Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/jNAfboDbP0ygxrCIK_xOXYa9Mwo.roa
File: jNAfboDbP0ygxrCIK_xOXYa9Mwo.roa (raw, json)
Hash identifier: Nyx/piSBf2SYKQ6xX1ijxZmLyl/7qrCxb6wSZlTYcXY=
Subject key identifier: 8C:D0:1F:6E:80:DB:3F:4C:A0:C6:B0:88:2B:FC:4E:5D:86:BD:33:0A
Certificate issuer: /CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Certificate serial: 018CC5008EE52D85E4AA290BDBAF24D0916B
Authority key identifier: 52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/jNAfboDbP0ygxrCIK_xOXYa9Mwo.roa
Signing time: Mon 01 Jan 2024 12:29:57 +0000
ROA not before: Mon 01 Jan 2024 12:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60200
IP address blocks: 185.34.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8e:e5:2d:85:e4:aa:29:0b:db:af:24:d0:91:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Validity
Not Before: Jan 1 12:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cd01f6e80db3f4ca0c6b0882bfc4e5d86bd330a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:e1:b5:4e:36:c4:1e:8b:db:2c:eb:b6:cb:
68:5d:98:02:36:fe:6d:21:a4:27:5a:13:75:93:cc:
7e:09:d1:08:58:4e:9a:ac:ff:9e:43:6e:65:00:12:
7d:06:c2:95:cf:e3:bd:13:78:d6:a3:af:98:60:9e:
b4:89:ed:af:3e:6e:98:89:6b:c4:06:58:db:36:39:
1f:07:43:52:b9:6b:f7:73:19:9e:1c:a9:70:26:a4:
2a:eb:85:70:ab:ce:b5:fc:44:d5:47:b9:d0:d2:5e:
1f:7a:c8:90:a1:9f:65:35:95:04:bf:60:5c:fd:77:
18:9c:3d:45:4b:64:0f:34:2b:3e:cd:e5:3b:7f:84:
c9:d5:7b:04:13:a4:d6:d0:6d:7d:3c:fc:51:45:c1:
88:06:59:12:a3:6d:e6:42:59:df:9f:ff:59:ad:d5:
9e:0b:79:85:be:85:d3:83:9f:07:b2:1f:e8:95:c0:
d8:c5:97:cb:8c:46:7f:8b:4d:9c:c9:0b:72:f4:2b:
34:5a:b7:df:e4:f9:b6:7e:5a:ff:6e:e2:46:f3:d8:
e0:cc:c0:a0:8a:06:6c:28:8e:27:35:2a:b2:29:35:
e6:6b:8e:17:de:37:c2:4e:31:36:dd:f2:69:b8:14:
9c:85:71:57:e7:1b:f3:96:7c:1c:57:f2:34:9d:d4:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:1F:6E:80:DB:3F:4C:A0:C6:B0:88:2B:FC:4E:5D:86:BD:33:0A
X509v3 Authority Key Identifier:
keyid:52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/jNAfboDbP0ygxrCIK_xOXYa9Mwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.172.0/22
Signature Algorithm: sha256WithRSAEncryption
45:0b:04:84:b0:70:39:da:ac:59:d6:55:7c:b3:e4:63:e3:70:
de:ca:ed:15:48:7e:ea:58:fa:1c:80:b9:0d:35:92:ae:2b:96:
5f:67:49:1c:cd:61:90:06:91:f4:60:b6:b7:e8:75:5d:c2:64:
c1:18:25:6c:15:3a:d2:47:aa:3b:63:34:3f:65:05:d2:c0:53:
96:a7:b7:ba:e2:31:be:c7:ac:fc:57:53:a8:5b:6d:d6:b5:16:
52:fa:fa:e3:03:cf:3f:66:5c:27:86:bb:d8:f2:13:ba:6d:c2:
d3:40:ba:88:9e:b5:66:94:5c:b6:af:4c:f2:ac:40:59:c3:33:
08:42:53:aa:73:58:29:6c:6f:5a:96:16:eb:a5:e7:b0:81:04:
53:53:cd:0b:ba:b9:20:33:2e:cb:2e:62:5d:56:1a:2b:b8:85:
61:66:73:de:39:fa:ee:7c:f2:66:8e:6e:93:4c:69:c5:8c:42:
ff:14:6e:b6:95:14:e4:4d:19:b1:a3:a0:49:11:c5:a4:ed:cf:
18:5c:da:37:3b:39:39:ab:2f:a8:fd:92:ed:7e:c5:8f:1b:ea:
33:54:f4:f2:59:ca:98:23:ca:1c:f5:75:4c:0f:4e:bf:de:13:
c9:26:f2:be:da:61:8d:25:7f:5c:87:5b:62:25:8f:77:72:63:
03:99:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:47:10 2024 by rpki-client on console-ams.rpki-client.org