Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/JJmBJTN8cbsxGPOrp8As3M-ZbMI.roa
File: JJmBJTN8cbsxGPOrp8As3M-ZbMI.roa (raw, json)
Hash identifier: Gdcve6s9uGlNpOs4lSC6BQyRoeP9YHR7nUgcEveKH14=
Subject key identifier: 24:99:81:25:33:7C:71:BB:31:18:F3:AB:A7:C0:2C:DC:CF:99:6C:C2
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018CC26D1DF2387AA5CF20C917E5C7936430
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/JJmBJTN8cbsxGPOrp8As3M-ZbMI.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199009
IP address blocks: 62.76.250.0/24 maxlen: 24
62.76.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1d:f2:38:7a:a5:cf:20:c9:17:e5:c7:93:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24998125337c71bb3118f3aba7c02cdccf996cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:d1:c1:a5:48:27:2c:51:01:62:59:00:43:
6e:75:65:61:3b:d5:73:bb:98:bb:07:8c:13:88:b7:
b7:62:3d:85:db:60:74:07:80:07:c5:95:b0:20:0c:
d5:22:94:81:83:e9:c9:14:70:67:b0:b8:0d:10:6d:
be:29:c3:8e:eb:c8:65:c0:d5:8b:40:4b:2e:38:be:
9b:14:6d:11:e0:4d:46:21:bb:a1:60:2e:39:35:23:
2b:20:76:e3:b1:a7:17:57:5e:ed:e6:48:21:62:0b:
75:d2:60:1a:b7:6c:90:de:3a:26:35:6e:8b:f4:9b:
da:9b:22:56:b2:7a:1e:e7:47:e4:9f:f7:53:e0:fd:
e4:9c:a7:ab:6f:ee:2c:1c:7a:90:1e:b2:a7:79:ed:
21:ea:9d:e6:7b:9e:02:0e:58:24:6d:1e:2d:a8:ec:
9d:0a:49:b2:a6:7c:15:aa:67:27:e9:d4:07:47:45:
f8:98:ee:0e:e3:aa:f9:64:33:03:c7:ad:65:85:34:
3d:90:63:42:d7:34:5b:1c:56:a3:e1:81:cf:43:33:
c1:cf:39:2a:3f:77:0f:25:da:01:8b:8e:f5:99:2a:
23:8d:70:1d:25:7d:54:1c:07:4a:52:a2:d6:2f:fa:
c5:69:0b:ad:6c:51:0f:8a:95:05:94:72:f1:50:17:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:81:25:33:7C:71:BB:31:18:F3:AB:A7:C0:2C:DC:CF:99:6C:C2
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/JJmBJTN8cbsxGPOrp8As3M-ZbMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.248.0/24
62.76.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1e:34:4a:6b:12:4f:bc:12:70:12:4a:15:14:a4:fe:df:bd:
39:03:34:5d:23:05:df:a1:fd:c3:8e:54:9a:cb:13:b2:4c:33:
cd:bf:84:a2:e7:ac:3b:75:04:47:c2:0b:12:a7:98:c3:d7:12:
8f:d4:f2:f8:39:1d:3b:e0:03:12:71:7c:ab:72:16:83:01:0d:
72:76:41:7f:54:a0:23:c2:b6:76:47:ab:e9:97:56:0c:64:47:
06:b6:f4:b5:7c:f4:07:a2:5b:af:7b:ca:a4:e1:23:5f:b3:a2:
4b:6f:f8:3c:75:71:38:01:73:23:d6:0e:bf:44:8c:a3:6c:2a:
7a:40:af:5d:4a:2d:47:da:0e:17:76:af:fd:14:d9:5d:d6:89:
d6:9b:b2:69:e9:51:4d:bf:9b:7c:59:1a:c8:b9:e0:42:88:4c:
d9:e9:16:69:25:38:ff:94:85:c7:ee:98:3f:8e:d1:41:54:43:
49:cf:9b:d6:89:95:45:41:56:b8:bb:68:aa:47:05:74:15:79:
d2:a1:bd:1d:d5:6a:a5:ff:0d:69:27:f2:64:75:46:e5:b4:1a:
c5:bb:fa:94:5d:fd:c1:d8:83:3c:d3:9a:5f:68:32:f7:cc:05:
18:c6:5d:fe:df:6e:6c:97:b3:49:9b:ed:8f:45:30:16:26:c4:
eb:8a:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:25 2024 by rpki-client on console-fra.rpki-client.org