Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JDyfPjuu8O21XuPbVBlEgME0ovs.roa
File: JDyfPjuu8O21XuPbVBlEgME0ovs.roa (raw, json)
Hash identifier: JVnJOUEz0c15IMtFNsCdpIT356uFvFJeqovZJKicjvA=
Subject key identifier: 24:3C:9F:3E:3B:AE:F0:ED:B5:5E:E3:DB:54:19:44:80:C1:34:A2:FB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6D7C94A71A8CED09926FC8D6A9DC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JDyfPjuu8O21XuPbVBlEgME0ovs.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53850
IP address blocks: 185.217.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6d:7c:94:a7:1a:8c:ed:09:92:6f:c8:d6:a9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=243c9f3e3baef0edb55ee3db54194480c134a2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:17:9b:97:65:30:1e:77:ae:44:4b:a3:2c:
18:0a:96:cc:49:e5:da:c1:fc:e3:43:2e:cd:05:74:
d9:a2:90:60:eb:eb:26:dd:57:fd:ba:84:3f:c1:91:
98:2a:58:9d:f1:1c:15:5c:e5:b9:b5:a7:91:9c:6c:
97:00:ed:2e:f6:2b:6f:66:0e:71:b1:79:24:71:5d:
01:bd:cc:52:da:5d:67:5e:08:12:38:49:0d:d5:10:
6f:f0:ae:8c:45:01:de:4d:fe:fe:f8:10:50:c1:c4:
3c:74:5c:cd:b6:67:98:7f:cd:e2:0f:7c:bf:09:96:
41:67:70:68:97:6b:4f:24:6a:3a:14:92:25:e5:cd:
31:f0:f3:f1:72:f6:5e:93:5a:43:1f:1e:f9:1e:7c:
46:27:fd:05:e1:e3:40:cc:be:89:79:68:95:61:b4:
1f:e7:31:7c:79:4e:56:db:e3:4f:b5:19:42:fa:2b:
c5:02:ab:4e:ac:82:59:21:bd:61:c1:3f:d4:33:8b:
c0:2e:d4:c5:ea:7f:1f:d9:c7:04:4c:0e:eb:82:90:
30:9d:1a:5e:bd:57:64:8b:6c:95:3e:0b:b1:02:bc:
34:dc:07:63:ea:f8:b5:0a:e2:e7:ea:8e:20:9f:56:
15:64:c1:bc:95:37:02:db:1f:a0:8b:68:03:2b:8c:
cb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3C:9F:3E:3B:AE:F0:ED:B5:5E:E3:DB:54:19:44:80:C1:34:A2:FB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JDyfPjuu8O21XuPbVBlEgME0ovs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f6:b7:6c:f4:33:d1:b8:6c:9f:f3:dc:ed:b6:da:5e:30:8d:
d6:3a:47:89:ae:6b:ef:11:19:0f:ee:4f:65:bf:ac:ee:d5:bf:
46:ac:15:b6:37:e4:6c:22:fe:a6:0d:52:d5:76:26:99:4d:36:
48:08:5b:f2:17:8e:10:5e:ad:37:b3:50:92:4f:97:8d:82:8b:
2b:c4:bb:63:36:4e:4c:ba:f4:6d:4a:d7:11:76:4e:0d:79:0f:
c4:7c:1c:b1:65:5e:6a:22:54:12:b5:d6:24:a7:1c:5b:c0:c6:
08:9e:d9:86:5c:fb:e0:58:4e:c7:76:71:34:a9:5d:10:7e:ce:
9b:b0:1c:1c:de:a8:c2:81:92:c6:c0:c9:78:48:b7:58:30:ec:
af:47:69:b4:67:9d:b0:e2:1e:f6:bb:66:7d:ed:df:f9:4c:99:
de:3c:d6:24:38:42:10:fe:02:81:41:62:a5:78:65:7e:e9:b9:
c9:28:24:97:e2:55:28:bc:81:b0:37:a4:10:94:42:6a:5c:12:
a5:62:b2:b4:f2:9d:bd:bb:41:87:62:a1:e1:d6:0c:17:88:ad:
37:98:da:b5:3c:f5:89:aa:ce:94:6d:7b:d5:05:31:6d:65:3c:
df:86:6e:5c:d4:dd:70:d1:6c:f8:3f:08:18:98:ff:8f:ea:c0:
0a:bd:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:51:06 2024 by rpki-client on console-ams.rpki-client.org