Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/jxVqkTd_Y-0BmXMgUIUd0nhaPA0.roa
File: jxVqkTd_Y-0BmXMgUIUd0nhaPA0.roa (raw, json)
Hash identifier: oToRyyXEjUe2YHUSueV2Du2dUBdPLVjwcqWw9B2WSIE=
Subject key identifier: 8F:15:6A:91:37:7F:63:ED:01:99:73:20:50:85:1D:D2:78:5A:3C:0D
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 018CC500DD5F429952B727428393A09902EE
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/jxVqkTd_Y-0BmXMgUIUd0nhaPA0.roa
Signing time: Mon 01 Jan 2024 12:30:17 +0000
ROA not before: Mon 01 Jan 2024 12:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209980
IP address blocks: 193.220.160.0/24 maxlen: 24
193.220.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:dd:5f:42:99:52:b7:27:42:83:93:a0:99:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Jan 1 12:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f156a91377f63ed0199732050851dd2785a3c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:21:d2:d2:1d:ac:b3:e5:2c:6b:c9:08:ea:
6f:da:2a:38:b6:45:38:ea:95:49:dd:5f:52:02:f4:
34:27:d8:06:4d:57:56:bb:c9:96:85:73:3a:09:93:
1c:da:69:5f:46:68:fa:45:eb:a6:4c:19:ac:3f:cc:
e3:aa:be:56:3f:ae:00:7c:a1:73:bc:15:f1:63:42:
c1:4a:d2:84:1e:a5:9a:d9:26:a3:e9:49:43:24:0b:
b2:03:67:20:d7:f0:ad:58:bd:95:7b:96:25:75:76:
17:5c:ae:13:28:ff:55:fe:05:27:93:75:18:1e:dd:
5d:db:8c:10:b6:ac:0a:61:ce:09:e4:af:1b:b7:ea:
46:ad:d7:bf:c3:ba:2e:d8:0f:ef:88:80:5c:b7:34:
92:98:87:d2:03:98:7d:04:09:f2:40:21:90:5b:6a:
32:88:41:04:4a:13:01:3f:9b:94:aa:c1:d5:3e:45:
67:d9:c4:1c:20:ab:94:3a:d6:7d:86:01:2f:59:a0:
a7:92:37:b9:1c:87:a7:50:c5:df:c2:b6:76:9e:54:
3f:44:5c:ed:b5:1e:17:9a:e3:f3:7c:8f:04:4c:ab:
8a:73:ae:3b:65:6f:47:11:02:38:42:66:b3:bc:9d:
53:9d:42:50:b8:3e:99:23:17:ce:d4:bf:2c:e0:c7:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:6A:91:37:7F:63:ED:01:99:73:20:50:85:1D:D2:78:5A:3C:0D
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/jxVqkTd_Y-0BmXMgUIUd0nhaPA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.220.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:6b:89:22:6f:8b:54:9e:62:6b:52:de:d1:69:d5:21:bd:49:
cb:02:e8:f2:23:a1:da:b2:a7:a5:60:ba:13:11:9b:35:f0:ad:
9e:f9:48:7c:8c:ef:ac:16:a6:39:ce:07:d7:96:55:6a:8e:af:
08:08:16:cc:f4:e3:e6:c9:a4:bc:2d:69:15:79:28:52:58:6e:
5f:1c:57:23:24:0a:05:b0:d9:31:d1:6a:c0:45:74:72:6e:5f:
69:ee:05:fd:98:4e:b7:62:60:a9:02:90:d7:e2:7d:e6:ec:d3:
e3:3b:70:d4:59:43:c7:d2:41:ac:7d:5a:3b:25:54:05:7f:3d:
a2:15:52:45:18:34:cf:82:90:2b:a7:89:94:3f:ad:f3:63:7b:
17:5a:97:b9:20:ef:b4:76:e1:4e:ef:d0:32:58:83:9d:fc:d9:
b7:4d:44:f6:f0:c6:37:99:9f:8f:26:5b:81:69:75:d7:06:64:
d4:d4:88:4f:05:d1:3f:31:f0:d1:bf:81:ac:17:75:70:67:a0:
a4:25:75:4d:cd:6b:b7:0e:1d:0d:13:a7:bc:64:92:72:51:4a:
53:be:40:75:27:24:ee:a4:fe:54:67:51:cf:e0:05:d5:29:ef:
60:80:ca:8d:d7:56:b9:3c:12:a1:e8:3a:46:b7:46:79:b5:48:
55:0d:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:12 2024 by rpki-client on console-ams.rpki-client.org