Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Jixaf7znyzFN9wU9144CpBwmhYQ.roa
File: Jixaf7znyzFN9wU9144CpBwmhYQ.roa (raw, json)
Hash identifier: nUK3VgoN9HHt70TntGTecDgJWvKeUHKueVToWfprWCg=
Subject key identifier: 26:2C:5A:7F:BC:E7:CB:31:4D:F7:05:3D:D7:8E:02:A4:1C:26:85:84
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F9B9689261947FAD0FD52E85C4357EE09
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Jixaf7znyzFN9wU9144CpBwmhYQ.roa
Signing time: Tue 21 May 2024 14:38:04 +0000
ROA not before: Tue 21 May 2024 14:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201211
IP address blocks: 185.164.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:96:89:26:19:47:fa:d0:fd:52:e8:5c:43:57:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 21 14:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=262c5a7fbce7cb314df7053dd78e02a41c268584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2d:1a:5e:50:0c:8b:09:b3:bc:ea:c7:05:f3:
b8:f7:76:82:df:2c:ed:97:cc:19:7c:3d:ca:2c:95:
07:83:ca:a5:07:05:86:ab:b8:bf:a9:4a:5e:bd:9f:
8a:c1:f5:2e:d0:6c:51:cc:c1:39:b7:90:8c:df:c0:
26:64:13:c0:3d:6b:59:5b:c2:7b:95:6f:e7:8e:47:
b8:58:f5:e5:45:1c:34:fc:fb:82:8f:94:6b:e8:84:
5d:43:da:db:2f:72:a8:02:b0:94:f1:3a:9d:cf:49:
b6:65:12:a6:88:21:7e:63:11:bb:d8:1d:0b:94:dc:
52:b1:11:b1:1c:ba:29:cb:4c:31:0d:1d:c8:88:8c:
5e:85:f6:1f:5b:22:b5:82:80:66:74:7c:3c:9e:2c:
90:97:6a:f4:6e:d4:e4:b1:ee:8d:02:ea:d3:5a:9f:
4b:cf:56:48:ab:61:12:fb:ac:31:bd:60:13:23:b2:
d5:c8:0e:63:3c:04:17:f5:f4:da:a1:f3:08:41:c9:
e4:58:ea:e5:e0:dc:80:48:f3:4c:3a:eb:a4:f2:68:
b6:df:8d:51:cc:77:3d:89:f7:95:69:44:7e:e3:7a:
d5:7a:9d:af:17:80:c6:3d:62:b2:12:7e:1f:88:fa:
19:0b:26:a0:8f:d3:d2:41:aa:89:3a:bf:dd:da:35:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2C:5A:7F:BC:E7:CB:31:4D:F7:05:3D:D7:8E:02:A4:1C:26:85:84
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Jixaf7znyzFN9wU9144CpBwmhYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.174.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c7:70:11:ae:67:f2:c0:e9:ed:9a:67:02:88:1b:d6:47:8b:
92:6b:f0:6d:e6:01:66:b0:a7:d3:89:09:a6:a3:a3:b0:1d:cd:
94:64:05:5a:01:74:af:30:54:a9:d2:92:fa:95:e3:a5:7f:a2:
c8:34:db:4d:75:67:9f:7a:8d:93:a9:9e:14:79:76:4c:19:bc:
42:0c:cd:ef:e0:e2:ce:dd:9d:f1:98:ae:4d:83:a5:d8:e7:f9:
9c:a5:b8:82:ed:6f:af:e7:7a:cf:72:de:07:82:5b:d4:fe:5d:
e2:39:6f:13:9e:b4:d7:25:fe:a9:bb:a0:48:90:6d:2a:c7:33:
98:9e:16:94:17:e9:99:da:91:e5:15:6f:eb:11:f0:ab:3b:ed:
34:a6:e6:d7:ae:1a:ee:4c:aa:dc:bc:54:58:05:28:9d:fd:67:
db:73:8d:3c:cf:60:ad:a2:b4:4c:b6:7d:6a:5e:78:e1:99:77:
67:52:69:78:99:27:d3:4f:71:9a:15:01:8c:d7:b7:2d:af:c0:
06:e1:39:86:af:58:d7:67:be:46:07:2a:ce:4d:c3:c2:28:2d:
93:2a:16:16:fb:d8:b6:b1:50:d9:c1:71:06:d5:4a:5c:9b:2a:
80:c9:f3:cf:1d:3b:9f:de:9c:14:26:c4:56:15:85:68:bf:f6:
46:ce:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 22:22:49 2024 by rpki-client on console-ams.rpki-client.org