Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JqAPEzemn05SPWUgzvkLbn4ljmg.roa
File: JqAPEzemn05SPWUgzvkLbn4ljmg.roa (raw, json)
Hash identifier: ieq921UqcS5QX9Grgs+C01sgC13Wm9oHhf+LgaGAqNE=
Subject key identifier: 26:A0:0F:13:37:A6:9F:4E:52:3D:65:20:CE:F9:0B:6E:7E:25:8E:68
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC79524B628EB6D5D52107700E534C2CF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JqAPEzemn05SPWUgzvkLbn4ljmg.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58955
IP address blocks: 92.63.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:24:b6:28:eb:6d:5d:52:10:77:00:e5:34:c2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a00f1337a69f4e523d6520cef90b6e7e258e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:a7:34:b2:cf:a5:c7:2a:b7:7c:9b:65:7b:
ae:f8:f8:f2:86:9a:5f:fa:6e:ab:91:63:27:71:b0:
e7:5c:97:f5:24:96:cb:d0:14:86:9d:77:92:01:05:
b4:8e:2e:5a:33:e2:69:9d:7f:c7:d0:ef:8a:5d:5e:
1e:aa:91:d4:77:5b:ed:a7:a1:c7:e7:67:cc:a0:c8:
35:30:fb:67:db:e0:28:a1:8b:4e:f8:cc:e7:25:20:
4f:ab:c6:4d:83:fb:ce:21:4d:e4:af:1c:ec:78:6a:
86:28:cc:8a:db:5a:84:01:18:1a:1b:65:ad:fb:4c:
25:19:fc:f8:4a:32:ab:56:07:de:3c:fd:34:51:fc:
df:75:b0:ec:ff:8e:fc:cc:81:6b:ac:6e:8e:b3:7a:
41:6f:c6:04:a8:37:64:e0:b6:ba:1e:7e:7c:bf:4f:
74:61:87:5e:92:d1:9b:3e:0b:1a:0e:5a:7c:47:82:
30:7b:8e:68:c9:0b:e1:fd:37:30:be:d4:db:fc:0f:
19:6a:d7:ab:de:c4:d7:64:32:1c:59:8f:90:1f:68:
db:31:a5:ae:b6:c2:de:b0:e1:1a:82:35:b3:79:9d:
83:15:44:01:5b:fd:3e:5f:06:cb:b1:67:2c:c4:13:
b4:b8:1d:9e:9a:9c:91:33:51:cf:3f:71:53:51:fe:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:0F:13:37:A6:9F:4E:52:3D:65:20:CE:F9:0B:6E:7E:25:8E:68
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JqAPEzemn05SPWUgzvkLbn4ljmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:04:40:81:c4:f2:e4:12:7c:5a:dc:5a:48:9f:d6:4f:4b:92:
70:b4:e9:c2:5c:dd:b3:d3:57:51:0c:3e:d3:8f:20:25:19:b6:
12:83:1b:5c:5d:09:9a:e4:27:fe:5b:1a:58:92:36:9f:75:c5:
d3:e4:b4:0e:25:e4:52:24:e3:80:2c:93:2b:76:0b:fa:cf:a6:
58:4d:c5:9c:1a:ab:2d:cc:81:ae:2e:d5:40:e5:b1:5a:84:af:
42:64:eb:2c:b4:e0:70:81:1a:41:ac:d1:a8:3a:6f:6c:cc:42:
2b:0a:d2:1b:2c:0a:ff:f0:4a:a7:69:89:0a:9c:ca:1d:11:6c:
f6:3a:2b:19:13:a2:e5:bc:93:bd:38:06:f7:06:fc:be:79:7b:
69:7f:12:84:81:de:f3:86:bd:d5:96:ae:fe:a4:e5:be:92:6b:
7c:70:0d:57:23:d0:dd:ba:e0:2f:d1:c7:00:4f:8c:59:55:ae:
08:7a:01:91:28:68:a9:c0:6b:05:10:71:ae:91:3f:0c:32:66:
da:3a:7c:46:b2:55:ef:3d:42:9c:9f:93:92:ae:74:6d:db:34:
8a:aa:05:3f:63:89:51:ca:a8:14:f6:f4:06:4d:ff:65:43:de:
f0:76:eb:cb:3a:d5:b8:cf:ce:ca:ab:83:47:b6:cd:be:3a:99:
17:33:74:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:01:17 2024 by rpki-client on console-ams.rpki-client.org