Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/JhqaaduJth98gSqxEK_Yc6sKRYA.roa
File: JhqaaduJth98gSqxEK_Yc6sKRYA.roa (raw, json)
Hash identifier: x52RiWjdyDayOlvR/sPaDD1Sdkk1WfZZKx5CDyICvlA=
Subject key identifier: 26:1A:9A:69:DB:89:B6:1F:7C:81:2A:B1:10:AF:D8:73:AB:0A:45:80
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B727CD86D9640961A038613F38F435
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/JhqaaduJth98gSqxEK_Yc6sKRYA.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2281
IP address blocks: 90.84.10.0/24 maxlen: 24
2a01:c9c0:8020::/48 maxlen: 64
2a01:c9c0:802f::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:27:cd:86:d9:64:09:61:a0:38:61:3f:38:f4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=261a9a69db89b61f7c812ab110afd873ab0a4580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:ad:29:d7:f4:b1:9a:85:c5:7a:eb:e9:32:
62:25:82:f7:d0:12:cd:0d:ed:39:5e:90:b7:f0:16:
50:16:29:12:f1:a0:0a:51:12:e8:7d:e9:8b:36:23:
6f:9b:78:32:e2:2d:43:32:65:30:17:a2:24:ec:c4:
b0:ec:98:1a:61:6e:9d:2c:c4:7b:fe:85:59:60:79:
3b:f8:7b:34:37:6e:c0:12:b4:8a:f5:d4:f9:1e:55:
7e:16:23:75:36:8f:5b:7b:ec:6e:72:78:1a:e7:5a:
f2:e7:3e:c1:d6:33:74:1c:1b:b0:d6:2a:35:61:b6:
73:2c:ad:d7:ce:58:61:30:e9:3d:b2:92:fd:27:62:
b6:6e:c3:6a:7c:7c:98:e1:d7:e2:95:40:15:34:60:
53:dd:64:95:01:c6:47:04:a4:71:1b:6a:de:65:e2:
52:46:3c:46:cf:ad:f3:54:12:02:3c:6b:76:1d:9a:
f7:51:71:3a:5e:fe:5c:ff:86:28:bf:4a:1c:34:84:
92:04:1b:6a:01:ba:ae:28:59:8b:0c:f8:c7:e7:96:
12:4f:3a:b2:44:2d:bb:58:67:95:b9:16:0b:d6:93:
16:0e:e3:8c:80:52:12:ff:58:28:78:8d:81:73:e4:
90:54:78:ee:a3:69:75:14:d0:0e:a9:8e:86:de:37:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1A:9A:69:DB:89:B6:1F:7C:81:2A:B1:10:AF:D8:73:AB:0A:45:80
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/JhqaaduJth98gSqxEK_Yc6sKRYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.10.0/24
IPv6:
2a01:c9c0:8020::/48
2a01:c9c0:802f::/48
Signature Algorithm: sha256WithRSAEncryption
02:85:6b:30:4e:5b:da:7f:df:c1:0d:8c:af:76:64:44:01:b7:
b5:29:d6:4b:76:50:cc:8b:0e:1b:be:9c:03:65:dd:9c:ca:e3:
ee:73:e5:16:24:a5:ac:6c:20:1b:81:86:63:59:a8:05:a5:8d:
f9:53:93:ee:05:c6:12:ec:c4:95:35:b9:66:c5:c5:ed:09:9b:
d6:1a:a9:17:b3:58:f3:fd:a7:5a:c2:86:a7:06:96:8e:af:15:
67:3c:ba:99:3d:ea:ac:a6:66:43:10:cb:e0:3f:c5:a7:fd:29:
b2:97:b6:ee:27:fa:39:00:4f:0b:0c:18:9f:5a:b8:17:89:05:
86:b4:d5:3a:c0:42:79:20:c7:92:26:0e:f8:2b:29:ae:4a:21:
79:4f:73:0e:11:ef:c0:73:88:4e:36:9a:b2:83:62:a3:80:1e:
1c:e6:0f:10:0e:26:6a:bf:fb:ef:58:f4:21:ff:57:be:37:af:
14:32:73:f3:96:90:35:f3:d2:4c:98:67:8c:6b:fe:e3:7e:7b:
8f:e6:60:80:65:a3:d4:79:17:ac:47:45:b7:a2:ff:b7:ae:ae:
7f:54:95:89:0d:7e:81:3e:a3:77:b0:0f:41:cd:90:1c:38:f4:
93:29:3b:c1:ee:1f:c3:b1:d7:16:14:04:98:f8:5e:98:8a:70:
ab:38:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:17:40 2024 by rpki-client on console-ams.rpki-client.org