Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/JjOieQxvSkTwPFI3KVLMvHE02eA.roa
File: JjOieQxvSkTwPFI3KVLMvHE02eA.roa (raw, json)
Hash identifier: rv21Btmzg7tWLzWUXMsBlJDiFx5qv3jKdIjlyLJ/wTo=
Subject key identifier: 26:33:A2:79:0C:6F:4A:44:F0:3C:52:37:29:52:CC:BC:71:34:D9:E0
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018FBE8F228A04E6A475FC97D8733E9552E6
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/JjOieQxvSkTwPFI3KVLMvHE02eA.roa
Signing time: Tue 28 May 2024 09:36:42 +0000
ROA not before: Tue 28 May 2024 09:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214975
IP address blocks: 109.248.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:8f:22:8a:04:e6:a4:75:fc:97:d8:73:3e:95:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 28 09:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2633a2790c6f4a44f03c52372952ccbc7134d9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:0b:02:cd:8e:19:cf:b4:dc:77:86:ee:f0:
8b:28:eb:c1:59:e6:ba:b0:c4:6a:21:e5:96:f5:62:
c2:b4:fe:f6:37:cb:bf:73:1f:d3:13:1e:26:db:f3:
fa:d2:53:cc:90:40:2c:94:1f:c3:58:89:6a:86:aa:
ba:2e:3d:a6:b0:5d:d7:cc:96:80:1c:67:d3:1a:34:
23:51:7f:05:3f:36:51:f8:b8:63:81:be:a0:bb:0b:
17:22:cf:66:75:56:9f:ec:4e:bf:af:37:4b:81:cb:
97:7c:6f:58:1c:5c:b4:12:77:b5:42:61:d3:22:31:
99:92:91:6d:5a:a1:0d:b5:aa:2f:f9:a1:10:0f:57:
8f:c7:04:cc:d8:8f:35:0a:83:08:3a:ae:34:2f:a1:
78:df:9e:2b:c3:33:1c:a7:97:12:8a:f3:63:0a:fa:
71:3e:b1:42:2c:b8:35:f4:ea:d6:0d:33:3b:e2:68:
e7:79:bc:e5:4f:58:11:55:c5:f4:b7:e1:d1:16:74:
66:35:8d:36:54:b4:8a:bb:81:14:2d:44:0f:07:a4:
d9:8c:b2:61:f9:34:fc:e6:8a:ad:2f:40:11:37:d9:
ed:d5:49:3a:72:d2:ce:fa:15:1d:cd:c1:b9:c3:c0:
6d:30:b6:81:f3:8d:49:e4:3b:14:90:90:db:89:d4:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:33:A2:79:0C:6F:4A:44:F0:3C:52:37:29:52:CC:BC:71:34:D9:E0
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/JjOieQxvSkTwPFI3KVLMvHE02eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cb:9c:34:80:e1:2f:d1:4e:ee:43:10:a1:5a:1e:6f:7d:0f:
53:2c:d4:59:e6:57:0f:b0:4d:c8:e4:71:49:0d:a4:19:d0:ba:
a8:20:a4:46:73:eb:ee:32:1a:92:13:40:c6:47:c9:62:f5:aa:
47:c3:f6:55:49:9b:e8:19:a6:f5:9c:23:ea:e7:dd:79:52:be:
a3:8e:99:9e:b3:6c:88:cd:be:0e:87:6f:3f:9b:07:cd:3d:fa:
f6:ac:03:64:1d:f1:d8:18:d2:c5:08:1c:ce:70:9a:f6:71:02:
9d:28:8a:4a:da:3b:7b:8f:d5:05:78:07:3d:f4:35:aa:b3:96:
97:7a:84:ba:48:45:19:f0:28:18:83:b8:ea:51:60:f8:a9:17:
67:9c:f6:05:92:d9:22:84:cd:df:d8:7d:3a:17:bb:03:a0:8d:
bd:84:82:9f:1f:92:c2:61:12:3a:b5:9e:4c:35:bc:33:3b:c4:
e0:65:0b:5f:30:47:0b:71:f1:f7:d4:06:cf:18:e4:c0:e0:6b:
86:44:0c:98:17:0b:fd:d9:6b:82:e3:6c:e4:c8:20:d8:4a:a8:
7f:bf:7f:4d:19:20:92:6e:b1:fb:31:9a:18:5b:87:cb:21:6f:
1d:45:02:16:d2:93:d4:ea:d5:0b:4b:56:f7:28:a1:b3:95:24:
c7:8f:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:22:35 2024 by rpki-client on console-fra.rpki-client.org