Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/9Jj_FghD_cirMjHIN_NP2u3z9qg.roa
File: 9Jj_FghD_cirMjHIN_NP2u3z9qg.roa (raw, json)
Hash identifier: A+rgvS9wluMd7LCZFyQ63A+lTUwZsVwHsgXhWoZ+tWA=
Subject key identifier: F4:98:FF:16:08:43:FD:C8:AB:32:31:C8:37:F3:4F:DA:ED:F3:F6:A8
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 018F5972A53D8D489505128492E451F06250
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/9Jj_FghD_cirMjHIN_NP2u3z9qg.roa
Signing time: Wed 08 May 2024 18:23:56 +0000
ROA not before: Wed 08 May 2024 18:23:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31246
IP address blocks: 194.164.239.0/24 maxlen: 24
195.200.23.0/24 maxlen: 24
2a14:2040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:72:a5:3d:8d:48:95:05:12:84:92:e4:51:f0:62:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: May 8 18:23:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f498ff160843fdc8ab3231c837f34fdaedf3f6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:c8:ff:6f:68:fd:91:4e:fc:56:55:23:ed:
18:93:8b:8c:cc:51:da:2c:b9:5c:8b:01:57:18:ed:
1d:f1:a3:aa:ba:89:82:de:46:bf:79:82:2b:5a:e0:
91:8b:7b:16:26:3a:6f:e5:8f:e6:30:27:1c:8f:07:
32:db:93:06:74:a8:3a:8c:a4:ce:47:22:b8:c1:02:
0f:a2:eb:c8:54:6a:b3:38:8e:7d:23:11:c3:3d:be:
70:a2:f8:f9:c6:79:36:a6:db:f5:d1:ae:9c:ea:22:
39:55:e5:e5:09:36:49:78:7e:d7:b2:25:08:87:aa:
93:cb:81:a7:fb:70:56:a2:b3:41:59:3f:53:83:df:
28:13:80:dd:c7:0d:e7:1b:2e:f9:bf:26:15:78:4d:
af:70:a0:fa:b3:9f:63:97:b7:17:6b:92:75:e8:4a:
5b:5f:45:ad:52:5c:34:14:7b:f3:20:b5:89:5f:1d:
a9:8c:6d:c4:36:5b:d6:49:af:9d:64:f2:f7:79:c2:
53:a9:2c:23:49:d3:01:ff:24:b9:36:0b:6a:6a:7b:
fa:ff:40:ef:9d:56:56:41:5d:5d:7d:be:7d:fb:7b:
0f:2f:af:95:1e:3e:90:e5:e1:5f:51:c8:eb:93:5a:
44:1e:9a:c7:ee:08:17:47:de:61:9b:4d:7c:12:12:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:FF:16:08:43:FD:C8:AB:32:31:C8:37:F3:4F:DA:ED:F3:F6:A8
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/9Jj_FghD_cirMjHIN_NP2u3z9qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.239.0/24
195.200.23.0/24
IPv6:
2a14:2040::/29
Signature Algorithm: sha256WithRSAEncryption
19:5b:51:00:b2:60:93:5f:3a:7f:46:50:43:47:81:77:0b:67:
73:f8:2f:20:a8:27:61:40:ac:19:7c:ce:16:04:f8:ea:b7:a9:
70:a6:d3:c9:42:90:8b:6d:66:f4:a6:60:ef:b2:39:4f:98:37:
72:e3:af:85:30:28:f3:55:79:46:af:69:97:27:9c:aa:bf:93:
e8:5b:0a:ad:f2:0d:01:63:12:7c:05:f5:8c:69:31:17:8b:8c:
ee:b6:6f:db:6e:4e:74:9a:6d:99:62:d2:93:da:8f:cb:65:f4:
50:f3:62:77:22:07:88:1e:5f:03:dd:f9:fd:f9:85:6b:bd:ca:
d1:0b:aa:80:31:22:b4:14:12:40:61:5f:dc:d6:d8:4f:4b:24:
7e:bd:d6:ce:11:e6:75:5f:1d:28:ff:c5:de:04:7f:d8:26:f4:
7e:51:71:aa:d2:3a:a0:0c:8f:ad:09:52:ae:5f:c7:5b:60:ba:
9d:02:b3:9d:2d:a6:f0:05:f6:ac:1c:6e:54:75:b8:45:03:2f:
89:95:48:e0:4d:ba:44:d4:8f:8d:56:e2:63:46:a3:26:26:01:
de:02:d3:f4:4b:7e:46:e1:8d:0e:14:32:d8:e1:37:1d:18:f4:
bf:19:68:1d:4a:49:e6:e2:c2:84:d9:0c:d8:76:34:43:9a:59:
8a:06:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:11:48 2024 by rpki-client on console-ams.rpki-client.org