Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/jc1KLHw7atZ0xZSnrLqLzF_JwKg.roa
File: jc1KLHw7atZ0xZSnrLqLzF_JwKg.roa (raw, json)
Hash identifier: o0lUYf09k14cg0xOSln/N0PQQ6wtB8ilMvwb5d52R/s=
Subject key identifier: 8D:CD:4A:2C:7C:3B:6A:D6:74:C5:94:A7:AC:BA:8B:CC:5F:C9:C0:A8
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 018CC2DAB3BAE5BE552EEC1DB314A207D947
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/jc1KLHw7atZ0xZSnrLqLzF_JwKg.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51075
IP address blocks: 193.168.219.0/24 maxlen: 24
2a10:f7c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b3:ba:e5:be:55:2e:ec:1d:b3:14:a2:07:d9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dcd4a2c7c3b6ad674c594a7acba8bcc5fc9c0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:69:02:4c:65:cf:08:4d:f1:42:9d:f8:47:
16:a2:d3:3f:59:2c:ef:2d:98:7a:08:4a:c0:c4:78:
28:83:b8:b6:4b:ec:ae:84:6e:93:4a:6f:cb:63:2f:
b4:f3:26:03:a5:3e:9c:0f:18:89:44:1c:ed:01:8b:
84:e0:2c:62:15:1a:7d:56:49:0b:02:7a:de:aa:fd:
a0:b7:59:21:00:2b:47:de:4a:fe:2c:94:3c:22:29:
84:74:91:f9:a8:07:87:0e:2c:0c:db:52:39:13:15:
42:64:75:be:59:75:3d:fc:85:41:b8:3f:2a:da:a4:
35:c3:2c:69:3e:a3:fc:26:27:2f:f0:ac:4f:eb:e4:
c0:04:4a:78:c8:79:7f:42:e0:59:6f:39:a3:a5:24:
2b:32:c6:40:60:73:68:e0:b9:22:d6:b0:3f:7f:4c:
64:3e:de:67:c2:93:00:b1:cb:f0:6a:65:9c:6e:95:
57:89:a6:ee:00:ab:f7:a0:18:8c:b1:db:05:7e:78:
53:63:1f:c3:f9:cb:3f:aa:60:7b:cc:b9:24:24:44:
eb:dd:86:f7:56:1a:9b:9d:ec:61:6a:b2:ec:81:cc:
f6:0b:ac:6d:df:07:57:cb:d0:65:f0:c6:ea:34:bb:
75:6a:07:3a:de:c0:d3:e9:1c:5c:18:e7:dd:2d:f7:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CD:4A:2C:7C:3B:6A:D6:74:C5:94:A7:AC:BA:8B:CC:5F:C9:C0:A8
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/jc1KLHw7atZ0xZSnrLqLzF_JwKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.219.0/24
IPv6:
2a10:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:6a:06:00:72:05:4b:fd:2d:38:37:89:30:37:3f:66:30:a0:
b9:cb:05:fb:21:d4:0a:74:c0:24:e1:cf:d2:81:48:8d:f1:9d:
0c:e5:0f:ba:ae:41:93:bc:e0:c6:84:c7:bc:ae:af:68:40:c9:
8d:1d:39:48:61:e5:57:2e:08:35:90:2f:e1:65:31:e2:38:ba:
5e:26:b5:e6:13:b8:e0:3f:ec:f1:5b:6d:e8:1f:cb:da:97:9f:
d2:b3:29:dc:f8:4b:0a:c5:33:59:78:ef:fb:80:33:9e:4a:31:
f4:7c:87:51:dd:8d:b9:ed:6e:75:3c:34:c9:e4:33:ac:31:3e:
30:a1:b4:90:4b:02:64:10:f1:60:5e:0b:c4:6c:22:e1:4e:7f:
f2:c7:39:04:e0:6f:3e:0a:53:94:2f:da:b7:6c:07:5c:ba:6d:
78:1e:4f:af:2b:b7:dc:af:78:13:0d:d8:c8:d5:dc:5c:e5:e9:
b9:db:86:76:85:fb:68:b2:71:5c:5d:c0:1d:b4:d1:cd:95:ea:
3f:35:7a:df:c9:3f:de:1c:eb:af:06:23:d0:02:07:6a:f2:3d:
c4:dd:6c:ad:38:6f:96:80:48:44:59:37:b9:77:53:ce:21:78:
bc:af:08:cc:6a:68:4c:24:81:f8:30:f4:e8:44:95:ce:62:6b:
c1:9d:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:24:34 2024 by rpki-client on console-ams.rpki-client.org