Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/JfNHQDGjYa4rIlbssg_rUP4FKqc.roa
File: JfNHQDGjYa4rIlbssg_rUP4FKqc.roa (raw, json)
Hash identifier: a+SmSUfGEk+31dISGyNw6aOYnN7iv/ACraefjNU92lQ=
Subject key identifier: 25:F3:47:40:31:A3:61:AE:2B:22:56:EC:B2:0F:EB:50:FE:05:2A:A7
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 018CC6B9072FC1FBBA5CE51A11B7333FFA4F
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/JfNHQDGjYa4rIlbssg_rUP4FKqc.roa
Signing time: Mon 01 Jan 2024 20:31:03 +0000
ROA not before: Mon 01 Jan 2024 20:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25417
IP address blocks: 87.249.160.0/19 maxlen: 19
80.65.192.0/20 maxlen: 20
2001:1660::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:07:2f:c1:fb:ba:5c:e5:1a:11:b7:33:3f:fa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Jan 1 20:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25f3474031a361ae2b2256ecb20feb50fe052aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:b7:41:2b:8e:0e:7b:b5:2a:42:af:92:eb:
83:6c:c2:9d:25:ce:75:de:95:e8:e7:a5:1b:21:ba:
72:37:0e:93:c3:ca:a7:a4:2b:13:5b:47:60:81:8e:
23:93:28:08:bd:11:f4:2f:9d:41:d7:e6:7c:a4:b3:
55:6a:d7:47:ac:57:e6:73:b1:92:2e:86:6e:b6:47:
13:19:9a:d8:85:90:d6:85:4b:33:19:eb:c5:60:74:
45:1c:de:1b:48:86:5c:a8:44:80:b2:f5:df:17:a3:
36:a0:fa:1e:de:93:7a:12:0a:1d:fa:c1:12:3f:e9:
df:ec:fc:43:e4:fc:f8:ed:8d:00:d3:93:15:e5:b3:
07:4f:e4:13:91:ce:df:fb:9f:7e:56:de:8b:4a:54:
b4:4b:f4:12:45:14:72:bd:a9:a8:45:e4:32:fe:c0:
7d:b3:cb:05:37:a2:08:6f:f2:a0:15:31:14:3f:6f:
84:67:4e:0a:61:cf:a9:b2:16:a1:55:81:1e:ee:50:
17:a4:4a:c5:6e:72:95:e8:e4:8f:ea:14:6e:5b:20:
0b:69:16:f2:95:75:4f:45:f7:b7:53:b6:3c:5a:7a:
ad:bd:88:e2:ab:cd:27:b3:5f:69:cd:b5:99:df:fc:
ea:49:8a:82:f7:09:ff:f2:cf:63:c5:ae:70:1e:57:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:47:40:31:A3:61:AE:2B:22:56:EC:B2:0F:EB:50:FE:05:2A:A7
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/JfNHQDGjYa4rIlbssg_rUP4FKqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.192.0/20
87.249.160.0/19
IPv6:
2001:1660::/32
Signature Algorithm: sha256WithRSAEncryption
11:ff:9f:a4:99:d7:1c:cb:2a:2f:56:e6:9a:fa:58:29:6c:65:
df:f7:c1:0a:12:8a:c0:f5:fe:12:7e:71:a7:1d:29:35:a0:22:
27:cd:28:58:57:96:b0:cf:22:3d:3c:18:43:b5:c0:7d:90:ec:
9e:19:a7:0b:6c:1c:03:e3:e3:87:bd:41:98:06:e5:68:3f:15:
f2:eb:99:23:ee:bf:68:9e:b0:34:7d:8f:88:79:3b:1a:8a:77:
ea:44:08:ab:6a:a4:27:53:95:40:ab:96:57:d5:96:ca:cb:df:
21:b8:76:22:04:0d:9a:09:42:c6:c6:04:04:7b:fc:c6:cd:03:
b5:e1:75:63:e3:9d:45:a4:4f:b7:02:60:40:89:7d:27:3f:e4:
20:d7:02:6d:f0:d0:c2:49:b6:8e:96:73:bc:94:99:69:42:44:
29:08:d9:d3:ca:55:c8:06:01:da:41:84:46:9a:e8:5f:b4:42:
43:f0:8c:76:2b:20:bc:a7:41:db:df:41:9b:80:27:d0:ec:ea:
54:16:54:9a:a7:dc:26:60:11:15:30:af:a2:34:18:47:df:85:
b3:a7:9c:25:9b:c2:e4:fe:1e:79:1e:cd:89:54:db:73:b7:12:
3f:f5:13:f8:ed:78:78:68:19:44:dc:47:fe:70:49:bd:3f:c7:
d3:49:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:34:19 2024 by rpki-client on console-fra.rpki-client.org