Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/jODFkRj8a5-fIhi6P2LY388o5hc.roa
File: jODFkRj8a5-fIhi6P2LY388o5hc.roa (raw, json)
Hash identifier: Ma7viuax+G321FoFHtmr+kqh1TU1Q6V1SziThVhq9wU=
Subject key identifier: 8C:E0:C5:91:18:FC:6B:9F:9F:22:18:BA:3F:62:D8:DF:CF:28:E6:17
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 018CC94BE38A3E3F5C23744A3EEBED3026A6
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/jODFkRj8a5-fIhi6P2LY388o5hc.roa
Signing time: Tue 02 Jan 2024 08:30:42 +0000
ROA not before: Tue 02 Jan 2024 08:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15432
IP address blocks: 212.126.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:e3:8a:3e:3f:5c:23:74:4a:3e:eb:ed:30:26:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jan 2 08:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ce0c59118fc6b9f9f2218ba3f62d8dfcf28e617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:e7:7c:a2:fd:e8:34:91:24:0a:e5:9e:97:
db:90:19:63:29:59:49:47:69:49:aa:f1:30:f1:1f:
6f:3f:9a:8b:67:78:c2:dd:13:ee:01:60:40:d4:ff:
55:c2:9b:47:e5:47:e7:2b:09:c6:78:a4:15:f8:16:
cc:c8:8a:cb:a8:88:33:89:d1:6b:4d:f3:b6:5c:42:
67:7a:12:d3:b0:98:b1:04:c4:2d:8c:0e:ae:4e:61:
16:11:0a:6c:6c:24:39:2c:c7:90:11:8f:28:be:ab:
69:10:c2:7a:2b:8f:90:03:19:70:e0:9f:3d:48:3e:
4e:75:bc:18:44:0b:76:74:50:20:82:37:13:90:c6:
f1:fd:ee:e7:f8:e2:a5:4c:9a:e4:2b:8e:f7:b4:9f:
5d:27:20:d7:8a:6a:13:81:4d:40:72:3f:38:2a:1b:
f1:72:3d:0a:e4:bf:6e:2d:38:03:f0:e1:3e:b8:19:
eb:7d:2f:03:c7:5b:ac:0a:81:8c:25:03:81:26:a5:
02:9f:ee:4b:5e:16:ef:49:cf:ab:a2:a3:bb:cc:ff:
b5:86:e2:c1:ef:72:89:ec:92:a3:64:4d:c6:e8:be:
91:84:69:45:7b:a3:5b:97:0e:69:39:19:26:e7:2e:
de:a9:1a:5e:f1:ae:a5:38:67:4d:ae:d3:1e:f9:7b:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:C5:91:18:FC:6B:9F:9F:22:18:BA:3F:62:D8:DF:CF:28:E6:17
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/jODFkRj8a5-fIhi6P2LY388o5hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:a2:07:ec:6f:65:c0:e7:6a:c4:02:bd:80:b1:d8:f4:21:f9:
68:65:ea:62:63:d1:01:25:25:ab:0a:08:d5:ff:c8:10:53:2f:
ff:1b:ab:9c:2e:98:d0:55:51:b6:0a:c7:ea:dc:7d:af:3f:5f:
23:c5:31:68:71:ca:d5:e3:9a:a6:17:c6:13:8d:8a:30:70:cb:
81:e7:ac:16:b2:0b:90:d2:9d:b4:2e:d7:08:1a:a2:f6:07:8f:
8e:c5:ce:86:9d:b6:80:c0:1c:3a:a8:1e:2a:d9:35:8e:56:77:
03:59:3e:c0:77:b7:d7:5c:88:94:c4:82:77:04:ff:db:10:fe:
3b:97:db:cc:c3:83:2c:99:25:e8:35:dc:08:0f:7c:85:1d:f7:
82:a0:bc:76:f8:52:ed:e7:c2:18:e5:70:71:d0:2f:8c:5d:b1:
63:9d:01:92:99:62:a9:c1:1b:48:ae:d0:f2:32:93:d9:26:ef:
49:26:c3:03:c9:7d:af:82:24:3a:93:ac:d9:df:92:85:f7:57:
68:d9:13:ad:64:23:0f:29:b0:9a:72:a6:1f:8b:02:c9:83:22:
bd:f9:26:0d:00:02:a1:b8:a1:d8:a3:b4:39:e4:c3:8f:57:66:
ad:56:f7:f6:af:ef:b0:e4:e9:90:6c:a0:cb:bc:27:d1:51:0b:
34:e8:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:45:39 2024 by rpki-client on console-ams.rpki-client.org