Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/j_o-E9QGhHJC4LLcHCB150xCKkc.roa
File: j_o-E9QGhHJC4LLcHCB150xCKkc.roa (raw, json)
Hash identifier: qQoSVz9S9lFQuR+eBIAGtJ1UyrJ83gYtZJpy8p6hft8=
Subject key identifier: 8F:FA:3E:13:D4:06:84:72:42:E0:B2:DC:1C:20:75:E7:4C:42:2A:47
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018CC9BC3C63BE7AE5BEBD8F1E7840678313
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/j_o-E9QGhHJC4LLcHCB150xCKkc.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61180
IP address blocks: 2a02:166b::/38 maxlen: 48
2a06:2602::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3c:63:be:7a:e5:be:bd:8f:1e:78:40:67:83:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ffa3e13d406847242e0b2dc1c2075e74c422a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:23:f2:e5:ee:1a:66:ba:94:4f:a4:52:c4:
2e:d8:49:f4:1a:6f:5b:d8:40:2f:08:03:a3:26:e2:
fc:69:0b:9f:27:fd:23:aa:da:ab:16:b8:d0:54:08:
71:09:26:9f:3c:5b:bc:1c:d7:68:7f:7c:6c:1b:90:
e6:4b:f1:bd:f6:3f:a1:17:bc:b8:b4:3d:07:5e:17:
25:2c:62:0b:85:cf:b9:69:9b:16:2f:0c:3a:77:2f:
ef:94:66:25:4d:98:3d:cb:d6:75:ea:ac:66:56:de:
38:98:d3:aa:ad:20:e0:ba:24:95:64:27:68:3e:1b:
da:9b:88:c7:74:72:fd:c3:90:87:6e:30:48:75:7f:
33:81:f3:bb:02:fa:26:11:fc:da:61:71:98:69:6b:
ab:17:b3:4d:af:1b:26:c3:77:5c:14:f4:0a:d0:32:
ed:4f:22:f0:8c:c6:be:e4:3d:0a:f8:d8:b1:ab:fd:
2e:c1:e8:2f:64:11:04:9f:bb:99:9e:51:24:42:7a:
5f:93:bd:49:75:ca:ce:e0:e2:db:50:99:33:48:f6:
75:08:42:78:a3:ad:e0:8f:0c:25:86:64:41:4d:3e:
99:6f:e5:a5:f7:2c:81:68:a7:0e:4d:ea:ae:62:6d:
81:64:c4:f4:01:02:08:17:82:72:3c:4d:ca:9a:82:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:3E:13:D4:06:84:72:42:E0:B2:DC:1C:20:75:E7:4C:42:2A:47
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/j_o-E9QGhHJC4LLcHCB150xCKkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:166b::/38
2a06:2602::/38
Signature Algorithm: sha256WithRSAEncryption
48:3c:38:71:cf:15:c7:14:49:70:46:76:da:c5:1d:85:44:fc:
2e:0a:1b:d7:08:9f:f3:41:f1:0a:3e:d7:32:d8:01:3f:c3:af:
48:15:df:ea:2a:12:c8:3c:a0:73:c1:07:02:f1:41:a3:a6:0f:
fe:ee:b8:bd:5c:4d:e7:9f:0d:9e:33:9e:5c:11:9e:c6:92:46:
63:32:2e:d2:27:0d:52:e1:fd:4d:fa:4b:4d:fb:39:26:8d:99:
d4:f5:4a:a3:e5:5a:94:9e:81:b1:57:43:96:c7:2c:22:66:5f:
c9:29:e0:8e:b8:aa:40:22:d2:dd:85:d9:b5:e0:f0:ce:1b:51:
e8:e0:b5:4e:36:d7:4f:2c:d2:37:c9:83:b9:99:6b:d1:5c:44:
ac:bf:85:59:d0:27:30:4e:68:60:2a:4c:d0:b4:d9:47:4e:0a:
34:a0:b5:37:a8:f1:6b:d3:a7:59:5e:00:fc:1a:0d:b3:76:57:
3a:6e:ef:c8:7d:b1:aa:22:70:11:ff:94:6e:19:15:87:41:08:
99:a4:d7:9b:41:d7:ad:55:a6:a4:3c:38:b3:db:f5:1c:e6:ca:
cf:22:f2:e9:04:ff:bf:c9:a0:b5:27:ba:b9:dc:83:22:0e:2b:
3e:df:66:15:ee:c4:2d:31:96:25:52:d0:9c:c2:37:74:f8:00:
1d:bf:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:36:34 2024 by rpki-client on console-fra.rpki-client.org