Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jClW0Smevodx1fPYl8AbmrROX1g.roa
File: jClW0Smevodx1fPYl8AbmrROX1g.roa (raw, json)
Hash identifier: FW+yDuOT5EezzoceY45DDP50qXj1ey9Ibg1zO8zQB7o=
Subject key identifier: 8C:29:56:D1:29:9E:BE:87:71:D5:F3:D8:97:C0:1B:9A:B4:4E:5F:58
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649ED7B61FD4221B1F308D5433E608D
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jClW0Smevodx1fPYl8AbmrROX1g.roa
Signing time: Mon 01 Jan 2024 18:29:42 +0000
ROA not before: Mon 01 Jan 2024 18:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203312
IP address blocks: 151.251.61.0/24 maxlen: 24
78.83.211.0/24 maxlen: 24
82.103.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ed:7b:61:fd:42:21:b1:f3:08:d5:43:3e:60:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c2956d1299ebe8771d5f3d897c01b9ab44e5f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8c:1b:0a:1c:34:e7:72:92:d4:69:48:3b:ae:
df:a8:ac:eb:04:60:00:57:ee:86:91:8f:a8:6d:19:
af:95:e1:b0:af:12:d6:1a:0e:3f:ec:5d:37:5f:df:
e3:cb:c1:30:51:de:2f:e8:69:0c:e7:1f:24:bd:98:
bd:66:2c:dd:58:1e:c0:5e:c3:c5:79:16:04:b1:60:
14:aa:bb:18:17:8a:76:13:a1:66:3a:9e:40:e8:19:
3d:77:c6:1f:a7:fb:f2:c7:c0:da:36:f6:93:47:ee:
b5:40:4f:16:ba:0a:e9:71:3a:34:d2:c2:64:bc:f7:
57:f5:a1:44:02:67:21:9a:60:86:b5:10:74:c1:3f:
5d:84:b2:1b:05:c8:64:91:2b:27:a3:4c:94:37:98:
35:82:94:b1:e6:e2:0e:cb:a4:79:73:e7:f6:8d:62:
67:a4:72:99:49:96:ad:94:67:df:8d:33:01:81:8d:
31:06:07:76:93:26:52:46:31:7a:6b:92:33:f7:e7:
a2:cd:fb:c2:11:29:10:38:3b:15:c5:0d:ee:28:30:
6d:4b:e6:bb:84:54:e5:2b:d9:db:b3:b5:62:c1:fa:
4a:6d:29:77:2e:0c:5a:4f:2e:78:58:ed:4a:18:92:
de:d2:ea:8f:79:c9:f5:fc:0c:b0:6e:d4:67:16:fd:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:29:56:D1:29:9E:BE:87:71:D5:F3:D8:97:C0:1B:9A:B4:4E:5F:58
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jClW0Smevodx1fPYl8AbmrROX1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.211.0/24
82.103.79.0/24
151.251.61.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fd:87:5d:06:88:d8:ea:dc:a4:1e:a4:4f:e8:5c:53:47:bd:
13:2f:13:bb:27:5d:78:e5:5b:32:12:87:9f:e9:c7:d6:d8:7b:
80:c1:03:6d:db:1c:e7:b9:56:f7:fe:cb:d7:8c:e7:f9:37:42:
5a:e3:62:26:ea:72:44:6f:7b:14:8f:5d:8c:c7:48:0d:09:13:
aa:60:86:da:33:1c:12:39:cd:07:00:7f:3b:00:10:a4:62:27:
bd:f6:fa:8a:28:ba:96:57:29:f0:a0:37:b0:6c:fa:84:7a:4f:
32:11:ab:7f:46:c9:f4:32:80:8b:4e:86:2e:94:dd:3b:fb:e1:
df:4e:63:e6:26:f9:60:af:37:f1:bc:96:6e:81:d9:33:e8:17:
f8:5c:db:df:91:ce:74:3f:e0:b2:c7:3f:1b:38:8e:d6:b1:22:
fb:a8:7c:45:48:06:0d:e5:b1:9d:f7:bb:01:e3:63:58:4c:ea:
8a:f8:dc:9b:33:5c:f1:0e:32:46:50:df:c7:ed:a8:95:6d:27:
a1:5d:fb:45:26:8a:3e:1e:57:33:9b:49:47:05:f3:68:c8:9b:
ee:42:9a:61:97:86:a1:8d:80:0a:c1:11:2f:5a:ab:cb:f3:94:
49:07:f0:74:58:8d:73:65:71:b4:cd:64:62:d8:62:a0:79:be:
a3:15:42:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:49 2024 by rpki-client on console-ams.rpki-client.org