Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JRWnFbMoJL6Xny-Xa6lSqKSegBE.roa
File: JRWnFbMoJL6Xny-Xa6lSqKSegBE.roa (raw, json)
Hash identifier: bORuho/dZnibaabvV8llmPmIsI76c2dD38kFlfj+SBQ=
Subject key identifier: 25:15:A7:15:B3:28:24:BE:97:9F:2F:97:6B:A9:52:A8:A4:9E:80:11
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01900DA4FB4E037701B57A983805D4E772EF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JRWnFbMoJL6Xny-Xa6lSqKSegBE.roa
Signing time: Wed 12 Jun 2024 18:10:34 +0000
ROA not before: Wed 12 Jun 2024 18:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 14:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:a4:fb:4e:03:77:01:b5:7a:98:38:05:d4:e7:72:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 12 18:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2515a715b32824be979f2f976ba952a8a49e8011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:67:29:eb:8a:7b:9d:48:90:a0:8e:08:ca:
aa:22:36:15:16:e2:5e:cc:2d:84:89:1d:3f:eb:ec:
0f:ad:c6:33:f1:0e:a2:e1:3e:f3:b5:17:da:68:a5:
de:b2:f3:d7:ff:ab:26:12:3e:10:be:75:a6:c2:5a:
89:6d:52:28:06:61:c0:fd:c0:7a:34:b2:48:ad:b1:
41:3f:92:b7:29:5d:1f:08:cb:11:c6:39:66:c9:c0:
c1:95:74:79:8a:79:6a:2c:c4:d3:75:4c:e2:f3:7d:
a8:b7:fc:e2:aa:39:f5:95:88:7d:44:1c:4d:78:03:
89:88:c7:0b:c4:ff:4c:a9:9c:da:52:44:1b:a5:30:
00:d9:a3:d6:35:fa:b5:7f:7c:ca:30:d4:a6:89:f1:
31:bc:fb:45:65:14:4b:94:af:51:db:19:97:9c:a2:
b2:3c:e0:ae:fb:61:7b:65:5f:f6:8d:4a:f6:ea:58:
1f:e2:eb:54:de:f9:2a:87:51:99:93:05:71:10:35:
60:84:01:27:2f:b1:07:90:79:5f:da:ca:3d:00:d6:
22:75:a6:bf:1a:a9:be:46:04:3c:27:b2:74:9c:b2:
24:0a:cb:da:9f:7c:fb:f8:a7:79:f9:5a:d0:1b:5f:
af:31:f4:b6:6d:7c:58:95:e4:af:c1:a7:85:9b:cb:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:15:A7:15:B3:28:24:BE:97:9F:2F:97:6B:A9:52:A8:A4:9E:80:11
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JRWnFbMoJL6Xny-Xa6lSqKSegBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:a8:64:a1:77:aa:41:83:be:4b:ed:e9:07:7a:43:09:1f:ab:
5d:b3:4d:c2:0c:13:66:10:8f:dc:eb:ea:26:e4:d9:07:1b:ab:
bb:0a:87:dc:11:cd:d8:42:07:90:b3:23:da:fb:4d:ad:25:86:
61:82:52:78:5b:77:9f:7a:23:7b:c3:66:12:52:5f:8a:6d:5c:
a1:ab:52:8d:d0:22:16:ca:a1:f4:71:3d:2c:3e:67:93:f6:60:
54:8c:2d:e7:03:64:cb:d6:16:44:fa:40:e1:c6:e8:41:a5:0d:
3a:8e:57:86:be:42:53:f2:5c:1d:57:32:f7:1a:a1:a5:c8:c4:
bf:d4:38:ca:60:53:4c:16:28:b0:a0:6e:5a:da:6e:a9:6d:95:
4d:c0:12:e1:35:e7:16:9e:b6:be:be:36:0e:bc:87:06:76:aa:
f7:02:3a:58:c7:67:36:37:5f:e8:0f:61:9d:e4:e7:3f:cc:65:
21:23:b2:34:ed:35:fa:4e:81:32:5f:55:d3:4e:50:7c:e7:fc:
88:b1:8b:21:4d:d1:a0:67:b4:bb:b0:16:bb:eb:b9:69:76:0c:
8d:bd:05:ff:1a:db:c7:a3:16:90:e3:ca:64:07:03:c4:b5:de:
bf:c8:20:93:b7:2f:c9:96:2b:08:fa:9d:66:bf:1b:19:74:f0:
71:1c:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 19:00:39 2024 by rpki-client on console-fra.rpki-client.org