Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/jPRJ5scaaTf8Vo0zx4M-L2EBrAM.roa
File: jPRJ5scaaTf8Vo0zx4M-L2EBrAM.roa (raw, json)
Hash identifier: 7e+fj0oPT615lgjDE/jZs0glVe4OmY/8Hj0RydXSmtc=
Subject key identifier: 8C:F4:49:E6:C7:1A:69:37:FC:56:8D:33:C7:83:3E:2F:61:01:AC:03
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 018CC26CF3146DCAC2211D46FA0975C281DF
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/jPRJ5scaaTf8Vo0zx4M-L2EBrAM.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199842
IP address blocks: 213.199.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f3:14:6d:ca:c2:21:1d:46:fa:09:75:c2:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cf449e6c71a6937fc568d33c7833e2f6101ac03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:43:e4:71:be:f2:59:9b:ab:0d:4c:c2:bd:
30:04:58:50:22:2e:f8:c2:81:e6:46:ce:f7:e0:b8:
b3:cb:39:64:4d:16:70:e3:7d:ec:18:3a:62:a1:e9:
b0:78:76:70:22:1d:bd:65:af:30:30:74:f5:55:55:
49:6b:cd:10:47:f4:be:3a:ab:b3:4f:dd:8d:99:a3:
dc:80:06:c2:8c:a2:e1:52:71:c4:a6:96:95:79:03:
5a:4f:e3:85:32:01:98:10:15:a5:16:04:fd:d5:37:
08:58:92:3f:19:86:7d:43:50:1d:21:67:94:8a:6d:
e1:3b:df:04:9c:15:53:93:42:74:ed:71:7e:97:ad:
59:6d:3a:1f:21:52:c6:15:e8:db:05:60:a4:db:07:
4a:5a:10:13:75:a0:a3:39:78:4e:a5:0f:36:cf:22:
37:17:8b:06:ec:f6:06:35:74:7e:d3:31:5d:a2:3c:
0b:a9:4d:e2:65:02:28:10:10:96:f1:06:1e:73:c0:
98:6c:2f:ff:27:32:8f:54:77:b4:bf:c6:07:5a:c1:
7b:12:1f:fb:9a:ca:ef:cf:4d:fd:74:93:b3:9a:c1:
1c:a1:38:9e:a1:f5:d1:35:35:80:b5:fc:59:7f:b9:
3a:00:89:0c:a7:c0:a5:8c:dc:b4:a5:45:0a:36:9d:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:49:E6:C7:1A:69:37:FC:56:8D:33:C7:83:3E:2F:61:01:AC:03
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/jPRJ5scaaTf8Vo0zx4M-L2EBrAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.199.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:b3:2f:ad:bf:1e:aa:35:15:ed:82:f0:68:d3:b0:93:46:2e:
15:8c:99:c6:ff:8a:79:e4:25:60:e9:f7:e3:07:3a:0b:cb:93:
c2:94:f0:5f:c5:82:f0:87:b2:5d:57:12:97:6a:92:aa:0a:93:
43:ed:44:b8:ff:e0:07:c8:b1:1c:41:6c:7f:b9:3e:6f:9f:15:
f2:10:f8:2c:9e:74:4f:da:12:b0:99:4b:73:2d:ad:36:3b:3f:
07:93:c0:c4:2b:47:7d:5a:a1:ba:8a:9e:f5:77:6f:c4:3d:d1:
75:12:8b:1c:49:6f:4b:72:83:f3:39:10:5e:d6:bb:43:3e:a2:
33:d2:dc:1c:e4:37:a6:05:87:32:4d:3c:6c:8c:69:f1:b4:36:
f5:53:66:9f:1e:c3:af:45:42:53:2a:87:1a:31:f3:84:8a:26:
0d:d9:2d:b2:1c:19:21:d0:a6:95:ad:8b:4f:4f:e6:33:05:6f:
10:85:9b:a5:be:05:11:11:d1:fc:e7:25:26:10:b7:a7:05:a6:
66:fd:0a:1a:d2:ea:17:5a:e5:1d:3a:cf:c9:ff:b7:ba:23:0d:
bd:99:75:1f:1d:b5:d8:ad:2b:6e:39:af:73:51:c4:4b:be:f0:
b9:cc:0f:07:31:0e:b5:62:c2:c6:23:d8:c5:a5:72:ba:a1:2c:
16:69:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:35:01 2024 by rpki-client on console-ams.rpki-client.org