Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/Tb0xnxm9O33J23zZVBT_V0e0yEg.roa
File: Tb0xnxm9O33J23zZVBT_V0e0yEg.roa (raw, json)
Hash identifier: W8t3ANZRP8RyqcYKg7NL1cU2DAptQHXcto3R6rlrGdg=
Subject key identifier: 4D:BD:31:9F:19:BD:3B:7D:C9:DB:7C:D9:54:14:FF:57:47:B4:C8:48
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0191C1409BDB29A2F8B8BC6038D926A635D3
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/Tb0xnxm9O33J23zZVBT_V0e0yEg.roa
Signing time: Thu 05 Sep 2024 08:15:22 +0000
ROA not before: Thu 05 Sep 2024 08:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8309
IP address blocks: 37.19.128.0/18 maxlen: 18
62.129.0.0/19 maxlen: 19
217.180.128.0/18 maxlen: 18
2a06:19c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:40:9b:db:29:a2:f8:b8:bc:60:38:d9:26:a6:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Sep 5 08:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dbd319f19bd3b7dc9db7cd95414ff5747b4c848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:33:e9:d6:c7:ec:db:e7:bd:99:96:50:e1:
52:28:d2:4f:8a:98:9c:20:46:1d:17:73:12:81:78:
db:67:34:81:08:24:8f:2f:65:c8:48:5d:9e:a2:8b:
a8:fe:7f:64:19:63:bd:6e:33:f1:89:81:b0:7d:9f:
38:e5:f4:7e:82:3b:93:39:19:f3:7a:65:fb:95:7c:
dd:cf:2d:2b:33:8b:fb:1d:3f:5c:ff:df:fe:0a:40:
83:41:d2:95:7d:b9:86:53:6e:49:41:4e:60:54:c9:
84:2a:0e:1b:cb:83:a5:a4:73:f0:3a:b9:76:60:3e:
7c:6f:ed:df:c9:a0:a6:e1:57:af:80:26:28:d3:7a:
32:da:21:33:3b:e7:94:f8:78:65:0b:d0:db:24:71:
79:2e:cd:f4:b3:61:f4:33:a7:ad:19:02:70:27:fd:
a7:e8:48:8b:52:c6:82:16:67:a0:af:25:e3:54:df:
4d:45:61:48:b6:3e:11:b9:4f:cb:29:ce:79:94:2e:
24:07:4c:7b:d4:9b:7c:e3:7d:5d:59:47:24:e0:58:
96:70:43:f7:b3:92:87:52:95:ce:e7:11:ed:40:bd:
bb:c5:aa:aa:38:03:bc:a4:25:8e:ae:d1:c0:fc:c1:
82:92:c0:d2:7c:22:82:37:e3:e1:fa:c6:c4:30:7b:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BD:31:9F:19:BD:3B:7D:C9:DB:7C:D9:54:14:FF:57:47:B4:C8:48
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/Tb0xnxm9O33J23zZVBT_V0e0yEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.128.0/18
62.129.0.0/19
217.180.128.0/18
IPv6:
2a06:19c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:24:cc:e7:4a:0d:83:f8:3b:90:3a:93:aa:34:2d:cd:d5:e3:
f6:69:97:51:3e:3e:66:ac:01:54:5a:c1:65:a6:c0:6a:05:c1:
74:ba:1a:8b:9b:7b:8e:a5:b8:d0:b3:f8:33:08:12:cd:0b:d0:
81:ed:7a:27:c5:a4:bf:c9:de:fc:c0:ce:4b:14:52:4b:fa:1e:
f5:f0:41:44:b6:8d:7a:26:2c:99:9c:60:50:80:8e:0d:77:55:
b8:44:db:8c:1b:0f:15:51:13:fb:cc:7d:68:b8:51:93:74:b2:
c3:01:da:09:dc:cd:e5:69:86:46:aa:18:bb:20:4b:ce:e1:8c:
9d:08:9c:4d:c4:d1:db:64:07:41:e2:31:1f:43:81:e8:4d:df:
ee:3f:13:cd:91:bd:9c:5e:f6:8f:9a:ba:08:09:35:21:86:a6:
f8:d9:03:b3:99:e8:fe:88:7b:6b:1d:ad:d8:9e:6b:2b:64:a6:
ad:53:b6:58:39:99:bf:88:90:7f:dc:fd:45:ca:07:a2:44:9d:
2a:61:c9:26:e0:cf:22:0a:ff:db:27:e4:03:63:07:6a:02:91:
79:a7:65:ba:07:c8:17:70:e4:13:93:89:6f:37:20:b5:a1:6e:
71:4e:32:9d:90:2b:7e:9d:a9:98:12:4d:7f:a9:66:7b:e3:a5:
bf:7e:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:36 2024 by rpki-client on console-ams.rpki-client.org