Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/jRGfCPzNaSDXNGFkCG-3bWgVVa0.roa
File: jRGfCPzNaSDXNGFkCG-3bWgVVa0.roa (raw, json)
Hash identifier: Aog7PthSTGf98Tqse/BnB5NO72aMGuxUe0EMnsJQn2w=
Subject key identifier: 8D:11:9F:08:FC:CD:69:20:D7:34:61:64:08:6F:B7:6D:68:15:55:AD
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 018CC870161B583B8AD8F9DA67F75706D2D3
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/jRGfCPzNaSDXNGFkCG-3bWgVVa0.roa
Signing time: Tue 02 Jan 2024 04:30:37 +0000
ROA not before: Tue 02 Jan 2024 04:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43391
IP address blocks: 185.131.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:16:1b:58:3b:8a:d8:f9:da:67:f7:57:06:d2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: Jan 2 04:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d119f08fccd6920d7346164086fb76d681555ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:dd:49:75:04:f3:67:e6:9d:28:21:a3:20:
f8:f5:27:52:cb:7b:fb:bc:18:ca:8c:96:38:0e:52:
4b:66:06:16:1b:7d:11:2a:ff:41:ae:be:8e:6d:cd:
f1:81:05:fa:da:6d:f5:f7:81:b3:c1:a3:60:90:3b:
7f:d8:30:7f:b2:38:b0:56:3b:52:11:9b:98:ee:ad:
9a:96:dc:4a:4e:2b:5c:96:33:7b:c0:da:4b:73:a2:
36:79:0a:b0:78:ea:f1:ba:9f:c3:26:f5:b9:0d:58:
f9:de:7e:3b:e8:c5:da:f9:c9:dd:e0:37:92:9b:25:
da:27:57:a6:2d:3c:62:8c:d7:68:77:c0:30:4d:4b:
c8:59:d3:7b:dc:95:d2:1e:8d:b2:cd:94:0b:eb:4b:
cc:d5:3c:70:e6:a2:01:b1:9d:c0:0c:2d:50:0c:f2:
6c:13:d9:49:8f:91:dd:65:42:24:24:15:11:9a:dd:
27:5d:bb:d3:a7:0a:4f:b2:6a:a4:82:41:1f:37:78:
72:15:88:e2:db:67:b5:77:3c:82:e4:25:eb:c9:f8:
f8:9d:56:6c:b0:e0:52:48:b9:4c:82:81:fb:ed:e8:
a0:6e:cf:13:21:20:1a:26:cd:6d:9b:ea:0e:70:46:
0d:7e:19:cf:16:7a:41:1a:50:e1:fd:2d:1b:65:2b:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:9F:08:FC:CD:69:20:D7:34:61:64:08:6F:B7:6D:68:15:55:AD
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/jRGfCPzNaSDXNGFkCG-3bWgVVa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.208.0/22
Signature Algorithm: sha256WithRSAEncryption
62:a8:86:7f:c2:2e:7d:2c:2c:93:4f:0b:68:6a:e1:c3:50:90:
c2:81:73:f9:b6:a9:57:ae:68:66:f8:ce:f7:94:e6:31:21:12:
95:34:07:08:d3:c6:62:98:0e:0e:d0:de:80:bb:fe:6a:b5:19:
81:c7:5d:1c:88:27:90:37:f5:ab:eb:f8:33:69:56:7a:7c:1f:
46:52:2b:05:ba:6b:6d:32:0a:49:69:5b:7b:c8:bf:b3:4a:e4:
67:4d:9e:82:c3:19:52:a3:3d:ed:21:26:16:02:e6:57:7e:8e:
53:e5:b9:a7:4a:cf:7c:00:ff:e5:b6:d4:3d:db:f2:01:89:fe:
94:ce:2d:65:99:6c:94:a2:86:2e:5c:78:1b:e2:13:56:b5:b7:
8c:b6:92:5d:e3:f1:d9:a5:67:0c:1e:56:91:05:9e:99:6f:a7:
60:18:72:d5:a3:26:51:58:22:0d:eb:2d:70:27:8f:88:6a:18:
dd:b7:ef:27:7e:7d:bb:9d:4f:0d:4d:f7:55:e9:73:65:df:bb:
5e:90:1d:f0:19:37:5f:98:01:be:9e:05:6b:f1:05:45:0b:56:
e4:9b:ca:24:3e:ad:92:89:ea:49:5a:4a:61:7c:8a:c0:c3:64:
4c:f6:7d:eb:ea:85:a3:b4:23:97:67:5d:3e:68:07:72:32:26:
70:85:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:05:10 2024 by rpki-client on console-ams.rpki-client.org