Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/JzIZXhfxVQMj43sffRISGF89-rI.roa
File: JzIZXhfxVQMj43sffRISGF89-rI.roa (raw, json)
Hash identifier: sIytdiwFoZZcBKt9ifZjyNU7WZhM68cQ7z/HTiRRiOA=
Subject key identifier: 27:32:19:5E:17:F1:55:03:23:E3:7B:1F:7D:12:12:18:5F:3D:FA:B2
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0192AEC546416AB473B7E9D06CB551E181A8
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/JzIZXhfxVQMj43sffRISGF89-rI.roa
Signing time: Mon 21 Oct 2024 11:10:17 +0000
ROA not before: Mon 21 Oct 2024 11:10:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 109.122.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:c5:46:41:6a:b4:73:b7:e9:d0:6c:b5:51:e1:81:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 21 11:10:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2732195e17f1550323e37b1f7d1212185f3dfab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:fd:6e:3c:e6:a4:bb:13:16:36:8a:94:df:
13:9f:4d:55:dd:36:6a:76:61:49:f6:41:5b:4f:d2:
8f:6b:22:0e:1a:e4:be:06:8f:0d:2c:ac:0a:f2:00:
ce:92:cb:2c:3b:d3:75:ad:e4:53:37:67:44:b4:04:
c7:b5:40:87:4c:86:87:44:15:58:d3:2e:a8:64:3d:
47:27:cd:20:84:79:8f:f1:57:dc:62:94:80:2e:a9:
eb:b2:ba:f6:9b:da:70:1b:e8:6a:44:22:df:ad:a0:
9b:c0:98:97:3a:06:8b:b2:95:cc:bc:ed:b9:45:0f:
ff:d6:77:58:93:81:47:be:2e:2e:5f:a7:da:3a:b6:
fc:e3:e2:1c:49:e8:65:96:2e:19:85:e7:f6:a5:8a:
ad:23:f9:8c:c9:79:24:8b:de:82:a0:bf:e0:e4:aa:
f8:30:81:d0:6b:c8:f7:5a:3c:48:ca:f4:24:ec:3b:
f9:e1:b6:96:bb:25:11:e6:02:f4:7a:91:c4:c9:c2:
01:63:9d:ec:46:fe:24:54:22:b8:46:37:ff:05:b0:
9f:14:62:75:7d:44:77:72:20:dd:fd:38:b8:40:02:
94:f6:dd:98:fe:2f:47:50:5c:56:87:91:55:2a:33:
af:8d:a0:81:5e:0e:e9:0a:cc:b4:69:e0:1b:26:cf:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:32:19:5E:17:F1:55:03:23:E3:7B:1F:7D:12:12:18:5F:3D:FA:B2
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/JzIZXhfxVQMj43sffRISGF89-rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0/20
Signature Algorithm: sha256WithRSAEncryption
64:4c:06:8e:fd:6b:c9:98:05:0a:45:7d:84:04:07:45:d5:92:
bc:71:b9:41:1e:69:4c:d0:c8:be:99:a1:9f:24:b5:6e:f8:c7:
23:53:54:c9:94:e9:20:aa:cb:0b:92:98:e7:e2:dd:2f:20:82:
9f:3c:77:2d:22:bb:c8:f7:e6:c8:dc:6a:49:80:6b:7a:ae:16:
14:3d:97:10:37:39:39:97:89:dc:f5:ff:2e:a9:7e:71:a4:3a:
57:6a:bc:d9:64:ad:36:36:69:e6:fd:32:a3:11:5c:5d:17:4b:
5c:a3:94:aa:f2:2c:99:1a:6f:af:7d:b6:28:b8:62:b1:e5:b4:
bb:ea:5b:89:e0:ef:3c:b2:0c:b7:da:c3:8a:47:40:9a:47:0e:
b6:b1:7c:25:d9:ac:f4:a0:1d:63:c4:65:57:20:67:1c:b9:bb:
d7:49:96:3d:18:e9:82:12:54:22:12:53:ab:f5:24:fa:65:ec:
2d:16:b2:da:eb:39:28:c0:50:21:cc:7d:a5:cb:28:8f:cb:b3:
a7:6e:e6:b9:fa:bc:fb:e3:88:31:87:82:a6:8d:9e:5a:c9:ab:
92:b9:25:9c:88:f7:e6:f8:5c:fc:23:93:ee:f9:67:d5:7a:e2:
b7:96:c9:d5:f0:10:b0:51:9a:82:a5:41:dc:6e:b6:e1:9f:52:
46:8a:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:04:48 2024 by rpki-client on console-ams.rpki-client.org