Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/J2CB38y_eyxcZYdEV5eS4EKk9dU.roa
File: J2CB38y_eyxcZYdEV5eS4EKk9dU.roa (raw, json)
Hash identifier: LMByivdsUiDFBzmHetU97Vb8Iu209L/izK1DN2R2IyI=
Subject key identifier: 27:60:81:DF:CC:BF:7B:2C:5C:65:87:44:57:97:92:E0:42:A4:F5:D5
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 018CC8DEE35D5A4693B534BFD16A0BFDDB91
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/J2CB38y_eyxcZYdEV5eS4EKk9dU.roa
Signing time: Tue 02 Jan 2024 06:31:39 +0000
ROA not before: Tue 02 Jan 2024 06:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198682
IP address blocks: 185.249.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e3:5d:5a:46:93:b5:34:bf:d1:6a:0b:fd:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Jan 2 06:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=276081dfccbf7b2c5c658744579792e042a4f5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:3e:b5:17:d8:78:4e:e1:cd:c1:24:91:94:
80:9b:d9:3d:0f:05:37:3e:ff:66:f2:8e:c9:ae:0d:
ba:63:39:51:50:a2:a2:f9:be:a3:ca:83:fe:be:b9:
55:bc:61:74:d4:4e:44:c2:6d:62:72:2f:dc:08:b6:
b1:32:fb:76:13:d4:12:48:f0:ec:ef:8f:e6:23:9e:
bc:48:4a:de:64:84:ed:ff:b5:56:31:20:29:23:2c:
e1:f5:0f:56:e7:95:0b:1d:b5:8b:bb:a5:54:a1:c0:
7b:53:26:88:26:fd:77:53:81:d4:9a:3f:16:89:c4:
10:67:53:2b:ed:92:7d:38:3c:e9:a9:44:4c:b7:6c:
f9:a2:34:ac:64:bc:a8:69:48:48:5b:e5:d4:dd:6d:
85:27:6c:54:77:72:43:a7:0a:f7:aa:02:a8:a1:a1:
32:99:29:65:63:19:a6:97:75:ca:5c:71:da:f9:f5:
ed:da:b8:9d:3c:93:b7:95:52:7b:51:41:39:0f:a0:
71:45:ca:9e:96:97:8a:2a:8d:a5:8e:bf:40:9b:6c:
85:d3:0c:a2:78:1b:84:be:3a:e7:4a:46:c4:c2:61:
c6:ec:85:d8:b9:b8:3c:d9:69:a0:e0:75:11:0e:93:
75:a8:8e:6b:9a:7d:80:33:df:0d:e3:5b:cc:fa:c7:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:81:DF:CC:BF:7B:2C:5C:65:87:44:57:97:92:E0:42:A4:F5:D5
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/J2CB38y_eyxcZYdEV5eS4EKk9dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.32.0/22
Signature Algorithm: sha256WithRSAEncryption
45:e7:c9:96:91:e4:db:b4:b0:02:53:33:93:89:f9:71:64:68:
0b:95:72:d8:c2:f4:3c:4d:0f:c3:d7:68:fd:01:4c:70:5b:34:
57:6c:dd:4f:3d:e4:dd:c2:2f:cc:c7:61:aa:55:39:00:36:d8:
ae:8f:75:35:33:c7:28:1f:60:6e:27:18:a3:cf:e5:c6:67:58:
3f:fc:1a:9d:ab:87:7d:d0:31:c5:eb:cf:b6:f7:dd:a0:a8:27:
aa:09:b3:45:5a:6e:5a:e7:de:7c:d6:9b:96:38:e2:9c:4b:a4:
25:5f:18:20:99:24:d2:10:40:6c:51:d4:74:ad:ba:bb:50:d4:
80:e8:07:42:03:64:4d:72:5f:03:22:a5:88:fa:aa:64:55:0e:
0c:4e:18:68:33:72:e3:23:20:ab:d8:6b:26:c3:54:84:2c:42:
9b:f2:2a:48:ab:bd:c9:82:2f:6e:2f:9d:98:6c:aa:71:1c:4b:
cd:09:ac:d3:e5:6d:3a:9f:a3:8e:37:86:af:26:62:6a:48:28:
fc:41:af:cc:cc:4e:99:c2:d5:4c:35:59:7e:55:63:d2:df:13:
83:7f:04:d2:3e:ee:c4:74:66:79:e6:61:2f:e6:ca:22:22:e2:
19:4f:7c:08:1c:ec:3c:8e:85:6f:dc:e3:5f:55:dc:46:d5:4a:
ec:1c:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:02:28 2024 by rpki-client on console-ams.rpki-client.org