Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RJKyIEtxquaJUHm11pA_wor7PXM.roa
File: RJKyIEtxquaJUHm11pA_wor7PXM.roa (raw, json)
Hash identifier: kR8fNjctcm5A6zrzBOHjjgMYBZ0N7bSQkuLWV8NlwNc=
Subject key identifier: 44:92:B2:20:4B:71:AA:E6:89:50:79:B5:D6:90:3F:C2:8A:FB:3D:73
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5013BD83C1FF42E7ED0D12EDEEE642A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RJKyIEtxquaJUHm11pA_wor7PXM.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 88.216.133.0/24 maxlen: 24
84.32.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3b:d8:3c:1f:f4:2e:7e:d0:d1:2e:de:ee:64:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4492b2204b71aae6895079b5d6903fc28afb3d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:2d:07:21:be:b8:9a:4e:77:57:ab:a0:15:
67:95:9f:91:cb:d8:53:e5:5f:27:a6:87:cc:ef:cc:
3b:64:4c:99:da:77:ae:ed:91:e8:74:47:3f:4f:ef:
63:16:f0:d4:2e:bf:cc:69:3e:0a:c8:26:4f:e6:d5:
18:b9:9d:b7:ef:ea:79:4c:82:72:ec:dc:16:e5:ec:
76:f2:d0:76:61:30:5b:24:ae:c9:04:5d:50:82:59:
25:3c:b4:3f:a5:a6:ba:ea:d0:1f:1a:87:4a:9c:73:
27:ef:b1:22:fa:20:31:bc:b6:15:a8:51:80:0a:a4:
c6:52:97:19:5d:f7:8d:20:5d:1b:de:57:5b:f4:7d:
1b:fa:fd:cf:b5:de:75:bf:a9:17:c8:ab:2d:c3:05:
da:4a:d9:94:ac:48:04:1c:8f:62:d9:81:ee:b7:43:
51:04:29:06:4b:bf:ff:b8:26:88:1c:4a:f0:61:90:
4e:34:6a:16:9e:20:5a:bd:f3:13:b2:e8:a6:01:45:
86:20:4b:d1:5a:63:46:b6:e4:32:d0:5c:73:65:7f:
32:76:7d:52:bc:96:65:bd:50:dd:7b:20:3a:26:f6:
cb:78:66:5a:10:90:74:86:03:53:6a:ee:16:2f:4c:
f0:bd:8b:b9:58:b1:87:ba:20:21:f6:1f:dc:3a:6d:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:B2:20:4B:71:AA:E6:89:50:79:B5:D6:90:3F:C2:8A:FB:3D:73
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RJKyIEtxquaJUHm11pA_wor7PXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
88.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2b:60:d0:e2:a7:cb:06:8b:b1:af:f2:7c:0d:bf:7e:b0:a8:
7c:fd:a1:2e:d2:e4:79:8b:51:3f:4f:36:5b:da:09:e2:08:d8:
b5:3c:40:f3:26:3a:00:8c:50:bb:92:74:61:17:32:1d:1c:ca:
39:0b:36:7e:22:b9:54:2e:79:65:ac:5d:a5:b0:26:eb:96:18:
11:6e:9d:ed:a9:21:40:14:48:58:12:16:e6:03:63:e2:f1:1b:
9a:2d:94:56:8f:bd:b5:6e:2a:4d:12:74:b2:7f:a1:26:7f:e6:
25:a4:2a:f6:91:a0:87:0f:24:06:26:b1:ac:b4:26:7d:75:4c:
fa:08:22:d3:dd:a8:7a:67:d7:9e:f3:ec:82:31:28:cf:a1:4e:
2a:5a:d5:2a:03:c9:07:50:2e:97:e7:17:bc:13:44:a5:6b:e4:
3b:ed:ad:ff:c9:de:0e:bf:c7:cd:dd:4a:c4:e7:1c:e0:bb:da:
6f:57:20:b9:93:56:a9:60:aa:cb:a8:1e:f1:b5:1d:af:c5:d2:
72:da:96:48:d1:59:9f:b4:5a:4f:a9:9e:2b:52:22:d0:74:48:
a8:a3:42:cd:9b:69:c3:11:b2:58:34:b1:98:fc:75:fe:7c:4e:
7b:99:23:da:de:30:ab:a7:1a:c4:3f:4d:76:d3:79:b2:27:06:
a2:03:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:37:56 2024 by rpki-client on console-ams.rpki-client.org