Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/JokabOpejyDx-w9Pr2nVuzzDAjQ.roa
File: JokabOpejyDx-w9Pr2nVuzzDAjQ.roa (raw, json)
Hash identifier: BXUsYiO946+dHsM0G9GZzJWF+fp77HNvo9ACqH+ugKc=
Subject key identifier: 26:89:1A:6C:EA:5E:8F:20:F1:FB:0F:4F:AF:69:D5:BB:3C:C3:02:34
Certificate issuer: /CN=843d8aa1269d1a3f3321335860c67c7e08677dc5
Certificate serial: 018CC4935318C58CDCA9186AEA4240AE0320
Authority key identifier: 84:3D:8A:A1:26:9D:1A:3F:33:21:33:58:60:C6:7C:7E:08:67:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/JokabOpejyDx-w9Pr2nVuzzDAjQ.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 185.173.44.0/24 maxlen: 24
185.173.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/hD2KoSadGj8zITNYYMZ8fghnfcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/hD2KoSadGj8zITNYYMZ8fghnfcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:53:18:c5:8c:dc:a9:18:6a:ea:42:40:ae:03:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d8aa1269d1a3f3321335860c67c7e08677dc5
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26891a6cea5e8f20f1fb0f4faf69d5bb3cc30234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:67:20:2c:3c:b7:eb:c5:c6:04:49:c4:1c:
5d:a0:7d:f6:f2:4a:3d:64:81:91:f4:6d:c0:f5:03:
1a:e6:cc:68:99:30:64:75:d9:18:81:db:a1:2a:1c:
51:62:52:62:d7:db:e5:be:17:c1:dd:9d:6e:3a:dd:
9d:49:82:61:80:ea:57:46:0f:25:9d:af:ef:db:69:
02:cd:24:9e:01:f8:50:1c:fa:11:f8:77:fe:1c:9f:
a5:1c:ff:ca:ae:88:e0:33:07:ef:46:92:8b:4f:0e:
23:2c:4d:0e:09:3c:bb:bc:c4:7f:40:a8:f8:3e:e9:
70:c7:d5:cd:4b:ee:7c:32:6d:a1:e2:e5:59:8c:38:
65:50:52:05:2a:e3:b5:dd:27:17:80:67:e8:9c:d5:
8c:09:94:a8:33:48:0f:92:23:6b:38:8b:65:a1:f3:
7d:05:02:6c:ad:2f:c4:d9:5c:2c:f5:0f:24:43:9c:
57:d2:cb:05:d4:06:39:4c:f8:b1:3f:b7:72:0c:50:
b0:e8:9f:38:64:5e:57:b0:a3:d3:cb:19:e8:41:c0:
9b:dd:a2:58:78:e2:5c:8c:e2:20:99:d0:e3:12:b4:
de:0b:e9:2c:ae:77:df:db:4e:e8:38:19:11:83:35:
40:d8:25:a2:26:bc:a9:6c:ca:2b:3d:46:f1:9c:6f:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:1A:6C:EA:5E:8F:20:F1:FB:0F:4F:AF:69:D5:BB:3C:C3:02:34
X509v3 Authority Key Identifier:
keyid:84:3D:8A:A1:26:9D:1A:3F:33:21:33:58:60:C6:7C:7E:08:67:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/JokabOpejyDx-w9Pr2nVuzzDAjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/hD2KoSadGj8zITNYYMZ8fghnfcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.44.0/24
185.173.46.0/24
Signature Algorithm: sha256WithRSAEncryption
54:83:6c:ef:4f:d8:f7:60:8e:ae:8b:89:a6:1d:78:89:ab:cc:
86:1a:65:5b:dd:9d:49:b0:21:70:92:b6:b2:db:c3:c9:e3:b1:
69:d2:43:8d:09:18:fd:c9:75:af:21:e0:88:28:6d:42:ab:e8:
73:79:f4:1e:00:0d:5a:a3:4d:55:1a:fc:44:16:e6:7f:3c:96:
a9:eb:31:3e:8b:4c:be:13:26:fa:77:db:73:3b:70:77:d1:dd:
b0:25:49:06:a9:8e:c3:56:59:4a:19:cd:7a:96:10:fb:b0:7e:
c1:d3:3b:1f:b8:68:19:14:16:6f:ab:8d:08:39:fd:0d:29:0a:
96:9b:f4:dd:fb:83:46:16:f9:6f:3f:80:97:65:a5:e7:48:b5:
61:22:00:b5:03:35:2f:dd:27:4a:e3:26:16:f6:92:52:45:e7:
29:38:3a:ec:d8:49:30:1f:33:73:b5:83:6f:bb:3b:51:42:29:
50:a0:e4:04:cc:43:86:d9:ee:70:bd:5c:fa:e1:f9:69:34:2c:
83:9d:0f:02:e9:fa:dd:36:9c:04:88:1e:97:6c:14:b3:dd:cd:
f4:11:ce:26:84:e5:db:e3:39:1f:41:ea:51:cc:aa:cd:62:bf:
34:c9:f7:5d:a4:ee:6e:d5:f4:f2:2f:39:85:26:c7:28:e7:88:
19:f1:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:40:51 2024 by rpki-client on console-ams.rpki-client.org