Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/q-LJzW3zeJvFle2xuCTtWpfW_S0.roa
File: q-LJzW3zeJvFle2xuCTtWpfW_S0.roa (raw, json)
Hash identifier: qy+ODjFK3x6C+8FYYflREP+Tl/VJYMt3q1d6F1RciK8=
Subject key identifier: AB:E2:C9:CD:6D:F3:78:9B:C5:95:ED:B1:B8:24:ED:5A:97:D6:FD:2D
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018F2F83A79742F789498E91516715D9EC42
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/q-LJzW3zeJvFle2xuCTtWpfW_S0.roa
Signing time: Tue 30 Apr 2024 14:58:28 +0000
ROA not before: Tue 30 Apr 2024 14:58:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 45.94.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:83:a7:97:42:f7:89:49:8e:91:51:67:15:d9:ec:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Apr 30 14:58:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abe2c9cd6df3789bc595edb1b824ed5a97d6fd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:27:8a:b0:93:71:47:21:d6:0a:5b:e8:9c:
39:ee:6a:58:d8:76:81:65:05:db:f1:e2:ea:48:c2:
be:bd:c6:4a:7a:63:d0:c3:a9:95:23:40:92:2f:c8:
09:ff:bc:fe:e1:6b:e8:0c:d3:1f:56:4b:9a:d9:da:
84:26:84:7d:09:48:e9:d8:88:20:87:f4:57:70:5f:
75:08:0a:7a:1c:9f:92:7a:98:7d:5d:9e:37:34:76:
64:c6:db:db:19:98:1e:31:da:a3:ff:d2:72:8d:b8:
f6:64:66:49:ec:12:fc:54:55:c7:9f:fd:ba:35:b8:
27:37:00:20:1d:45:5d:a7:b5:a2:17:56:9a:58:61:
69:7b:42:00:ea:1d:78:3e:3a:e4:09:40:c0:57:7a:
68:3e:21:25:22:29:a6:47:08:e8:71:0c:a6:28:5b:
c2:d1:dd:d5:92:ca:dd:f1:dd:58:bb:df:4f:03:08:
2c:34:15:af:55:5f:0e:f5:48:f8:74:28:c9:2e:dc:
68:01:a9:6a:0b:77:e3:29:47:f3:d3:20:51:39:67:
fa:1a:16:3d:0b:7a:d7:d2:68:a0:04:ce:17:90:9a:
12:19:4d:d7:58:2b:4e:b9:40:89:42:08:d4:c8:c2:
e7:78:11:5e:6e:31:d4:93:d4:9e:fa:54:64:f0:3e:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E2:C9:CD:6D:F3:78:9B:C5:95:ED:B1:B8:24:ED:5A:97:D6:FD:2D
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/q-LJzW3zeJvFle2xuCTtWpfW_S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:8e:8c:0e:ad:f0:f7:4c:da:7e:d3:14:81:d9:4f:e6:35:39:
f1:72:8a:f3:0c:be:81:13:f3:30:41:ff:51:66:ce:c1:b3:f4:
42:ac:30:44:39:25:c6:da:8f:c6:f9:e6:5c:5f:91:7f:48:3c:
59:c7:eb:bc:98:7a:3e:ba:be:a0:ef:3a:77:7a:0f:bd:a8:f7:
fe:19:70:1a:9a:3d:20:3d:ff:6a:ec:55:9b:55:cb:ec:a2:cd:
4f:b1:0e:2a:fd:65:fe:d8:69:73:e4:7c:49:4d:bd:bb:71:07:
7a:0a:84:b7:a4:da:8d:a7:1e:5b:01:9b:b8:f7:fb:55:c6:ba:
d8:54:49:36:bb:9f:6d:4c:11:55:74:e9:8d:a0:bb:e1:f2:ec:
52:74:bb:2f:af:40:8b:b1:a4:fc:d5:c4:87:96:5e:41:c3:3d:
1e:fe:7c:e0:f4:03:7f:57:a8:9f:3b:a9:e6:9c:71:59:08:6c:
af:61:26:be:20:a2:01:f8:9d:22:26:f8:d2:c3:be:18:53:c9:
e4:59:06:0d:30:ff:f9:a8:13:75:34:36:b4:97:dc:62:ee:6c:
b9:2e:d4:29:90:00:8c:27:e7:74:b1:94:52:30:59:18:ec:b3:
6f:49:f0:ef:f5:19:93:08:20:21:37:78:20:a7:aa:f9:d3:18:
4e:85:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:28 2024 by rpki-client on console-ams.rpki-client.org