Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/jmiQIF35udEfcTFOGzXKotXYTsc.roa
File: jmiQIF35udEfcTFOGzXKotXYTsc.roa (raw, json)
Hash identifier: MLplmuC35HwxVhoFRzG034vCk6FTkYUlstwadJtKKFY=
Subject key identifier: 8E:68:90:20:5D:F9:B9:D1:1F:71:31:4E:1B:35:CA:A2:D5:D8:4E:C7
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 018CC8DCF86FF6E030485C398C3334B50C62
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/jmiQIF35udEfcTFOGzXKotXYTsc.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212122
IP address blocks: 45.143.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f8:6f:f6:e0:30:48:5c:39:8c:33:34:b5:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e6890205df9b9d11f71314e1b35caa2d5d84ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:f1:a5:25:7f:da:b8:7e:5f:08:5a:eb:75:
df:26:51:39:d8:71:fe:f4:b4:e1:b3:26:90:cb:fc:
f8:bb:b4:af:ef:6b:a7:de:a8:b1:90:d7:cc:26:75:
89:5b:40:2e:3e:03:7c:ab:ef:d8:d3:12:5d:eb:36:
d1:1c:8f:ff:35:a1:14:6f:ff:17:70:3e:2a:f9:3e:
6d:10:89:2c:df:aa:c0:b3:7f:de:4d:bf:ae:62:fe:
cc:2c:fc:e0:ab:60:61:b3:70:5c:dd:f0:a9:ca:91:
b1:db:b1:e9:db:47:46:2f:31:68:f7:09:9b:08:69:
0e:61:35:a0:ca:19:80:22:e4:65:cb:9a:63:96:22:
6e:41:9e:c3:51:f9:55:6d:4e:ea:85:1e:54:b7:66:
f2:20:d2:22:bc:94:ef:c0:b6:69:38:62:96:06:93:
65:6f:c9:42:f1:79:42:38:8d:03:4b:1b:d6:dd:b5:
23:26:59:43:30:36:66:1a:16:07:7c:5f:dd:3a:67:
b1:86:d2:16:b8:3d:39:74:9b:e5:c5:11:5e:d3:83:
65:96:09:6a:a8:41:be:31:70:45:8d:b0:9f:c3:34:
63:7c:1f:f9:44:be:83:6a:61:38:e8:cd:df:eb:02:
d2:a8:aa:3b:c6:6c:eb:32:1d:7b:7e:43:fc:98:72:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:90:20:5D:F9:B9:D1:1F:71:31:4E:1B:35:CA:A2:D5:D8:4E:C7
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/jmiQIF35udEfcTFOGzXKotXYTsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:7a:10:c0:dc:f7:12:f1:a3:fc:31:7e:2b:3b:b0:a3:5e:9b:
b8:8f:d8:af:b2:6e:06:bc:92:d8:7b:af:40:31:0c:28:bd:f1:
fe:1a:55:73:a0:36:86:da:81:f2:64:b2:ca:59:74:59:2d:08:
d3:ed:2c:18:72:6e:75:94:86:00:4f:85:63:c4:3c:90:cb:b8:
9e:cc:20:7e:08:6c:87:7e:ed:41:f4:72:99:77:fe:a3:61:ad:
ff:4c:61:2d:43:c8:0e:75:90:52:36:1a:92:a7:19:de:d8:28:
5c:c3:ec:e1:4c:39:02:a8:69:c6:c9:1b:58:15:16:ff:74:11:
2d:08:c0:dd:86:e6:2b:cb:a5:28:72:91:19:5d:67:3e:fe:83:
d0:66:ca:6a:3c:8f:d5:a8:c5:d3:a9:eb:cb:c8:09:c9:56:5e:
a5:ad:7c:92:9c:5c:73:a9:af:27:41:fe:9d:8c:29:14:a4:9d:
e9:12:c5:28:2b:d2:ae:9f:f0:6c:61:c7:45:89:4f:ad:e4:91:
df:81:0f:c8:a4:6b:7f:6c:80:21:f9:3f:90:97:07:5c:09:0a:
e8:af:96:08:2b:80:34:d6:38:c3:2b:66:b2:1d:b9:d2:fc:74:
fb:00:b9:2d:ca:ef:d8:03:b6:6b:ef:6e:76:16:93:71:47:cf:
2b:28:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:36 2024 by rpki-client on console-ams.rpki-client.org