Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/jrvYIgePqRYuppLQY17_MEDgICQ.roa
File: jrvYIgePqRYuppLQY17_MEDgICQ.roa (raw, json)
Hash identifier: 4adPV6KNbAgofQQpNqb8oI5UkSieXcON5O56zj+hbjY=
Subject key identifier: 8E:BB:D8:22:07:8F:A9:16:2E:A6:92:D0:63:5E:FF:30:40:E0:20:24
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018F576AA027F34C5CE26C1877E78149B6DA
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/jrvYIgePqRYuppLQY17_MEDgICQ.roa
Signing time: Wed 08 May 2024 08:55:56 +0000
ROA not before: Wed 08 May 2024 08:55:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215014
IP address blocks: 89.42.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:6a:a0:27:f3:4c:5c:e2:6c:18:77:e7:81:49:b6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: May 8 08:55:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ebbd822078fa9162ea692d0635eff3040e02024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:ac:ca:18:55:01:1b:33:21:48:a7:a9:89:
be:2c:b4:d8:33:08:31:b1:62:07:ba:a7:be:2c:03:
7f:c2:90:de:46:5e:71:11:9b:8c:f0:25:ba:93:56:
f4:a0:15:10:25:91:24:af:26:f0:18:2f:df:56:eb:
a0:21:73:0c:57:ff:dc:eb:fd:bf:8a:e6:b6:9a:2b:
45:11:59:c9:cd:57:9c:2c:e2:74:66:e9:63:af:15:
94:bc:12:16:27:d8:10:b5:fd:76:cb:18:d7:fd:72:
c7:26:79:c3:e8:30:f1:73:79:0b:ba:8c:99:82:3a:
0a:4a:be:01:e9:fb:fc:b7:e1:6c:e4:0e:73:32:61:
76:5c:b9:ba:38:95:c1:ea:5f:e1:a4:5d:ad:e3:96:
04:e7:d8:db:0e:1a:e5:b0:59:06:e8:a4:d3:af:44:
ed:c3:90:b4:3a:90:98:0c:32:89:90:af:5c:c0:61:
1e:c6:d4:6d:52:81:d2:c9:15:ca:c1:01:13:a7:f5:
b5:49:02:5a:f8:dd:51:f8:ae:f4:51:e1:17:bf:1b:
e1:c7:da:8d:06:8a:26:dc:b1:fa:8c:65:98:37:a0:
44:c6:57:69:d1:5b:2e:ca:18:b0:f6:f0:00:f6:da:
70:ff:62:00:f5:97:46:e6:26:d0:7e:b6:f5:ac:9e:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:D8:22:07:8F:A9:16:2E:A6:92:D0:63:5E:FF:30:40:E0:20:24
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/jrvYIgePqRYuppLQY17_MEDgICQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.38.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c8:7d:91:c5:1a:56:61:a1:97:90:8a:57:1f:ce:25:99:cc:
6f:c2:e0:8c:f8:ed:47:85:1c:f3:f3:15:97:84:d3:50:7c:00:
ef:68:af:aa:5e:7a:0b:41:8c:8d:c8:02:e2:2e:b2:83:1d:71:
48:c6:ed:8e:38:dd:88:84:8c:3e:4f:a1:0a:aa:7c:8b:e3:e0:
44:68:f0:e3:b5:74:14:2c:f7:a3:50:44:72:77:81:8b:6f:6e:
3a:69:fd:ac:2e:ff:ce:e8:81:db:73:d4:a3:e2:ab:6b:d1:bd:
85:c5:8c:a1:b1:1e:58:94:e7:15:84:cb:c0:bf:8c:80:07:dc:
6b:88:62:71:e1:5c:52:16:57:89:da:4b:be:5a:5f:b7:27:43:
35:2d:2c:f0:f6:67:64:76:25:3c:d3:64:39:c0:4a:cc:e5:24:
d2:1c:10:d7:d5:d0:e4:ab:2b:55:be:04:52:cb:a7:37:50:cc:
80:20:56:a4:c0:2e:da:98:a9:3d:ac:97:36:3a:30:2b:01:5d:
c9:93:ce:ae:cc:6d:2b:53:b9:7d:48:d8:d8:0a:6a:59:e8:5b:
86:9a:71:4c:ac:52:db:29:e5:d5:9d:e2:a6:3e:24:8f:93:1e:
f5:fc:5a:22:2a:38:56:6d:79:dd:7c:6a:c4:2a:5d:5f:a7:34:
29:e5:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 09:22:06 2024 by rpki-client on console-fra.rpki-client.org