Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JHxMJqreCIb2maH62jaYhdvxBns.roa
File: JHxMJqreCIb2maH62jaYhdvxBns.roa (raw, json)
Hash identifier: fjvVQpG95a/BwVtG8bQFvCWeLaOknTlFQWT2HJq4p+0=
Subject key identifier: 24:7C:4C:26:AA:DE:08:86:F6:99:A1:FA:DA:36:98:85:DB:F1:06:7B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019345437957A746A2C77436CA4821AE5651
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JHxMJqreCIb2maH62jaYhdvxBns.roa
Signing time: Tue 19 Nov 2024 16:31:10 +0000
ROA not before: Tue 19 Nov 2024 16:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43180
IP address blocks: 2.57.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:43:79:57:a7:46:a2:c7:74:36:ca:48:21:ae:56:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 19 16:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=247c4c26aade0886f699a1fada369885dbf1067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:bd:13:0f:c1:b2:05:5b:71:86:24:d8:8a:
af:8f:bb:1b:1c:68:4b:f2:2f:ed:b9:b6:4b:d3:f9:
54:99:42:c7:29:4d:3d:d7:6e:15:ad:3d:41:dd:39:
3f:a5:d5:fc:14:a4:d4:2b:22:19:9f:28:c2:90:fd:
20:42:8b:a9:6b:fe:ed:3d:87:f9:a0:01:b2:8d:27:
76:0b:bf:fb:35:97:53:8e:b1:67:2e:2a:47:6f:57:
1f:46:c8:14:92:f1:cb:aa:ff:00:ff:e7:41:cc:cf:
12:d0:88:f5:fd:59:9b:3b:73:48:a1:a9:a3:6a:49:
8a:38:61:4e:ac:ab:c3:8e:12:db:c7:d3:74:7c:ca:
64:08:2d:ee:30:c8:5f:92:37:68:f9:c6:54:38:ae:
59:be:6f:22:19:35:c1:0b:a9:c6:76:2c:92:ff:5e:
1b:94:67:c2:f9:a1:6c:a5:be:a7:4a:4d:d7:3f:72:
6c:b3:62:5c:39:cb:58:d9:ca:de:42:21:a5:93:ab:
a0:49:72:50:71:f0:1f:98:57:d7:71:33:0a:67:90:
88:ae:fb:61:13:81:81:aa:e0:c8:f0:39:aa:f8:95:
52:72:0e:b8:1d:a9:b5:9b:8d:75:67:2f:8b:75:d5:
d7:93:61:24:38:b0:3b:27:56:27:1e:55:3f:a4:65:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7C:4C:26:AA:DE:08:86:F6:99:A1:FA:DA:36:98:85:DB:F1:06:7B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JHxMJqreCIb2maH62jaYhdvxBns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
Signature Algorithm: sha256WithRSAEncryption
98:82:b7:fc:eb:78:37:db:96:77:03:95:d6:12:a5:b9:a9:05:
40:38:04:40:73:cd:11:60:0d:e1:29:b4:c6:85:65:32:5f:95:
48:28:18:cb:58:15:b5:20:94:cc:0a:3b:43:b7:9f:37:39:8e:
e1:ed:e7:32:ac:73:9b:a9:94:26:9b:8f:1f:14:42:6a:b0:3c:
48:84:dc:30:04:03:fc:6c:c1:26:2a:97:51:db:de:30:05:ae:
43:5b:84:61:33:a7:dd:d0:8b:e3:13:c8:07:f5:b6:40:8e:7f:
4e:73:dc:d7:48:e6:6c:ed:71:44:67:7a:01:e2:d0:6a:0f:f5:
78:c1:f4:6b:bc:3a:ea:cb:58:57:2b:16:71:1a:c2:2e:38:ac:
f5:3b:c1:51:8e:40:fe:d9:2a:35:77:0a:5a:02:3c:78:f9:38:
cb:f1:6a:1d:9d:93:11:df:bb:90:c3:6e:ee:fb:75:f9:c2:0e:
96:39:a3:d4:ee:cd:98:c1:aa:3c:b0:d0:60:61:0d:d9:78:1f:
68:3c:51:14:6e:e6:39:71:1c:f7:1a:db:05:04:71:5b:9f:92:
89:2d:bb:8a:cd:16:dc:21:12:35:03:b4:96:4c:10:0a:3a:e4:
a6:a3:ed:90:d1:c7:31:f2:5a:32:d9:a1:c7:de:f8:bd:07:fd:
7c:ad:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:29 2024 by rpki-client on console-ams.rpki-client.org