Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/JZ_FozYS2VyPtXAjoziYBmcRKKI.roa
File: JZ_FozYS2VyPtXAjoziYBmcRKKI.roa (raw, json)
Hash identifier: I6IxX+2ncpe3K/ksn5JNNWZiw7MeTVOkJ+Zor2udrEQ=
Subject key identifier: 25:9F:C5:A3:36:12:D9:5C:8F:B5:70:23:A3:38:98:06:67:11:28:A2
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018CC8DF33F503DDBF71D4F73504DBEFD066
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/JZ_FozYS2VyPtXAjoziYBmcRKKI.roa
Signing time: Tue 02 Jan 2024 06:32:00 +0000
ROA not before: Tue 02 Jan 2024 06:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208465
IP address blocks: 147.234.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:33:f5:03:dd:bf:71:d4:f7:35:04:db:ef:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 06:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=259fc5a33612d95c8fb57023a3389806671128a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:3c:db:a8:99:2e:e2:4c:14:26:a7:18:8d:
8c:eb:72:e8:a9:0a:6d:23:df:cb:bd:a9:0b:6e:24:
7b:de:20:02:70:0a:94:e9:bd:f6:eb:dc:09:5d:e7:
62:35:ea:56:dc:79:af:ca:59:2d:21:58:2c:79:3f:
d7:c2:0d:79:96:22:e1:af:40:77:fe:de:4d:7b:bb:
f0:69:4e:b7:5b:58:b1:74:ef:dd:4a:0c:b8:14:83:
c9:03:22:48:63:5f:db:a2:75:b1:82:38:a6:fd:6f:
db:b8:6b:e0:21:8b:85:17:44:15:70:1d:20:98:f4:
6c:23:ef:6d:2a:e2:5d:92:15:b8:2b:84:5b:a1:04:
57:6b:16:4e:5c:d1:51:8c:c2:3c:12:07:88:0b:aa:
54:e7:3a:66:ed:0f:58:4f:3a:71:d3:d4:c9:f0:e2:
2f:4d:1f:62:a5:79:48:2a:58:e3:14:9b:6d:ea:e4:
66:4e:bb:9e:15:df:51:33:24:a2:5c:7f:92:ca:f8:
12:70:c4:c9:b7:3e:ee:b8:7e:5d:b3:1f:84:d8:e3:
c3:7a:5a:4f:ac:93:c2:6d:7e:e2:9f:ff:60:25:dd:
78:29:0a:73:e3:ea:d2:61:bb:42:60:2f:2d:e3:fd:
18:b3:63:5a:cb:27:a7:59:12:08:52:02:d0:4a:d3:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9F:C5:A3:36:12:D9:5C:8F:B5:70:23:A3:38:98:06:67:11:28:A2
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/JZ_FozYS2VyPtXAjoziYBmcRKKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.29.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:26:9e:c1:ce:e3:f5:50:67:f4:31:b7:e3:7d:17:8e:2d:44:
b8:72:44:b7:13:bb:9d:f3:0f:07:f8:9a:1b:21:a9:19:a3:13:
ba:0d:7b:da:d6:4c:d6:71:2b:f0:e4:f1:6c:d9:b2:60:16:8a:
68:f6:5d:64:e8:63:a3:ab:b5:84:bf:51:cd:8e:9d:b0:ae:65:
d9:2e:46:ad:f1:8f:21:cd:0b:c7:5f:c1:20:37:a2:2c:00:60:
16:31:12:a6:5b:36:b4:55:57:96:f5:cf:0e:1d:99:10:c2:fe:
2e:31:eb:67:71:9f:86:76:9b:da:91:9f:34:3a:08:81:0d:07:
2f:73:9d:8e:36:df:63:57:1f:1a:ca:6b:59:cf:84:b1:fd:34:
75:f7:1f:2a:0b:a1:49:70:e5:92:0b:20:ad:cc:bf:fd:fa:c1:
29:01:91:e5:5e:02:5c:c4:1e:85:c3:e4:a5:3b:b9:43:90:d5:
62:34:13:bf:69:f7:48:e3:3e:10:77:d3:46:9a:2e:e1:2f:3c:
78:6a:b1:4e:8b:f7:a9:73:2e:18:28:a2:86:82:29:9c:a9:33:
35:68:ee:4f:60:f5:b6:21:ed:a9:40:35:eb:4e:ff:07:78:01:
7c:26:2b:f4:c5:22:5d:21:8a:6d:cc:13:d7:d3:a8:d7:01:50:
ed:78:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 01:11:00 2024 by rpki-client on console-fra.rpki-client.org