Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/jbTacOWHv2y8BsdApy8lFdHVmSc.roa
File: jbTacOWHv2y8BsdApy8lFdHVmSc.roa (raw, json)
Hash identifier: wVv38r6D8/w7PC8m4piQHXjISmaJJaRwCZsZNPKcVXU=
Subject key identifier: 8D:B4:DA:70:E5:87:BF:6C:BC:06:C7:40:A7:2F:25:15:D1:D5:99:27
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 018CC5DC76D2171A8941F401BB4F267C9AC7
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/jbTacOWHv2y8BsdApy8lFdHVmSc.roa
Signing time: Mon 01 Jan 2024 16:30:08 +0000
ROA not before: Mon 01 Jan 2024 16:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200380
IP address blocks: 5.102.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:76:d2:17:1a:89:41:f4:01:bb:4f:26:7c:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 16:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8db4da70e587bf6cbc06c740a72f2515d1d59927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:d3:fc:65:fd:a4:53:d0:6f:27:8c:6b:6d:
39:b9:59:82:ce:96:27:21:8e:dc:9b:67:8d:9f:37:
52:16:10:26:83:67:6d:44:1b:1a:26:b6:0a:4b:b3:
8a:9e:4d:77:6a:9e:71:49:cb:22:8d:cf:32:a2:22:
25:ec:43:27:8a:b2:87:8f:05:99:7e:8e:61:5b:e7:
5a:bf:f6:88:00:27:ea:48:a4:e6:28:53:a0:9c:cf:
ee:8d:40:65:3d:0e:d9:b8:52:1a:14:22:be:91:1c:
9c:ee:a6:30:c4:cc:59:d1:a5:77:f1:b7:02:94:9b:
ea:36:63:67:6d:71:38:71:a2:f5:20:17:94:94:c9:
83:3c:9f:42:13:cc:a4:e2:7c:b2:bf:c7:e3:fd:b2:
4a:af:0e:45:2d:03:f6:70:0d:02:dd:22:fc:f0:03:
fb:41:86:92:69:7d:bc:b4:53:5d:6f:bf:7f:0f:d7:
94:16:f5:f2:f8:86:ef:41:33:11:83:fc:23:3e:71:
b4:00:6b:b8:d0:21:33:df:04:1b:08:92:b4:2d:8b:
e2:c4:94:fe:fe:c5:64:2f:ab:d8:38:7c:06:ec:57:
5b:b4:81:61:25:a2:96:7a:52:55:49:58:b9:d5:1e:
39:bf:32:fa:a0:76:bf:8a:80:4b:c9:94:cf:39:5d:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:DA:70:E5:87:BF:6C:BC:06:C7:40:A7:2F:25:15:D1:D5:99:27
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/jbTacOWHv2y8BsdApy8lFdHVmSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a2:ee:08:37:ca:36:0a:cc:a5:e8:60:7b:69:61:08:0d:e5:
b3:97:01:a7:13:1a:09:bb:3a:42:22:6f:f6:66:d6:95:d2:de:
64:49:38:22:4a:26:55:a0:07:61:78:cb:17:4a:73:79:1c:c4:
24:d1:59:5c:24:11:2a:b8:8a:bf:29:ce:01:d6:d7:5e:90:98:
19:6e:67:8b:98:fb:27:57:03:61:17:5c:39:a2:8b:ec:1c:e7:
c7:1a:16:d4:c2:a0:19:5d:58:c3:d6:52:87:1a:12:5b:21:a3:
07:3d:13:47:b0:bd:1d:be:ca:47:ac:ad:7a:40:38:5b:3c:5b:
24:7b:89:51:eb:cf:a4:d9:d9:2b:9b:34:03:3b:4a:97:23:05:
25:18:9e:27:82:3f:72:e8:36:62:ab:f8:14:00:d9:c3:6c:8b:
b2:cb:4e:10:8f:f9:4c:43:86:5b:e7:0f:77:d0:b7:dc:76:c3:
f6:44:08:d1:6d:95:9f:e0:9c:d5:ad:c9:36:1a:f6:18:70:4e:
40:c7:c1:11:f2:ef:47:83:55:a9:6b:e8:c8:36:8a:33:e9:bb:
a5:2d:5d:79:6b:b8:1c:73:25:24:1b:0f:67:53:e2:40:5b:06:
b6:9b:e3:23:d9:8f:7a:cd:5d:46:5d:36:c2:2f:20:9a:e4:c3:
75:45:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:53:48 2024 by rpki-client on console-ams.rpki-client.org