Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/JkFmo1cn70Uv8Vt6L4ZJ0bxv1_0.roa
File: JkFmo1cn70Uv8Vt6L4ZJ0bxv1_0.roa (raw, json)
Hash identifier: kAhl8XHEJS8PNAGYvL+Q1viSA4Nzl7DqYabC/supPFw=
Subject key identifier: 26:41:66:A3:57:27:EF:45:2F:F1:5B:7A:2F:86:49:D1:BC:6F:D7:FD
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 018CC7956C98357136B7D10F4E9C1E613180
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/JkFmo1cn70Uv8Vt6L4ZJ0bxv1_0.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212043
IP address blocks: 193.38.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6c:98:35:71:36:b7:d1:0f:4e:9c:1e:61:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=264166a35727ef452ff15b7a2f8649d1bc6fd7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:48:36:5d:73:e0:a5:43:ec:2f:06:5b:52:
af:a1:c1:69:4c:3f:aa:65:98:42:ed:f1:f9:86:88:
af:a6:b3:3c:4b:25:a0:2c:fc:24:1d:7d:da:af:3a:
2f:84:d4:65:25:7b:2f:9c:6e:5c:82:46:62:5d:64:
c7:fa:fc:f8:c4:e8:fb:ae:f8:cd:ae:56:dc:a5:64:
99:4e:b0:20:6b:b2:53:74:24:8e:bb:10:1e:44:c2:
76:ac:89:eb:fd:9a:6a:60:23:33:f8:69:f9:a9:33:
76:53:a7:f1:37:96:a0:5c:a1:86:b5:e8:9f:a1:e1:
60:ad:0f:ea:ae:e6:89:cc:50:0d:23:2c:f4:40:94:
b4:08:cd:e5:48:99:59:11:4c:71:ad:0f:7b:c8:cc:
a0:b3:d2:2c:61:65:71:d2:08:0b:49:26:0d:82:be:
0e:29:a9:80:7f:0d:1f:2d:03:60:96:0c:39:c1:cc:
88:ce:bd:0b:89:9d:ea:05:1f:db:3e:30:07:0d:39:
8d:24:cc:af:eb:7d:67:10:d0:b6:43:71:21:80:4b:
98:c6:d5:c2:8b:f9:ca:b8:1a:a7:17:24:26:e4:ac:
e7:03:b1:56:02:25:fc:04:9c:21:6e:a1:ab:b9:27:
a6:53:41:5b:38:2d:23:20:22:03:24:34:72:46:e5:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:41:66:A3:57:27:EF:45:2F:F1:5B:7A:2F:86:49:D1:BC:6F:D7:FD
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/JkFmo1cn70Uv8Vt6L4ZJ0bxv1_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.254.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cc:a1:5c:c2:51:01:34:60:7d:7d:ea:43:f4:7a:f9:89:df:
f1:9a:0f:bb:29:a4:29:e6:28:e3:33:79:45:ef:49:4c:f6:08:
82:2e:0d:5a:5d:6f:80:a7:e3:da:f2:d3:39:14:86:cf:55:43:
39:c6:ba:8c:e6:8f:c7:40:f9:12:95:cc:80:f8:6f:93:f1:46:
70:60:06:a1:fb:67:6e:c1:18:ec:1f:c3:6c:26:7c:d5:ff:30:
75:83:80:c1:93:50:2d:2a:66:8b:ee:fd:3a:7c:34:6d:cc:bc:
32:2e:5a:58:90:20:0c:d7:d2:47:8e:10:81:b4:ed:f3:20:06:
0c:0f:39:2b:09:6a:15:01:68:67:d2:b2:83:43:fe:ea:1d:0c:
95:4f:eb:67:62:ce:3e:57:52:af:78:9f:ff:78:d3:f7:6e:1f:
3b:02:7b:b6:0b:cf:cc:4e:ce:70:4a:ee:ab:3d:b9:01:ed:9b:
55:ac:e7:f8:6b:29:e1:77:21:64:96:28:2a:16:22:14:4e:bf:
1d:60:0d:72:18:bd:77:7b:5e:1b:15:1c:dd:17:b3:d5:30:0d:
95:ac:65:59:14:1f:40:c5:6a:52:72:21:5e:d2:b7:96:9d:4f:
3c:7e:d5:5e:1a:7d:cf:c9:24:71:fd:25:8f:e6:2e:4c:64:78:
2b:2a:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:19 2024 by rpki-client on console-ams.rpki-client.org