Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jeyAC0CpHiWJa04p6N5JarwW4G0.roa
File: jeyAC0CpHiWJa04p6N5JarwW4G0.roa (raw, json)
Hash identifier: GVeRLAbFXI7JFgTNHZj4CWpZ7SBhN62PHc8tXdWwJLA=
Subject key identifier: 8D:EC:80:0B:40:A9:1E:25:89:6B:4E:29:E8:DE:49:6A:BC:16:E0:6D
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC794567EEB67EAA0605DF6FB09CFD953
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jeyAC0CpHiWJa04p6N5JarwW4G0.roa
Signing time: Tue 02 Jan 2024 00:30:36 +0000
ROA not before: Tue 02 Jan 2024 00:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202251
IP address blocks: 2.188.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:56:7e:eb:67:ea:a0:60:5d:f6:fb:09:cf:d9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dec800b40a91e25896b4e29e8de496abc16e06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:00:ee:af:e0:8a:da:98:23:25:df:a9:db:
f2:32:72:68:5a:a3:56:6f:35:bc:81:46:c7:fe:27:
6c:e7:fd:be:29:c7:e9:6c:55:d4:15:03:09:01:d7:
0b:1c:31:9d:ec:ca:84:75:af:bc:ef:40:38:7e:0d:
50:63:76:b6:29:18:55:8c:91:7e:5d:79:f7:7f:25:
5c:ed:39:f8:33:b7:cb:d7:36:1c:c7:91:7c:b5:70:
3c:0c:6b:2b:de:48:f2:e7:01:60:96:a9:10:cc:41:
09:d8:c1:54:d9:b8:3c:0e:7f:04:e3:07:a3:9f:80:
ee:0a:cd:b3:a8:6d:3b:7f:09:48:f7:72:e7:17:73:
c2:80:5e:ae:fc:2b:6d:bd:e3:0e:a4:02:2f:65:c3:
3e:a3:5d:f6:1a:34:35:26:60:3b:84:b1:7b:93:ef:
9b:18:8f:c9:35:f8:61:34:8f:2f:60:80:74:67:98:
ab:11:7f:b0:61:ef:3a:9e:4f:0e:e5:91:2e:2a:99:
07:bc:7f:f3:51:30:16:e5:54:a5:39:70:86:be:02:
2d:04:d9:8e:66:66:48:42:dc:16:dc:d9:b9:30:6e:
47:ce:80:45:b7:6b:2d:2b:cf:c7:20:6e:a5:16:e9:
77:ae:67:8d:7c:2c:01:a4:2d:74:33:92:6d:02:ba:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:80:0B:40:A9:1E:25:89:6B:4E:29:E8:DE:49:6A:BC:16:E0:6D
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jeyAC0CpHiWJa04p6N5JarwW4G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:d8:df:37:8e:9e:95:21:35:7e:61:da:7e:05:07:38:57:07:
29:de:83:e8:77:a6:cf:91:3d:00:91:4c:90:49:f9:73:6e:36:
f9:6f:fd:74:0f:eb:f0:55:ad:82:0d:ad:fa:67:4e:49:a4:be:
7a:5e:78:6e:7f:24:64:a7:9d:b5:90:74:ff:96:83:1e:0b:59:
6f:9f:93:0e:ed:4b:b6:74:7d:5e:6b:45:4f:c4:59:57:ab:e8:
82:10:f5:1b:e0:b0:25:83:2a:21:05:b6:8d:20:1e:6e:c1:8b:
28:ea:f8:6d:01:9e:93:26:fb:b3:60:71:9e:b5:cc:39:ca:72:
f1:8f:f1:1a:1b:42:a7:c0:fe:c7:21:ed:a3:8c:3d:06:5e:59:
d0:e2:b4:ca:1f:e4:dd:dd:5f:2a:89:a7:f5:fc:cd:db:d3:92:
ff:c1:6e:cf:24:53:e2:31:82:48:8f:18:5a:bf:07:87:57:ce:
c5:5d:45:b9:93:e7:5c:9a:b1:ad:77:97:89:97:8d:d5:08:73:
5f:b1:8d:88:28:e2:62:e6:fc:0a:4f:c8:cb:06:af:d9:8e:cb:
99:23:71:0a:5d:6b:9d:9f:fc:10:59:f1:38:4f:c2:87:2f:83:
2d:51:67:32:78:de:82:90:2d:e7:e3:c0:c9:8f:12:93:3e:3f:
e5:c1:84:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:20:37 2024 by rpki-client on console-ams.rpki-client.org