b:b7:02:e8:25:c0:49:b7:77:3f:2b:bd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Feb 14 12:12:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a78c55c8fcf1518a417ee3d3965abddf4b9f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:1b:67:00:a1:cc:df:40:1a:25:d7:7e:d4:
4c:33:ad:ec:4c:e0:14:20:b9:7e:e2:2a:28:5c:f7:
8b:ff:90:9d:18:3a:3a:31:19:ef:8f:22:ea:5c:68:
11:11:27:02:bf:12:7e:be:8c:14:43:67:37:17:ab:
85:e0:25:31:d7:47:1a:e9:1f:a1:88:c9:86:89:2a:
50:33:bc:cc:1a:be:80:28:6b:2f:88:9c:dd:9d:53:
af:3d:8a:69:6e:4a:a6:d5:83:c5:a9:d3:7e:61:ae:
ac:0e:18:ee:3f:72:6b:47:e8:0b:1e:19:d8:1e:98:
0f:b5:bb:a4:54:68:d1:92:43:66:63:5d:32:64:f9:
b8:c8:2e:9b:1b:9e:8f:f1:4e:2c:56:38:a3:78:0e:
da:8c:98:fb:da:dc:a6:f3:e3:98:3a:cc:f9:7b:93:
b4:ad:6c:71:c1:e1:20:61:57:eb:24:9c:bd:56:90:
0a:dc:6e:3e:08:00:76:3d:97:e6:39:03:14:f0:4b:
5f:fe:e6:67:85:52:8c:35:ab:27:85:df:51:c9:6b:
52:50:91:05:c8:93:2e:6c:20:3d:6d:18:c2:c2:45:
78:a2:e9:79:cf:fb:c3:d5:79:0a:80:38:ba:2e:6d:
d4:c1:5c:9c:67:22:d4:d9:b2:fc:78:72:8d:d3:98:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:8C:55:C8:FC:F1:51:8A:41:7E:E3:D3:96:5A:BD:DF:4B:9F:5E
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/JqeMVcj88VGKQX7j05Zavd9Ln14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.100.0/22
Signature Algorithm: sha256WithRSAEncryption
35:9e:0c:6a:60:09:68:6e:c2:fe:56:52:fe:ef:6e:7e:e7:8b:
eb:19:bb:0a:7c:93:fd:16:b0:09:9f:44:97:59:24:98:28:d1:
9f:2e:2f:d4:06:ae:91:97:66:3a:c5:a8:44:ea:55:b6:5a:f3:
ea:e0:9c:31:d6:61:e8:a4:b0:c1:db:c4:0b:e5:83:a1:9f:cb:
b1:07:01:29:bc:37:83:a6:a4:45:45:93:ca:5d:b5:5e:bb:d3:
57:3b:ea:b1:3b:84:d3:20:92:27:ca:4c:66:38:49:4b:0e:de:
84:c4:ed:b1:88:6e:b0:1c:c5:10:e8:48:57:ed:14:78:22:b2:
b9:19:fc:f9:6b:24:ac:4c:f0:e0:96:ea:ab:db:b4:cc:ff:e3:
05:b9:e7:83:ea:39:25:78:db:ef:14:a4:66:bc:09:14:46:a2:
b2:9d:93:b6:2d:89:a2:73:82:cc:4f:f3:b3:b2:b3:ab:ce:38:
f2:50:ac:1e:ff:41:d4:52:7a:9c:a6:19:ac:f7:d6:a3:c4:35:
f4:7c:be:2c:51:dc:2f:98:a4:75:0e:de:0f:ca:4c:a6:e6:04:
f3:ee:9b:32:a5:bc:27:39:de:f8:7e:08:e5:69:55:5b:4a:ef:
4f:ce:f1:24:9e:18:77:4a:64:a4:80:58:6f:65:1c:44:d5:fc:
3e:f4:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:28:12 2024 by rpki-client on console-ams.rpki-client.org