Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/JNkH4PfespyzF77Q2WBKCCUajV0.roa
File: JNkH4PfespyzF77Q2WBKCCUajV0.roa (raw, json)
Hash identifier: sJFEluEdThuvfhPLb/qQHWxrYTrnyeXGsEGg7cNFFqo=
Subject key identifier: 24:D9:07:E0:F7:DE:B2:9C:B3:17:BE:D0:D9:60:4A:08:25:1A:8D:5D
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 018CC50051C93B4FE5B9A6715B0153465E1F
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/JNkH4PfespyzF77Q2WBKCCUajV0.roa
Signing time: Mon 01 Jan 2024 12:29:41 +0000
ROA not before: Mon 01 Jan 2024 12:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204241
IP address blocks: 185.3.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:51:c9:3b:4f:e5:b9:a6:71:5b:01:53:46:5e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Jan 1 12:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24d907e0f7deb29cb317bed0d9604a08251a8d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:ae:da:ba:64:65:b4:c6:2d:e2:f8:97:f6:
cd:13:a3:2c:ac:20:0b:79:be:03:23:5b:72:67:c9:
f5:8c:7d:27:56:c8:53:1a:de:e1:78:2f:bd:f1:83:
8d:be:cd:59:ae:5e:02:a4:2e:2e:21:af:95:b6:ee:
24:66:f6:9c:cf:e8:61:62:ef:59:09:4b:2f:56:2e:
39:63:f3:dc:52:d7:7d:a8:84:85:5f:ed:42:c2:b7:
d0:b2:9d:b7:3a:26:ff:66:8b:0a:01:86:e8:fe:27:
01:ca:92:69:c2:4a:78:65:95:48:c9:07:6e:74:48:
77:79:99:91:da:31:ef:3f:1b:5d:84:2c:1b:e8:d0:
1a:af:e3:db:26:da:29:aa:bd:6c:2d:1b:d4:63:d3:
ae:b4:d3:77:cf:74:66:5f:9c:5c:a8:3a:58:dc:7c:
3c:b6:fa:ab:3c:a2:30:7d:d4:d4:39:d1:57:f3:e9:
7f:6b:4e:af:d5:44:38:36:e8:9e:9b:f7:86:fd:ca:
22:a4:d6:b9:71:70:76:f1:bb:1d:0a:59:ec:5d:d4:
6b:ae:d2:ca:3e:7f:0e:6e:7c:f6:bb:96:6e:57:76:
4f:87:68:2a:69:2e:6c:ad:1d:e2:1f:b0:bd:88:82:
e1:c7:a5:af:66:ae:5f:f1:dd:8c:1e:80:45:72:e7:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:07:E0:F7:DE:B2:9C:B3:17:BE:D0:D9:60:4A:08:25:1A:8D:5D
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/JNkH4PfespyzF77Q2WBKCCUajV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a1:d3:be:92:6a:3e:d4:ce:9d:bf:00:91:e1:a3:5a:d4:8c:
50:bc:49:14:71:db:29:f6:92:94:5f:cf:2b:0f:8c:88:f2:c1:
47:44:6c:b3:d1:62:2c:38:65:53:68:8b:ea:e9:3b:85:75:7f:
54:c9:26:56:ac:98:4e:c5:71:9a:2d:f5:1f:f0:22:bd:40:e8:
0d:4e:ff:a5:c8:2c:ff:72:5c:03:e0:77:a3:f0:ae:3c:6e:41:
03:46:31:dd:fe:91:ad:be:c1:a1:38:0b:ae:96:fa:5b:cf:ff:
15:30:aa:c2:da:07:74:8d:3a:9f:b6:e1:ec:b7:29:e8:e5:ce:
a5:45:15:1c:3d:e5:28:80:e9:e9:95:6a:7b:15:a9:8f:c5:dd:
53:9a:87:97:15:73:c3:82:4d:58:bb:d9:ae:59:ee:38:50:93:
35:56:21:92:e4:b2:a7:e2:8f:50:03:d3:31:80:55:70:27:97:
22:3b:ab:31:84:bb:dd:25:1f:20:cb:bd:15:4f:6d:77:9b:af:
bd:d4:76:aa:4b:65:07:d8:53:0d:59:7e:4d:b0:cb:81:76:d2:
c7:73:02:e5:c0:29:19:8b:6b:3d:a4:1b:d3:26:07:df:75:e0:
8f:26:fb:e3:06:91:8f:b1:b2:49:2d:18:72:8a:2d:bb:07:cb:
88:44:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:55 2024 by rpki-client on console-ams.rpki-client.org