Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jsc-j1Uo4F0l3m1HoBhly2ou6RQ.roa
File: jsc-j1Uo4F0l3m1HoBhly2ou6RQ.roa (raw, json)
Hash identifier: MyfdHH/OZR2YYmSCtNR3hRtZv5+cBvMpDV3Dk7sP/e0=
Subject key identifier: 8E:C7:3E:8F:55:28:E0:5D:25:DE:6D:47:A0:18:65:CB:6A:2E:E9:14
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA7F18ED7A88D39658A7624F1F1BF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jsc-j1Uo4F0l3m1HoBhly2ou6RQ.roa
Signing time: Tue 02 Jan 2024 04:30:09 +0000
ROA not before: Tue 02 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 45.139.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a7:f1:8e:d7:a8:8d:39:65:8a:76:24:f1:f1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ec73e8f5528e05d25de6d47a01865cb6a2ee914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:d5:39:1e:e7:13:c1:9b:36:74:ab:d4:df:
a9:f3:a0:32:e3:8a:e7:fe:29:1e:5d:21:ae:ba:7b:
24:cd:2c:36:b2:6b:d5:e5:fc:c0:69:72:bd:01:c4:
43:59:70:23:4a:69:ea:7b:0a:c1:d0:66:d1:82:f7:
49:94:87:1b:37:bc:32:04:65:73:16:30:dc:7c:93:
9c:51:ce:9e:06:ff:c2:8e:1b:c7:34:93:da:b4:18:
cc:10:10:7e:d1:9c:65:c4:40:c2:6d:cf:20:fc:63:
fe:84:5f:da:14:92:75:ac:30:dd:10:6f:50:37:eb:
1b:d1:54:05:d9:55:bd:85:2b:59:87:01:e6:0f:ab:
af:94:95:45:17:fc:1b:65:61:ee:2e:7e:c2:f7:fe:
1b:a7:16:17:85:40:64:b9:53:d8:bd:38:94:4f:62:
ce:d1:17:8f:5f:7c:c4:eb:a6:c2:2e:32:4c:cc:5a:
a9:1a:eb:9c:9c:65:9f:81:7e:a5:6e:f6:b6:d4:79:
c5:78:f3:c3:58:6e:a7:b4:df:2b:48:33:f5:d8:78:
11:d8:1f:4c:fe:b3:27:bf:4e:aa:03:ab:e2:eb:bc:
07:66:e1:fe:6f:b5:7c:2a:b9:92:d5:af:18:da:89:
37:78:60:35:21:ce:de:39:37:17:92:20:e5:d1:f3:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C7:3E:8F:55:28:E0:5D:25:DE:6D:47:A0:18:65:CB:6A:2E:E9:14
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jsc-j1Uo4F0l3m1HoBhly2ou6RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ab:9f:f5:11:ae:4a:d2:5e:1d:8d:af:fc:2c:ab:6c:1c:bd:
a6:5c:36:7c:d7:f0:39:9d:69:cc:37:b7:4e:a0:b3:08:bb:09:
55:15:77:bb:58:ca:a7:d5:2c:2f:03:5d:9c:da:c3:9b:08:b5:
5b:75:b6:d0:8d:52:0d:f7:7a:bb:f5:34:ff:30:2c:74:83:ee:
ba:fc:e1:37:a2:67:4e:21:85:4f:ca:74:84:5d:f4:3f:c0:a6:
a2:c5:08:c5:ad:ab:23:98:8e:8f:b9:aa:0c:ad:76:03:64:a2:
49:2e:08:09:4e:f5:cf:41:b3:5e:af:5d:0b:04:d6:90:33:c4:
5a:55:90:37:d8:21:3e:3c:cb:2a:14:79:8e:0c:06:b9:eb:62:
e3:3e:92:2b:90:94:4b:d3:f9:f2:b7:e6:e4:a7:96:47:cc:a4:
c6:a2:11:82:99:cf:c3:76:09:20:58:0d:df:a3:36:46:f5:d4:
82:b1:87:4c:ed:d3:bf:c4:9a:a2:ee:dc:94:ad:e2:08:b9:73:
01:a9:32:69:fb:c8:88:a2:ae:cc:98:ec:41:bc:8e:49:71:f1:
b4:ba:0e:7d:d9:c5:3b:70:d8:4b:1f:8d:5e:cc:2c:46:f2:60:
08:55:94:a3:9d:76:db:0c:4c:32:b1:1c:b1:3a:ae:7f:8f:02:
86:60:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:04:19 2024 by rpki-client on console-fra.rpki-client.org