Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JrK8EenUZI4omjTZSbt1KjzncoY.roa
File: JrK8EenUZI4omjTZSbt1KjzncoY.roa (raw, json)
Hash identifier: fkrX3sW1FvCHPx/yTZuJmOePP3XnR36pVo7VWQqz2IQ=
Subject key identifier: 26:B2:BC:11:E9:D4:64:8E:28:9A:34:D9:49:BB:75:2A:3C:E7:72:86
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 018CC62A1F20175DB135A773CD133DB9E5CD
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JrK8EenUZI4omjTZSbt1KjzncoY.roa
Signing time: Mon 01 Jan 2024 17:54:58 +0000
ROA not before: Mon 01 Jan 2024 17:54:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213388
IP address blocks: 2a09:be43::/32 maxlen: 48
2a09:be47::/32 maxlen: 48
2a09:be45::/32 maxlen: 48
2a09:be41::/32 maxlen: 48
2a09:be44::/32 maxlen: 48
2a12:49c0::/29 maxlen: 48
2a09:be42::/32 maxlen: 48
2a09:be46::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:2a:1f:20:17:5d:b1:35:a7:73:cd:13:3d:b9:e5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jan 1 17:54:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26b2bc11e9d4648e289a34d949bb752a3ce77286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:0c:44:4e:12:c7:5e:a0:81:49:ae:29:8a:
d5:79:5e:6f:f0:50:00:f2:d2:08:17:43:e7:c8:17:
2e:eb:e8:77:44:21:36:16:3c:dd:20:62:47:cf:fa:
30:99:17:0b:d4:dc:4e:a6:75:f9:c8:14:51:67:df:
cb:04:d4:b3:e5:7d:ad:de:fa:7e:6b:a0:a6:2e:71:
9e:20:2b:68:e8:73:8b:46:2b:9c:69:79:72:49:ee:
46:09:d7:e1:62:8a:91:17:4a:5b:71:1f:83:c2:60:
05:17:7b:f3:cd:94:a7:9e:7a:3a:a5:cc:c2:8f:cc:
be:17:71:84:0d:64:32:1b:56:55:59:e3:2b:04:c9:
80:e4:ad:7b:14:d1:16:5c:58:fa:79:94:ed:3e:4a:
57:2a:da:06:6b:a8:cc:90:27:ea:72:55:d6:ef:41:
20:aa:99:20:28:7e:88:2d:46:3e:25:0d:13:a1:e9:
36:99:b6:73:b5:85:5f:a1:9f:a0:df:02:7d:2e:78:
73:ab:5f:b2:6b:2a:a9:a5:10:90:b9:f8:d7:bf:e1:
9a:25:97:c7:d4:dc:f9:e8:d8:a7:32:d2:69:2d:74:
80:ab:ce:df:ae:f5:2b:ce:da:63:29:cc:00:95:03:
d5:cb:7c:f3:36:37:76:a9:9f:ca:ab:c9:9d:e7:a8:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:BC:11:E9:D4:64:8E:28:9A:34:D9:49:BB:75:2A:3C:E7:72:86
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JrK8EenUZI4omjTZSbt1KjzncoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff
2a12:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:1f:f3:59:48:6e:3e:2c:f5:f9:24:ce:e8:68:04:10:0c:6a:
13:29:fc:9e:06:ff:1d:77:d0:ad:01:d8:3a:3b:1b:7d:53:fe:
8d:e1:8e:18:2f:46:7f:b1:92:e3:51:8a:be:4b:49:8c:1b:11:
8f:16:2f:55:12:28:7f:3a:23:d3:36:54:96:84:d7:5d:af:6b:
95:0c:d3:e7:3a:a8:8c:cf:bf:88:03:31:0d:8d:3d:68:bd:bf:
c9:d0:e6:6b:5b:a6:8a:16:ff:4b:95:fb:b1:60:ed:20:68:d7:
d5:4f:d8:29:4a:22:4d:67:f1:35:96:fb:7a:02:e9:3a:73:20:
9d:d6:eb:9b:48:b6:a3:7a:19:6e:0b:82:b6:70:20:77:6a:54:
9e:7b:96:bf:c8:05:90:5f:dd:46:f4:ff:3d:19:f9:c7:8e:90:
12:2f:75:7f:68:93:db:fb:10:a0:a9:64:4e:68:bf:27:19:f4:
35:f1:5d:4f:45:73:df:25:80:4f:79:ac:5e:fe:04:34:10:fe:
96:27:47:c7:45:72:d6:11:ef:5f:c6:bd:38:26:2b:91:f9:4a:
00:9e:30:e2:12:7b:62:ef:54:35:52:69:f0:f5:59:07:79:17:
ff:0d:3c:38:5b:9f:f1:23:30:df:35:91:5d:10:27:1e:18:55:
1a:29:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:10:54 2024 by rpki-client on console-fra.rpki-client.org