Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jNqouEyMkCQIzGDTlXkxz9DtKPA.roa
File: jNqouEyMkCQIzGDTlXkxz9DtKPA.roa (raw, json)
Hash identifier: iPP8JN+yzi8tMroP+SHOLtXJLG8D1XGWV+8i/b23y2E=
Subject key identifier: 8C:DA:A8:B8:4C:8C:90:24:08:CC:60:D3:95:79:31:CF:D0:ED:28:F0
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01929EF4CF5B1CB9741D4A3BD6C4FCF39851
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jNqouEyMkCQIzGDTlXkxz9DtKPA.roa
Signing time: Fri 18 Oct 2024 09:28:16 +0000
ROA not before: Fri 18 Oct 2024 09:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21840
IP address blocks: 207.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:f4:cf:5b:1c:b9:74:1d:4a:3b:d6:c4:fc:f3:98:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 18 09:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cdaa8b84c8c902408cc60d3957931cfd0ed28f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:fd:c6:1f:ef:9d:0f:ea:22:d3:4d:11:e7:
dc:ba:58:24:89:f4:92:9b:38:d5:45:2b:3c:69:0d:
08:20:22:6b:dd:71:bf:95:38:77:89:5a:43:c0:75:
a0:44:b4:36:3c:76:f2:5d:d9:0f:c5:d9:0e:d8:90:
39:7e:c5:fa:95:d1:11:e7:f2:89:58:ae:29:72:40:
b1:88:00:20:de:4c:6c:11:48:13:fa:c1:3d:a6:a0:
5e:73:80:fb:b9:d9:eb:4b:de:c9:d5:72:25:8e:96:
27:f7:ee:c5:dc:e7:93:d4:7a:dc:d7:67:34:ba:4a:
eb:af:a6:94:c0:d4:46:5c:bf:76:ce:5a:6e:88:e4:
44:8f:fc:a1:5b:46:75:4b:d4:97:dc:97:67:a6:04:
ef:76:37:65:fa:70:df:98:33:57:5e:38:1d:ad:15:
0e:c2:a6:56:72:98:cd:9d:0d:26:1f:a8:43:be:98:
d6:59:f4:31:5b:13:72:b3:20:b2:b3:b4:30:4c:ee:
16:64:a6:4b:83:96:41:60:4c:b5:1d:3b:7c:61:23:
4e:45:b3:28:d2:49:10:2b:a4:4e:3f:ce:74:96:ba:
4b:c9:01:b2:8c:27:f9:59:da:68:e8:de:66:c2:c6:
12:7f:fa:6d:17:bb:12:2a:3f:ce:4b:5f:95:10:47:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:A8:B8:4C:8C:90:24:08:CC:60:D3:95:79:31:CF:D0:ED:28:F0
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/jNqouEyMkCQIzGDTlXkxz9DtKPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8f:90:fe:c5:45:12:90:98:41:8f:f4:47:6b:de:b0:bf:be:
8a:89:06:d8:2b:87:bf:52:18:87:0d:a1:14:85:f1:63:30:21:
a2:87:ce:cf:49:65:50:ca:43:bb:7a:53:31:c3:77:d3:36:da:
c3:51:f4:01:4e:c1:61:fe:4b:8e:67:3a:3b:cb:27:59:a4:87:
5f:f9:bf:7b:f2:64:7b:5d:36:f1:24:38:3e:92:52:0e:fa:e5:
bd:a5:b5:f9:d9:02:2c:24:89:31:0e:99:6f:fe:31:80:9e:7b:
7f:e1:00:b1:60:30:c4:6b:b7:a4:ed:04:85:24:84:95:cd:e6:
4b:b5:41:cf:aa:af:d2:04:cb:17:f2:71:06:04:2c:db:16:ec:
d4:06:26:a0:28:3f:9d:54:e5:8a:0c:1c:7b:aa:5f:c6:ff:33:
6f:41:b4:b3:96:46:64:a7:ef:d1:84:15:8e:54:94:54:43:96:
e8:d4:a2:b5:00:bc:21:d7:a6:b5:8d:0c:49:ab:e1:6e:8b:9c:
65:35:fd:6c:c6:67:9d:11:e3:93:63:75:de:42:e6:49:03:ea:
29:91:cd:bb:e5:78:48:87:e8:39:a5:02:5f:21:83:e1:ae:11:
2c:bc:9b:14:d0:47:8e:86:fe:be:f0:bc:5f:3d:0c:5a:6a:a2:
a4:2c:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:49 2024 by rpki-client on console-fra.rpki-client.org