Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/jl4M-KqTAclPqOlAd7aCLRzerr8.roa
File: jl4M-KqTAclPqOlAd7aCLRzerr8.roa (raw, json)
Hash identifier: WA2039PVE48O67SEDeOzcII0nD7KMcKpPEYEMverCyo=
Subject key identifier: 8E:5E:0C:F8:AA:93:01:C9:4F:A8:E9:40:77:B6:82:2D:1C:DE:AE:BF
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018CC56DFA69849CB486D36670851D4ECA72
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/jl4M-KqTAclPqOlAd7aCLRzerr8.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211529
IP address blocks: 194.5.95.0/24 maxlen: 24
45.129.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fa:69:84:9c:b4:86:d3:66:70:85:1d:4e:ca:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e5e0cf8aa9301c94fa8e94077b6822d1cdeaebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:23:0a:06:2d:15:75:26:f3:a3:b0:0f:08:
05:ca:b9:79:d1:60:d6:b7:f2:fd:ff:71:48:c9:23:
5a:4c:01:17:f8:1f:f4:8b:37:14:cf:92:70:0b:13:
d5:c6:42:8c:74:f4:c1:4a:44:46:01:15:51:d2:9f:
7a:dd:9b:49:7c:ce:21:18:a3:c5:71:0a:13:9b:ba:
d3:1d:46:ce:f1:41:82:f3:33:86:a5:d2:a7:d2:37:
36:ff:4d:8b:af:2b:3e:e9:80:de:fb:7b:de:0d:90:
95:fb:4f:46:33:c7:07:3a:27:1a:4a:d1:5b:f7:59:
56:af:51:b5:11:34:b6:5d:de:c6:56:29:bf:c8:3b:
94:34:8b:12:f0:b6:3c:b2:84:ca:cc:e7:60:44:87:
ea:21:ef:3f:a9:51:d0:bc:93:2a:bd:6d:d6:28:7f:
5c:34:7d:4a:41:a4:4e:56:06:20:f8:ae:0e:90:c0:
b7:bf:14:df:ae:80:58:96:e9:f2:0c:e8:33:f5:f3:
99:65:bd:62:48:cf:ef:f3:9b:1a:3e:33:07:fc:c6:
30:51:44:8e:1c:fb:30:7f:cf:d8:7e:61:11:a9:f8:
c3:4a:97:c6:3e:75:4f:d6:b5:e2:30:81:94:bb:d7:
eb:a0:4c:46:29:21:2d:1c:94:cd:d0:14:a1:53:b3:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:0C:F8:AA:93:01:C9:4F:A8:E9:40:77:B6:82:2D:1C:DE:AE:BF
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/jl4M-KqTAclPqOlAd7aCLRzerr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.185.0/24
194.5.95.0/24
Signature Algorithm: sha256WithRSAEncryption
30:be:cd:7c:72:42:cc:1a:60:e3:b6:22:a4:3e:a3:4e:6b:54:
c3:6f:7b:a8:f1:60:13:0e:c5:4d:9d:34:c6:44:35:22:70:ee:
62:54:48:4b:47:04:fa:11:7e:ba:a3:97:73:44:69:88:ef:e5:
3a:b6:49:30:4a:ed:cf:d1:1f:0b:6f:ad:40:ca:d6:f0:68:9d:
56:61:b4:17:d9:5c:90:21:09:7e:74:c1:9d:49:4d:36:01:b7:
1f:ab:80:f2:d7:3f:f8:ce:ff:b0:f4:73:c8:cd:11:cd:23:16:
15:c3:8a:7e:41:dd:1a:16:fa:98:9f:40:d9:e6:58:72:43:36:
8a:30:f9:18:83:9d:08:65:c4:63:3d:22:e9:2f:8e:2b:f0:08:
85:3b:12:4e:88:31:7a:4f:ef:60:e6:e3:e9:ab:2a:45:91:23:
1b:54:bc:0d:95:e3:40:69:05:51:85:f3:9e:d9:ed:17:66:13:
f7:f6:2f:61:b0:ae:a6:a7:84:9f:e8:29:fb:32:5f:82:b0:bb:
e5:8e:0b:1d:84:51:fa:af:7a:7a:8c:cc:dc:a8:a7:cb:09:ad:
22:3e:26:d2:7c:f2:d8:04:62:94:46:22:0c:3f:26:88:ee:65:
93:51:44:21:83:86:9a:f7:e4:84:9d:ac:dc:52:61:df:7b:57:
08:a9:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:18:00 2024 by rpki-client on console-ams.rpki-client.org