Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RSOnzcrR7Xl2J4rtKK-EXVE-jfk.roa
File: RSOnzcrR7Xl2J4rtKK-EXVE-jfk.roa (raw, json)
Hash identifier: Xi/n1de8JYUn4CsDR7kydi+5u8n0fuYC2lmDO27V2tI=
Subject key identifier: 45:23:A7:CD:CA:D1:ED:79:76:27:8A:ED:28:AF:84:5D:51:3E:8D:F9
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AF558616BBD5F127B9E36673A2C40
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RSOnzcrR7Xl2J4rtKK-EXVE-jfk.roa
Signing time: Mon 01 Jan 2024 18:30:50 +0000
ROA not before: Mon 01 Jan 2024 18:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205095
IP address blocks: 85.120.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f5:58:61:6b:bd:5f:12:7b:9e:36:67:3a:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4523a7cdcad1ed7976278aed28af845d513e8df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:d8:ea:f5:f6:c2:22:4a:d4:78:07:e0:d0:
c3:08:1c:20:44:63:a2:a1:fd:a4:1d:5d:83:15:6f:
ec:ef:36:d2:b0:82:73:15:f4:2c:ab:8b:61:29:9c:
a9:bd:8d:6f:00:56:46:cd:8e:ba:0b:c3:66:41:5c:
52:d5:a3:f3:3d:27:8f:12:88:7d:c3:5a:b6:2d:19:
f6:29:d0:dd:0d:58:e5:cb:0d:5b:fc:3f:ba:a2:05:
05:4f:bb:1e:eb:7c:0c:87:a6:5c:ed:3f:f0:9f:fd:
5c:77:ae:6f:09:f5:57:89:31:27:0b:74:11:35:f4:
29:d5:cf:0c:29:ea:41:28:47:30:ce:3c:ff:53:71:
22:cd:71:2b:22:21:87:12:20:9f:9d:6c:21:71:70:
1c:3f:43:65:cb:fa:8e:93:69:b9:f6:f4:31:61:72:
9e:20:49:8b:39:74:d7:05:f8:dc:c1:bb:60:88:43:
b5:c3:13:61:ec:6c:3a:b0:ef:15:a2:71:d0:b2:a3:
ff:d6:d7:7a:01:76:79:cb:29:e6:2d:ee:0e:ba:0b:
a5:b6:22:0e:14:cc:a0:57:87:7b:5c:7a:43:04:22:
6f:b2:ab:17:71:20:d9:21:81:2a:a4:d8:ec:2d:37:
d2:b3:e3:32:05:1c:12:53:16:d4:b7:29:fd:67:ba:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:23:A7:CD:CA:D1:ED:79:76:27:8A:ED:28:AF:84:5D:51:3E:8D:F9
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RSOnzcrR7Xl2J4rtKK-EXVE-jfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.57.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b1:f2:7c:4e:24:44:ac:65:de:55:50:7f:fc:3a:ab:cf:07:
7c:78:28:87:43:29:28:e1:ff:54:77:31:d2:bc:ea:84:be:12:
9c:13:b3:68:aa:01:07:3d:30:51:e5:4b:48:0c:e3:03:97:d5:
39:7d:3f:c7:57:20:4e:a1:30:43:23:c6:ac:b0:83:cd:c4:e9:
98:dc:00:32:8b:62:0f:e7:39:1f:dd:81:c8:3f:b5:47:24:9b:
2e:29:50:ec:07:e9:55:92:b0:da:04:c6:a4:22:86:79:3f:84:
b9:4e:9f:74:02:2a:f1:cd:9d:78:f9:4c:0a:ff:a9:ee:12:99:
1f:e7:c3:52:5a:d1:da:d3:a5:9f:86:be:19:10:32:c5:3b:3c:
d3:8a:06:bc:d4:37:8d:fb:30:df:4b:a9:68:57:b0:90:c6:a7:
31:aa:f6:ac:f1:d0:cd:47:4f:a4:02:ac:5d:0f:9e:63:99:5a:
4c:f2:97:9e:c8:4d:93:a8:45:0b:80:50:88:8f:93:81:31:f7:
90:01:a3:5f:75:a6:93:59:1c:2b:bd:30:49:db:50:37:d9:72:
d9:42:c2:27:e9:f9:d4:a9:86:76:d7:fb:8c:01:8d:85:b7:65:
e6:45:41:3e:4b:af:da:f9:9e:60:0f:1e:bf:66:5d:bd:cd:83:
86:7c:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:32:13 2024 by rpki-client on console-ams.rpki-client.org