Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/jGEir5MHm7BerbBXXfKvQX2hm8s.roa
File: jGEir5MHm7BerbBXXfKvQX2hm8s.roa (raw, json)
Hash identifier: eKAuDxykyNOMH326PtMrfeQBI/I1aeVGeGabqab0q1Q=
Subject key identifier: 8C:61:22:AF:93:07:9B:B0:5E:AD:B0:57:5D:F2:AF:41:7D:A1:9B:CB
Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial: 018CC6B909D31E6071F783694C079FD9B20E
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/jGEir5MHm7BerbBXXfKvQX2hm8s.roa
Signing time: Mon 01 Jan 2024 20:31:04 +0000
ROA not before: Mon 01 Jan 2024 20:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56595
IP address blocks: 45.149.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:09:d3:1e:60:71:f7:83:69:4c:07:9f:d9:b2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Validity
Not Before: Jan 1 20:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c6122af93079bb05eadb0575df2af417da19bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4f:e8:1d:59:2f:3a:f8:c0:65:3c:d7:c2:37:
34:3f:2e:3e:e3:75:de:c1:44:12:4e:35:41:17:ff:
9c:b0:d9:83:c0:ec:ca:ed:1a:de:5a:3a:b9:21:d3:
d8:82:16:dc:ec:37:3d:43:51:86:e8:19:f4:63:06:
27:60:88:79:19:ed:aa:c8:46:a7:00:b9:99:2c:43:
2f:ef:54:bf:be:38:36:c4:24:83:39:81:82:12:7d:
d9:b8:48:07:85:f7:06:db:6b:52:b1:90:a0:a7:be:
00:2c:97:ce:6c:0b:b8:4c:48:bc:9c:9e:71:94:27:
68:1b:9f:bf:fd:d3:f8:c8:57:74:52:fb:53:9c:be:
28:91:05:63:e5:6f:26:ad:32:2a:49:74:a6:ab:5b:
73:0c:7c:79:73:39:e4:53:55:c8:3c:cc:db:d1:ba:
e8:24:30:95:2f:f4:9c:02:e5:6d:8a:1d:8d:ed:ba:
7c:c6:fb:80:57:b7:48:b2:d3:35:a9:4c:e9:e2:42:
09:d9:3e:b9:a6:ba:d7:78:b8:b4:5d:51:18:a3:fb:
9b:06:12:4c:71:74:40:1c:c3:8c:62:31:98:19:ac:
f2:06:87:82:8c:dc:0c:29:49:5f:ad:96:b6:20:93:
54:fc:49:35:c2:91:1d:70:48:cb:5b:bf:82:50:6c:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:22:AF:93:07:9B:B0:5E:AD:B0:57:5D:F2:AF:41:7D:A1:9B:CB
X509v3 Authority Key Identifier:
keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/jGEir5MHm7BerbBXXfKvQX2hm8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:de:f0:11:cb:19:64:fc:be:93:d0:bd:2c:a0:03:1f:93:88:
d8:0f:74:5b:64:40:83:7e:7a:4d:fd:5f:28:75:33:a1:2c:eb:
11:60:a2:9d:ad:cb:ef:bd:35:3c:98:ab:99:8a:d6:e4:22:38:
cc:8b:19:f1:47:c3:9c:9a:2c:73:80:9f:f4:93:30:7b:9f:cf:
6f:64:e3:d5:66:62:32:26:ae:51:82:90:d3:6d:22:3e:67:71:
37:35:1d:9e:cb:c4:3e:fc:f3:4b:6b:95:9c:7c:02:f3:70:57:
e5:e9:77:3d:4e:96:5b:d6:41:dc:d6:fa:c7:a4:32:51:f4:b8:
fa:c9:36:2b:e4:8b:99:55:f2:ce:d2:75:50:ba:aa:7e:e4:09:
47:93:41:fe:6c:8b:8a:5a:9d:09:11:05:0d:6c:d9:4b:60:d5:
05:39:af:e6:24:3e:78:47:b2:04:4b:73:f7:b5:e2:83:b8:3c:
a3:83:96:bd:06:31:d5:64:49:5a:f7:b5:a0:ec:2f:30:e6:09:
bf:88:6e:eb:c9:a7:2e:1f:ca:fd:91:f6:30:75:ff:ff:7d:90:
63:41:66:eb:a9:2c:4e:01:83:3a:8b:15:a0:38:69:82:df:49:
97:c2:07:a4:b6:a7:fa:af:93:44:a9:17:7b:4d:5f:a9:b4:80:
2f:72:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:00:59 2024 by rpki-client on console-fra.rpki-client.org