Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Jx_SFtqWBYRX3uv3HS0iFuZlzc4.roa
File: Jx_SFtqWBYRX3uv3HS0iFuZlzc4.roa (raw, json)
Hash identifier: 1OgQVCIczcocjRHO9R9u4fY7aOMYtZQDDYbkz+suT1M=
Subject key identifier: 27:1F:D2:16:DA:96:05:84:57:DE:EB:F7:1D:2D:22:16:E6:65:CD:CE
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA296680EA335A60CA966DE72D3C0A39
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Jx_SFtqWBYRX3uv3HS0iFuZlzc4.roa
Signing time: Tue 02 Jan 2024 12:32:39 +0000
ROA not before: Tue 02 Jan 2024 12:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211517
IP address blocks: 2a0e:8f02:f03f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:66:80:ea:33:5a:60:ca:96:6d:e7:2d:3c:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=271fd216da96058457deebf71d2d2216e665cdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:cc:1a:02:0c:9e:b9:53:2c:b7:5a:9d:3a:
2d:d2:28:ae:04:0c:3c:1b:e6:f1:0a:4e:ca:4d:f8:
d4:c5:bf:23:93:c9:4f:0e:b8:f8:7f:99:a4:07:26:
e6:92:66:00:65:59:e0:36:b7:45:bb:77:c4:f2:a9:
ae:42:a7:03:76:0e:53:e8:10:43:f6:4c:84:04:f6:
5c:a7:99:d7:2c:dc:e8:79:62:11:1f:c2:65:e2:58:
93:a2:40:28:12:3d:20:b9:f4:71:40:b1:d0:30:bc:
51:c3:cd:dc:ce:6e:bd:c8:8c:7a:20:80:64:c7:7a:
17:62:34:d9:2e:bd:57:48:e7:57:33:bc:3b:97:34:
a2:2c:e7:58:94:cd:42:76:d3:9b:f5:2d:42:8e:b9:
00:bc:1d:09:87:af:c8:c4:b4:36:4e:f0:05:af:ac:
c0:a2:d6:f6:f8:6a:83:c3:e6:90:01:df:74:ae:bc:
e1:7f:62:6f:2d:0f:59:10:1a:cb:5a:c2:3b:38:f5:
4a:5b:4d:ec:f0:50:2d:87:4c:42:cd:4d:78:46:66:
09:b9:ed:c0:cb:ef:62:20:0f:33:15:47:79:3a:c8:
b7:57:1d:45:83:de:a7:87:72:62:b4:5e:b3:b6:c5:
37:01:e2:9c:6a:46:a3:7c:0f:b6:3f:42:9d:c9:25:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1F:D2:16:DA:96:05:84:57:DE:EB:F7:1D:2D:22:16:E6:65:CD:CE
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Jx_SFtqWBYRX3uv3HS0iFuZlzc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03f::/48
Signature Algorithm: sha256WithRSAEncryption
03:8e:7b:78:e7:da:76:94:2e:81:3f:b8:fb:2c:17:0e:14:b7:
6a:9b:82:62:f5:41:08:17:28:d2:78:ec:44:02:cd:be:98:dd:
58:e7:14:e5:cf:ac:a0:d6:c6:c1:5c:69:69:a8:05:87:2a:b0:
ed:a4:66:0c:3d:ba:2b:cf:e8:88:3d:e9:37:99:50:b4:47:82:
e8:05:09:c1:6b:b8:45:a7:67:a9:b1:70:08:c6:53:e0:5d:a3:
73:f7:55:2d:1a:01:03:aa:f2:f0:e1:8a:52:c2:b5:60:65:fd:
1c:fb:44:8b:7a:b1:5c:ec:d0:35:c9:93:52:d7:00:c7:b9:f8:
5b:44:3d:9d:4c:e8:d6:43:ef:06:45:4a:d1:91:b8:39:72:61:
83:59:38:e0:c9:dd:7e:b5:b2:ab:af:9e:d0:1b:92:4d:93:cb:
b1:f1:bd:6f:6b:82:a0:4f:6c:72:46:de:c1:5f:8e:33:04:1d:
ce:97:46:85:b8:a0:90:5e:48:7e:ae:fa:8d:f0:e2:b7:0a:49:
3d:f3:fb:79:39:25:5c:88:21:74:24:67:5f:b9:58:1f:89:83:
aa:0a:97:c8:15:d5:65:d4:5e:1b:a4:20:66:e2:ff:07:e9:05:
30:98:33:6a:e7:14:fa:81:5a:cb:9a:2b:8e:09:62:f1:27:42:
f9:5d:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:03:16 2024 by rpki-client on console-ams.rpki-client.org