Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/JpZTH8wKpgOeeE59QPwnFlQdqik.roa
File: JpZTH8wKpgOeeE59QPwnFlQdqik.roa (raw, json)
Hash identifier: 8irkIVaPKN0OF22ZFAkrS4KpX0ox7BfDQ2dA7mNqv5Y=
Subject key identifier: 26:96:53:1F:CC:0A:A6:03:9E:78:4E:7D:40:FC:27:16:54:1D:AA:29
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 018FCDC3BB3185190325C294ADB4C96C8C60
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/JpZTH8wKpgOeeE59QPwnFlQdqik.roa
Signing time: Fri 31 May 2024 08:28:27 +0000
ROA not before: Fri 31 May 2024 08:28:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134679
IP address blocks: 178.237.168.0/24 maxlen: 24
178.237.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:c3:bb:31:85:19:03:25:c2:94:ad:b4:c9:6c:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: May 31 08:28:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2696531fcc0aa6039e784e7d40fc2716541daa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:b2:93:b5:67:ed:db:7f:27:ef:63:71:b4:
4d:2d:c3:da:e0:74:f1:8e:ad:23:24:a1:a9:b5:54:
c1:e1:11:63:ce:4f:45:32:c6:eb:6e:3b:a1:5a:1f:
73:4f:1e:65:2c:c9:bb:cf:84:53:3b:4b:8a:c4:a4:
53:70:a8:ba:ab:f2:16:d5:24:7b:de:20:5b:28:8e:
ee:6c:0d:d9:a1:7c:c9:4b:a7:2d:03:e8:e9:eb:64:
93:3c:14:c1:9a:7e:09:91:59:7e:5a:d2:e2:fa:6f:
4a:04:f1:9b:75:4e:7f:cb:37:70:85:78:8f:ec:4b:
52:e9:46:8c:26:8b:a2:5b:e0:02:9c:ee:a0:1f:17:
eb:39:6f:22:88:d8:ad:53:86:ce:52:4a:f2:e1:b6:
e0:16:26:27:2b:aa:64:6e:73:69:ae:25:e8:72:61:
8d:58:57:15:f6:d2:13:a7:ca:19:de:9b:33:19:03:
5a:35:ae:f7:75:00:89:7a:3a:4d:43:aa:b6:8f:9d:
b0:5a:af:86:9c:43:fa:28:7a:8f:21:2d:be:14:f3:
5d:d9:9b:45:fc:8a:8c:d8:9d:cb:8a:f5:74:9b:18:
3a:a7:04:eb:cb:72:01:8d:2d:89:de:9f:be:40:ce:
6b:b3:5c:1e:3a:01:d2:6e:d8:da:81:fb:3b:56:53:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:96:53:1F:CC:0A:A6:03:9E:78:4E:7D:40:FC:27:16:54:1D:AA:29
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/JpZTH8wKpgOeeE59QPwnFlQdqik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.168.0/23
Signature Algorithm: sha256WithRSAEncryption
20:d4:7c:be:79:4a:ad:a2:4b:06:56:ad:11:88:23:85:ec:13:
88:04:27:92:69:b3:19:af:19:73:78:40:50:64:1e:dc:c0:76:
30:c8:0e:79:f6:68:fa:46:31:85:68:92:06:45:a0:c1:1e:a1:
b4:de:dc:7d:e7:cb:3f:ab:a2:87:9c:94:26:4a:0d:f3:fe:e0:
94:f7:4e:37:1f:31:e0:27:c7:f2:4d:f5:34:13:81:66:50:9b:
27:d4:b4:90:0b:87:8a:09:b0:07:bb:e7:77:e9:1b:42:19:56:
44:0a:eb:1b:54:8b:fb:86:8b:1a:b9:c7:f1:76:60:0a:09:a7:
b9:26:82:55:da:23:09:59:41:78:2c:d0:9c:53:65:08:c8:5b:
3f:64:d4:44:a4:a3:eb:8d:0f:64:7f:ab:48:9a:5e:24:67:d3:
0c:74:56:d0:cb:a1:52:3a:e8:32:e1:65:6b:71:f3:39:31:82:
ba:e8:58:9c:6a:97:94:9f:a0:75:39:4f:aa:e3:01:15:bc:73:
94:69:84:98:92:94:04:f1:8b:96:bb:68:3e:89:93:83:dc:51:
ca:f2:3b:e8:45:a2:b3:4c:b9:4c:c2:72:ee:ec:fd:84:53:0a:
36:f4:0b:b0:01:39:be:2d:d1:e2:ce:d4:ab:3e:ea:cc:98:5c:
94:96:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:28:51 2024 by rpki-client on console-fra.rpki-client.org