Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/DJqQH8sjz2Z6ABU7_aa_jtivAfw.roa
File: DJqQH8sjz2Z6ABU7_aa_jtivAfw.roa (raw, json)
Hash identifier: KIB4mr2CHyU+7ctwdG/55dWVFkBZXr9rLog6peFuXhQ=
Subject key identifier: 0C:9A:90:1F:CB:23:CF:66:7A:00:15:3B:FD:A6:BF:8E:D8:AF:01:FC
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 018CC64B00BBFB4A4A50AA92D830F4873477
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/DJqQH8sjz2Z6ABU7_aa_jtivAfw.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 193.241.241.0/24 maxlen: 24
193.241.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:00:bb:fb:4a:4a:50:aa:92:d8:30:f4:87:34:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c9a901fcb23cf667a00153bfda6bf8ed8af01fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:94:99:87:2b:dd:9e:31:53:21:9a:09:e9:
bc:6b:30:fa:b5:fc:93:ee:6a:4b:ca:3a:35:a7:2e:
74:d3:46:67:05:16:6e:36:a2:4e:96:e3:0c:e4:fa:
a6:c2:f8:2d:51:c1:72:91:54:20:85:f2:37:c7:a2:
3a:c5:aa:11:b6:cd:eb:26:41:07:c5:f9:13:af:61:
ca:7e:c9:52:3e:ab:d5:84:01:6f:e7:e5:2d:b6:bd:
78:ac:58:5b:dd:60:ad:fb:24:48:73:97:de:0a:ca:
df:18:34:5c:78:d7:5b:10:e4:d9:fa:b4:4c:93:df:
b7:00:73:6f:29:cc:b0:90:90:4c:3f:86:ce:19:51:
17:6a:40:af:84:ef:6e:31:d0:db:38:d2:34:62:11:
88:07:89:71:67:8d:71:c9:40:5b:3b:27:76:fa:48:
b6:f5:89:32:23:a8:94:9f:62:8b:23:50:81:f1:41:
b0:11:3e:14:6a:7f:80:7f:ae:5e:3f:b0:84:4e:a4:
6d:fe:9a:b1:2c:a6:7c:f3:c5:c1:5b:0f:55:7e:3f:
c9:32:33:39:27:12:bd:07:4f:06:eb:8c:9b:85:51:
d4:75:b0:80:97:e2:a5:3a:e6:3f:a4:de:6d:2b:4f:
bc:23:21:6e:c7:15:92:34:d3:77:3c:69:d9:62:8e:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:90:1F:CB:23:CF:66:7A:00:15:3B:FD:A6:BF:8E:D8:AF:01:FC
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/DJqQH8sjz2Z6ABU7_aa_jtivAfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.241.0/24
193.241.249.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4c:4a:b8:15:11:ec:99:50:d9:50:4f:d5:b8:eb:bb:6e:f4:
0f:b3:13:41:0f:4d:0d:72:98:b6:dd:03:74:a3:bf:c4:17:c1:
a7:eb:1d:2a:9b:d9:d2:e7:bb:29:86:41:93:f6:ab:30:59:06:
22:c3:f8:7d:aa:59:e6:e9:85:24:66:c5:51:b9:fc:60:2e:15:
ea:f4:8a:3d:fa:27:df:44:0d:e2:e4:6a:0b:35:2b:a6:c5:bd:
86:5f:fe:bc:da:00:2e:3b:51:0b:08:97:7b:d9:cc:4a:2e:1e:
51:ea:af:e6:c0:dc:a0:a8:d2:3c:90:bf:1a:d8:9b:b6:a2:1c:
2c:c4:14:3d:fa:31:89:9b:2d:ae:32:cd:4b:86:43:1b:29:c6:
01:99:35:6e:33:56:17:1a:ed:b1:dd:09:1d:23:4b:50:7a:06:
ac:9e:93:e1:e8:fb:b0:06:7c:01:22:e0:5b:8e:66:51:8f:67:
6d:3f:9a:e3:21:96:04:31:97:a7:a8:d1:d3:45:f9:4d:09:35:
91:7a:5c:58:98:3c:f2:1d:a7:41:df:dc:78:c4:b6:24:ed:08:
61:53:6f:09:5d:37:f4:32:81:56:dc:ec:63:27:5a:8f:4b:9e:
31:d1:c7:0d:47:bf:c6:a6:bc:d7:52:2a:49:a8:13:55:23:6d:
d6:11:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:13:40 2024 by rpki-client on console-ams.rpki-client.org