Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/J6rSWbwEKBQZS29-lU9JNjSxVlQ.roa
File: J6rSWbwEKBQZS29-lU9JNjSxVlQ.roa (raw, json)
Hash identifier: 4mz1+DDOoc29AXk8pMYDGJnzfE4wPbhzQYHOh5bTK8A=
Subject key identifier: 27:AA:D2:59:BC:04:28:14:19:4B:6F:7E:95:4F:49:36:34:B1:56:54
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 018CC424ED4B99D967E58A18B37CEF27CEC6
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/J6rSWbwEKBQZS29-lU9JNjSxVlQ.roa
Signing time: Mon 01 Jan 2024 08:30:03 +0000
ROA not before: Mon 01 Jan 2024 08:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 141.46.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ed:4b:99:d9:67:e5:8a:18:b3:7c:ef:27:ce:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: Jan 1 08:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27aad259bc042814194b6f7e954f493634b15654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:f8:54:3c:ec:fc:dd:07:94:8a:28:98:35:
96:f8:6c:5b:f9:d4:05:61:0e:10:42:fb:48:83:a5:
d4:ec:94:95:e9:a5:f6:5f:d3:d4:7a:82:ed:e9:30:
5e:a7:a9:5c:e6:4d:b3:ed:91:0d:6b:4f:7a:f3:84:
09:eb:c6:5e:03:d1:e5:d4:2c:17:a2:44:3d:53:09:
17:d4:04:0b:6a:b4:e8:e2:ed:3b:cc:fc:9c:7a:4e:
b3:1d:73:64:e6:a6:4e:72:06:0b:2c:24:cf:ea:56:
e4:8b:76:77:31:8a:8e:7b:a0:77:2b:91:d6:3e:0f:
d7:2a:a5:c7:28:21:21:a4:d3:d4:99:16:04:31:68:
c4:03:78:9a:22:11:c6:78:fa:0e:be:3d:78:6b:e2:
40:05:58:f4:2c:7c:c7:ee:d0:d6:c8:61:95:ec:65:
cb:46:44:ed:e0:dd:8c:be:8a:d1:62:8b:35:0a:17:
0b:e8:a2:fa:f3:bf:bb:3f:d4:a4:9d:96:fb:04:82:
ca:7d:94:de:d9:f4:1f:d2:e2:25:7a:a5:a0:f7:4e:
6e:d1:d6:e4:74:8c:e9:de:f4:c2:44:15:64:e8:f0:
9c:ad:f7:c5:6a:ff:b2:c7:c5:70:ef:83:c5:64:59:
43:48:93:46:76:36:0b:15:76:cb:af:58:e5:60:83:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:D2:59:BC:04:28:14:19:4B:6F:7E:95:4F:49:36:34:B1:56:54
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/J6rSWbwEKBQZS29-lU9JNjSxVlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:50:6d:fb:f3:1a:51:84:37:df:9d:23:2d:01:13:90:19:4e:
22:21:53:c2:73:3d:d1:c2:d8:9a:71:b1:7b:a8:53:ec:ae:7e:
60:1c:88:87:b6:57:19:37:eb:ac:cc:e5:a6:5d:ce:e0:b3:f5:
57:8c:aa:73:41:24:a2:aa:bf:2e:8e:ed:1e:95:8d:11:af:6e:
5c:df:a9:1b:15:e7:7f:a5:1b:32:75:2b:52:98:24:18:db:6c:
2e:59:0a:ba:c5:16:34:7d:69:21:4b:42:52:95:2a:73:ec:d3:
0a:6a:fb:e4:22:4a:6c:53:9d:86:43:e1:61:ea:db:8b:09:6e:
44:cc:7c:ff:80:90:ef:d1:cc:0a:dc:62:fa:2b:15:b8:75:e5:
1c:6d:e6:1e:5c:51:fe:75:70:6b:91:17:d4:f7:21:1a:25:6c:
ea:bc:b2:21:28:04:57:b6:e8:5d:b0:9a:ea:06:95:c8:16:5d:
d6:4e:3c:83:ff:fb:82:cb:e0:f2:1a:39:25:fb:f8:de:50:8a:
c1:f8:71:4b:d9:22:be:5c:dc:46:00:86:0d:cd:23:b5:f9:f8:
d8:b3:da:42:bf:57:7c:7a:4d:bc:3f:be:93:c6:a4:35:f6:f9:
2d:dd:c3:8a:3d:79:16:8e:9c:96:40:86:53:68:99:26:6b:43:
81:ca:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:47 2024 by rpki-client on console-ams.rpki-client.org