Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/J7c5_U5e7kms6yK_9gRe4KFdkvE.roa
File: J7c5_U5e7kms6yK_9gRe4KFdkvE.roa (raw, json)
Hash identifier: ksxoi6EkEeUYL70OAG5SrNqVmBw1aLER2xBNDpxTdWQ=
Subject key identifier: 27:B7:39:FD:4E:5E:EE:49:AC:EB:22:BF:F6:04:5E:E0:A1:5D:92:F1
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 018CC26D304FE3BA78F7095F3E3618CC46AF
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/J7c5_U5e7kms6yK_9gRe4KFdkvE.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 109.235.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:30:4f:e3:ba:78:f7:09:5f:3e:36:18:cc:46:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27b739fd4e5eee49aceb22bff6045ee0a15d92f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:53:28:3f:a6:00:3b:35:3e:f6:02:fd:e5:
7c:b0:db:0f:d4:ab:c8:52:70:51:a8:38:de:e6:1a:
ed:b1:48:43:50:a7:fd:38:d1:fc:f4:35:9f:02:e3:
d5:2d:07:9c:d9:ed:d3:5a:37:c9:98:ab:f8:b4:4a:
3e:96:e2:e6:e3:82:e5:50:40:71:c8:f4:64:2e:0d:
14:12:73:08:1d:ec:a1:4a:0a:7a:e5:32:91:b7:fa:
ba:90:b9:4b:12:75:cf:ea:af:6a:bb:b1:7e:ed:3e:
84:4f:64:93:bb:c5:41:b0:7b:59:10:0d:aa:b0:05:
bf:b5:c2:a1:78:31:c7:1c:4b:c5:94:d8:d3:75:eb:
ac:ac:4c:f7:51:82:fe:87:8c:65:35:19:ca:27:58:
69:4a:cf:80:8f:4c:ba:ad:c1:7f:00:e7:a1:ab:31:
26:a4:a6:e2:b6:82:41:64:9c:e3:3a:31:b3:52:f8:
b2:f2:a9:dd:46:bc:40:80:9f:5c:68:d6:2b:3a:69:
00:6c:50:65:99:ae:1f:bd:1d:ab:0c:c5:6a:31:dc:
d7:ce:df:8b:ef:e0:1c:da:9e:d9:7b:74:38:db:42:
fc:2a:60:73:b9:22:68:34:ec:bc:22:c3:33:ea:8f:
ce:5a:a3:e1:dc:ad:be:93:3f:0e:c6:68:ab:03:ec:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B7:39:FD:4E:5E:EE:49:AC:EB:22:BF:F6:04:5E:E0:A1:5D:92:F1
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/J7c5_U5e7kms6yK_9gRe4KFdkvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ee:51:73:d7:24:f0:2d:5d:84:15:cf:91:c2:de:c8:49:9c:56:
08:92:78:bf:91:63:50:8a:ee:87:9a:33:dd:32:b1:88:12:60:
97:63:a0:f8:e1:a9:42:5a:1a:3a:58:9f:b3:e2:30:96:ac:7b:
cd:3c:9b:e4:20:69:28:a9:44:0c:d0:08:86:c4:e7:8c:61:4f:
61:6a:a5:35:56:00:d0:5e:05:c2:70:65:f2:31:7c:5e:aa:99:
cf:a9:22:f9:b9:56:c6:d5:cb:09:99:ea:95:92:1f:9b:8e:b8:
fa:2c:4f:73:5f:cb:75:a4:f3:08:ab:67:39:f1:4b:91:20:f7:
d9:ba:e8:c0:84:bf:41:f5:00:8c:a4:dd:cb:ca:8d:83:0b:92:
6c:b5:21:9f:36:e7:0f:e6:e2:af:a5:0c:8f:7d:a9:68:45:e7:
ee:70:ce:7e:3f:38:81:43:59:17:f6:68:f8:ff:a2:f7:ce:57:
cc:6f:b4:1b:6b:5b:c6:b0:db:5a:70:f6:61:62:2c:7d:16:6b:
ea:7d:fb:16:5c:98:28:3f:b6:02:b3:52:67:d8:c9:69:cc:1e:
42:84:40:e6:fb:79:e3:69:0c:8f:e7:9f:fa:d8:f3:99:be:9d:
6e:44:cd:df:49:9e:9f:bf:e3:cd:cd:ef:73:86:d1:11:3b:d1:
64:53:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:26:34 2024 by rpki-client on console-ams.rpki-client.org