Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CJ_BSkU6REWxXKY3oeXPYEZuq9U.roa
File: CJ_BSkU6REWxXKY3oeXPYEZuq9U.roa (raw, json)
Hash identifier: YVqqUiE6ovLQMCmtlq9nA4QGkxHcQ9YIiqUMfHpF7mk=
Subject key identifier: 08:9F:C1:4A:45:3A:44:45:B1:5C:A6:37:A1:E5:CF:60:46:6E:AB:D5
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018F8A7093C8EB2C922F58700BBC96851DA1
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CJ_BSkU6REWxXKY3oeXPYEZuq9U.roa
Signing time: Sat 18 May 2024 06:43:04 +0000
ROA not before: Sat 18 May 2024 06:43:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8a:70:93:c8:eb:2c:92:2f:58:70:0b:bc:96:85:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 18 06:43:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=089fc14a453a4445b15ca637a1e5cf60466eabd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:48:82:9a:e9:95:e4:b8:52:ed:32:5f:5f:
01:a2:be:f2:68:42:7d:29:c5:2a:26:72:e7:0a:3e:
d9:ff:98:e7:81:d1:c8:92:e0:7c:4c:81:d1:c8:04:
18:0e:6e:9d:e6:8c:f2:55:db:e2:0e:60:99:33:11:
26:1e:25:d6:5e:80:57:c8:9d:95:2d:5c:e9:08:89:
b5:3e:3c:df:af:38:f9:35:c0:aa:d2:79:06:4b:ad:
f3:63:8a:e2:8f:84:e1:4e:f8:c9:7d:e9:2d:21:94:
dc:9b:76:3e:93:64:cf:e5:69:97:02:0c:cb:8a:43:
09:cf:4e:2c:2f:b9:32:80:b1:d7:02:d9:67:56:66:
53:f2:7b:37:e0:3c:59:85:fd:c1:04:cb:73:cc:80:
94:3b:bc:c3:d1:73:9c:1b:96:6e:e8:ed:d5:23:6f:
1d:5a:bb:45:ad:76:88:15:a1:72:40:31:4e:a1:9c:
6d:34:48:9c:64:71:0d:ad:df:af:5c:eb:5b:a1:ce:
e5:0f:16:33:33:c3:c4:7d:c4:d9:71:6c:dc:10:78:
b5:c7:e5:69:08:6f:57:f9:dc:b8:ff:8c:46:8e:b4:
ed:71:b1:ee:f7:ad:85:58:68:7f:32:a0:12:e8:ed:
03:fa:d8:92:a5:94:c8:75:ef:31:13:38:3f:63:00:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:C1:4A:45:3A:44:45:B1:5C:A6:37:A1:E5:CF:60:46:6E:AB:D5
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CJ_BSkU6REWxXKY3oeXPYEZuq9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:75:69:99:10:fb:86:d0:ce:60:c5:8f:37:89:53:60:3f:17:
84:fe:21:e0:32:70:12:14:da:37:c8:02:ec:56:7e:97:05:d5:
56:d6:ef:4c:f4:ce:44:57:69:98:b5:f4:7b:9e:b7:20:09:9b:
db:42:72:66:cd:fc:98:7f:1f:83:38:5b:dd:1b:71:27:66:20:
f1:00:b1:cf:87:b6:19:55:3d:fe:a9:5b:df:39:26:60:0e:fe:
69:87:d0:b9:03:d3:5a:d9:11:e6:1e:6a:33:51:ea:17:e8:54:
11:18:ff:da:3d:f5:b6:9d:b4:5f:c5:2d:f7:63:b5:c2:26:3a:
8c:29:a7:51:49:a1:d4:3b:0b:65:cd:a2:70:52:89:bf:0f:9b:
aa:b8:d4:2a:60:35:35:f2:4b:16:da:54:77:66:af:06:2a:c8:
59:30:8d:0a:6c:f7:fc:3d:9b:f2:a7:57:b5:d0:eb:58:bc:96:
67:ab:e1:ac:4f:86:9b:d4:4a:e4:c2:63:6a:53:5e:73:0a:12:
a2:fe:25:4f:5e:71:11:3c:fc:55:91:b3:a4:2f:9b:22:26:90:
3c:4a:aa:03:8d:d6:16:9b:fc:9f:ba:74:67:1c:0c:b3:2f:57:
89:de:4a:9d:8b:d2:c9:8f:87:0d:35:25:12:16:d2:46:22:f8:
6f:ec:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:43:02 2024 by rpki-client on console-ams.rpki-client.org