Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/JpjigjzfTCaOt-Ta2hRORn4fzDE.roa
File: JpjigjzfTCaOt-Ta2hRORn4fzDE.roa (raw, json)
Hash identifier: op67asKcX2OoovqqmgNPSNpIkpcGM0ROwMMD51hOdDw=
Subject key identifier: 26:98:E2:82:3C:DF:4C:26:8E:B7:E4:DA:DA:14:4E:46:7E:1F:CC:31
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 018CC50133701F10A3516195F9752D9B125A
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/JpjigjzfTCaOt-Ta2hRORn4fzDE.roa
Signing time: Mon 01 Jan 2024 12:30:39 +0000
ROA not before: Mon 01 Jan 2024 12:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44084
IP address blocks: 217.115.16.0/20 maxlen: 24
45.67.124.0/22 maxlen: 24
2a09:6240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:33:70:1f:10:a3:51:61:95:f9:75:2d:9b:12:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Jan 1 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2698e2823cdf4c268eb7e4dada144e467e1fcc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:0f:8c:47:9e:fb:ee:7d:01:f1:29:30:32:
42:8e:be:cc:56:c1:57:fa:f8:88:e8:76:ad:40:a5:
d1:5f:99:96:9e:58:2b:91:1d:7d:00:dc:68:3d:e6:
1a:5f:30:d1:d4:6e:79:10:3d:e3:b5:7e:10:2e:cc:
27:65:37:49:ec:3d:7d:56:90:0c:88:a7:a9:09:42:
fb:19:e2:1b:f2:1a:ad:ac:98:82:7e:d1:2e:04:b3:
a2:20:6d:9c:1e:34:b3:22:28:a3:94:0a:0c:01:c8:
9e:33:bb:14:e6:ae:10:a2:ef:06:df:08:13:a1:5d:
48:d7:7d:fb:aa:c6:69:b7:e5:e7:6f:9c:53:b7:3c:
51:55:f0:01:2f:d0:ba:b1:46:29:20:9c:63:cc:79:
23:62:00:5a:62:cc:ef:72:e3:ce:25:93:e2:c5:da:
cd:f8:2b:05:45:38:fc:9d:36:5e:f3:20:c3:a7:07:
04:e8:9f:4e:12:fc:24:81:05:6d:38:96:9b:3b:6b:
30:03:54:3c:d7:d9:24:e7:03:0d:8a:b5:57:3a:fb:
49:6e:a4:41:72:1e:f3:19:a5:5c:ae:80:ce:b1:60:
17:b4:43:9b:5f:7d:0d:40:c8:d5:95:fd:03:75:4f:
c1:e5:4b:5a:62:fb:7e:7b:5d:6a:8c:10:8c:12:b0:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:E2:82:3C:DF:4C:26:8E:B7:E4:DA:DA:14:4E:46:7E:1F:CC:31
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/JpjigjzfTCaOt-Ta2hRORn4fzDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.124.0/22
217.115.16.0/20
IPv6:
2a09:6240::/29
Signature Algorithm: sha256WithRSAEncryption
7d:6e:68:75:58:b9:ef:be:c0:d1:1f:19:53:aa:6c:2a:23:a3:
9a:de:e9:04:14:7f:ea:38:88:9f:ef:fc:31:cb:05:78:46:bc:
50:4b:3c:82:ca:d9:0a:6c:18:67:29:1b:e0:1a:8f:df:90:63:
64:bc:5d:af:a3:8d:92:a5:fd:39:63:60:ab:00:c1:01:2b:3f:
cf:57:f7:a1:16:bc:b3:60:4b:69:36:01:9d:38:78:f9:2e:29:
58:b4:c2:98:92:29:59:7d:98:90:94:c7:49:b7:0b:31:1b:1d:
f6:18:33:e0:55:b7:ec:9c:52:ca:35:66:b4:e2:f4:db:91:1c:
1c:77:c6:40:6f:95:7e:6b:0f:29:ea:8a:d2:80:33:eb:06:9e:
0d:fe:41:02:97:2a:dc:d1:39:0e:a9:70:f5:b8:2e:6c:4b:bd:
d0:b1:7c:d6:06:da:b1:01:28:0b:9d:82:28:5d:ae:6d:ed:8b:
07:6a:78:82:06:10:d8:e6:96:f9:1c:99:b9:d0:e1:76:ad:f5:
83:62:d7:c9:c6:c3:5f:0a:68:4b:87:88:65:f4:ef:34:0c:9e:
30:ff:94:c7:08:36:0e:74:0d:f8:82:ba:da:66:58:19:43:0c:
4a:c0:b3:af:6f:b7:38:e8:11:8e:49:6a:df:a8:3e:d8:15:a8:
e5:70:eb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:39 2024 by rpki-client on console-fra.rpki-client.org