Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jhlVJdEq5CSb7xeEJJluyO2cD4U.roa
File: jhlVJdEq5CSb7xeEJJluyO2cD4U.roa (raw, json)
Hash identifier: Y5BoZbliCSJMGLNrnV8LMOT4HfFNdC4CnHxcWDylkIc=
Subject key identifier: 8E:19:55:25:D1:2A:E4:24:9B:EF:17:84:24:99:6E:C8:ED:9C:0F:85
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018CC9BC61D2EDB28F16720EF2E5A34B9946
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jhlVJdEq5CSb7xeEJJluyO2cD4U.roa
Signing time: Tue 02 Jan 2024 10:33:35 +0000
ROA not before: Tue 02 Jan 2024 10:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204356
IP address blocks: 212.30.32.0/24 maxlen: 24
212.30.34.0/24 maxlen: 24
212.30.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:61:d2:ed:b2:8f:16:72:0e:f2:e5:a3:4b:99:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 10:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e195525d12ae4249bef178424996ec8ed9c0f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:01:37:75:45:e2:c9:83:53:6a:58:e4:bf:
f0:e6:69:9a:3a:d4:8c:35:32:a6:d9:ac:31:70:f9:
1c:01:d2:a9:2f:f3:6d:f9:e9:6d:7a:e9:7d:f3:64:
2e:5b:d0:88:b8:79:ec:9e:52:e8:4d:9d:f7:4a:9b:
c3:da:b0:43:70:d7:20:2a:a2:1d:cb:06:71:6e:1d:
ee:4d:bd:4a:05:18:72:9f:5c:e0:1a:31:df:95:9e:
57:bd:fb:96:90:c3:65:12:db:ba:45:76:c2:bd:c5:
29:1b:26:4f:5c:1c:17:33:cc:68:6d:4b:9a:ee:98:
66:3d:a6:f4:61:10:52:42:45:bd:73:ed:60:77:47:
ef:44:f3:65:63:60:0f:81:df:df:99:5c:67:41:10:
32:ec:8d:86:cb:c7:40:b1:34:20:90:30:00:1e:8c:
ed:ee:96:cb:50:5b:3f:93:50:c6:05:d2:2b:9c:d1:
87:cc:ef:45:94:14:81:77:7c:9a:2a:6b:35:c5:aa:
ea:d8:c9:a9:31:09:26:a2:bc:1d:a2:88:c1:20:43:
f1:18:6f:f2:43:5b:49:e8:1f:e6:e0:06:3d:d7:16:
e4:7c:17:ad:24:ac:4a:70:b9:60:88:38:cd:89:51:
4f:a8:4d:ba:25:17:b3:cb:22:e0:2c:e4:ae:6f:b2:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:55:25:D1:2A:E4:24:9B:EF:17:84:24:99:6E:C8:ED:9C:0F:85
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/jhlVJdEq5CSb7xeEJJluyO2cD4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.32.0/24
212.30.34.0/24
212.30.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3c:7f:71:b1:d6:13:fb:44:26:78:2b:9e:18:ef:3d:d4:a0:
fb:2f:7d:e7:da:37:1d:00:e6:83:fb:22:ac:85:07:aa:56:96:
b5:e2:ce:fe:38:60:f5:af:39:33:3c:1d:25:75:f3:47:f8:90:
4f:85:9e:b0:a1:9a:e9:42:5e:0a:0e:00:f9:56:87:59:97:97:
7f:84:07:2c:9f:a4:ff:4a:4c:bb:c2:38:d8:cb:8a:0c:33:51:
cd:c7:80:c7:ee:6a:1f:9c:7a:95:d2:a8:02:b4:7b:ad:da:0b:
a4:ce:eb:d8:88:72:e6:5e:3d:b1:69:48:77:44:a0:f4:7f:b6:
63:0a:94:60:70:06:c4:6b:e8:5a:88:c6:65:05:64:47:bf:35:
ca:b1:a5:1e:33:0f:f4:0b:5e:b5:ae:7a:dd:f9:fc:86:96:d6:
bb:45:63:33:ad:9f:a7:41:93:2a:ab:ec:e6:ba:cd:a1:8e:b5:
46:d7:0e:08:02:c6:bd:97:f4:4c:43:bf:39:c2:98:0b:0d:41:
76:56:cf:d0:16:b4:18:cf:5d:78:47:67:0b:d6:37:0f:e3:81:
55:82:93:17:8a:d1:72:23:bd:1f:45:cf:d8:eb:53:2f:33:80:
c7:09:ec:76:ae:44:77:a2:99:8e:cd:29:c9:de:1f:ab:4a:24:
7d:8c:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:31:31 2024 by rpki-client on console-ams.rpki-client.org