Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/jPmjaVcOkGHvIAOcbk9ozZHDIYU.roa
File: jPmjaVcOkGHvIAOcbk9ozZHDIYU.roa (raw, json)
Hash identifier: 0PbTqPncQ09HjF1Ownhh7gDo6EfHSxIuzPAX7CcKoik=
Subject key identifier: 8C:F9:A3:69:57:0E:90:61:EF:20:03:9C:6E:4F:68:CD:91:C3:21:85
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 018CC26D4027C6C20E73995BF8994D935182
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/jPmjaVcOkGHvIAOcbk9ozZHDIYU.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43479
IP address blocks: 185.248.93.0/24 maxlen: 24
185.248.92.0/24 maxlen: 24
185.248.95.0/24 maxlen: 24
185.248.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:40:27:c6:c2:0e:73:99:5b:f8:99:4d:93:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cf9a369570e9061ef20039c6e4f68cd91c32185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:16:9f:22:00:93:8c:8b:e2:fb:79:cf:9f:
a8:88:a6:3f:eb:92:dd:81:99:f6:d7:63:2d:c9:0e:
ce:98:59:c2:81:b7:33:0b:2f:0f:d6:77:ec:27:fc:
bb:9d:81:34:6a:41:58:fd:32:ad:ab:11:69:e7:b8:
6c:9c:95:5e:62:33:aa:25:0a:c5:03:d1:64:0e:8c:
a7:57:7e:24:83:f9:6d:6e:61:51:92:d3:80:97:23:
eb:37:10:e2:ec:fa:1e:00:54:01:45:aa:9d:34:61:
bc:06:ae:78:b9:67:df:28:97:e5:3a:ec:54:71:f3:
ea:46:1a:01:c1:94:3d:17:ef:16:8d:45:7b:17:f2:
98:b2:09:34:39:46:01:6e:39:f2:da:78:17:a8:d3:
82:43:23:82:12:a7:d4:53:a7:b8:e9:a7:44:a6:a3:
95:f2:a6:82:65:60:d5:29:48:52:13:ce:7f:6f:d7:
50:05:a2:71:3d:1c:01:07:2a:e4:27:cc:38:91:67:
cc:d9:03:f3:97:53:bc:36:c5:d5:b3:5f:f1:93:a2:
25:0b:7f:a1:89:ec:f0:ba:82:27:61:8d:e4:4d:51:
41:b4:54:cd:1f:06:cd:0d:21:0d:ed:4d:cf:1e:b9:
25:d5:df:d7:df:61:16:a9:5c:21:5d:ff:77:18:8a:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:A3:69:57:0E:90:61:EF:20:03:9C:6E:4F:68:CD:91:C3:21:85
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/jPmjaVcOkGHvIAOcbk9ozZHDIYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.92.0/22
Signature Algorithm: sha256WithRSAEncryption
32:33:f3:80:2d:a6:67:4c:7e:af:b6:dc:04:eb:eb:c8:9a:a8:
d6:ca:65:fe:7a:1b:fc:4d:fa:9e:51:6a:7b:ef:88:b4:20:97:
75:19:57:a9:0a:fc:85:a4:8f:b3:95:5e:94:95:f5:6e:6b:9d:
92:52:29:bc:be:48:10:8b:0d:75:46:77:bc:ee:d3:63:9d:a2:
88:87:e1:1b:c9:28:19:72:73:ee:c2:a5:06:5a:7a:f6:02:9a:
06:d3:4a:b4:8b:a8:01:0b:f8:3c:2c:30:d4:c1:9f:4d:e8:82:
d6:b1:17:77:1e:c7:b5:e9:75:4d:97:d9:d6:53:dc:9d:b8:71:
ca:11:62:42:b0:68:ee:ec:88:b3:f9:62:f5:60:ec:77:80:17:
8d:ec:12:dd:75:eb:ef:be:8f:d4:ef:01:5e:17:ee:c4:38:36:
38:e8:c6:8c:80:a2:b8:4b:cf:a0:24:3d:94:03:49:fd:9e:54:
03:69:d2:5c:81:22:c8:81:ed:ba:b1:ca:34:eb:0b:f3:4e:58:
d4:ea:9f:8a:82:47:d4:e2:d2:ef:a9:a0:77:b1:af:47:38:d4:
8a:45:08:c7:6d:d3:c4:3c:85:71:4b:52:0c:c9:fa:ac:42:8e:
ba:8f:58:62:36:5b:1f:a3:73:74:ac:ba:cc:ec:41:36:79:26:
21:e6:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:38:17 2024 by rpki-client on console-ams.rpki-client.org