Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/jHnotDV7V6OxC85rj5hYvFh4VDY.roa
File: jHnotDV7V6OxC85rj5hYvFh4VDY.roa (raw, json)
Hash identifier: UaQKius45ykOYxEnUFum/AgEHa7oHy9augFMRTvQWmg=
Subject key identifier: 8C:79:E8:B4:35:7B:57:A3:B1:0B:CE:6B:8F:98:58:BC:58:78:54:36
Certificate issuer: /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial: 018CC50148FB47920F70885B7EB7B26E9E24
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/jHnotDV7V6OxC85rj5hYvFh4VDY.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208226
IP address blocks: 5.42.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:48:fb:47:92:0f:70:88:5b:7e:b7:b2:6e:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c79e8b4357b57a3b10bce6b8f9858bc58785436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:a5:ea:18:4f:dc:2a:56:0e:9e:d6:01:eb:
0b:d7:5a:b3:11:7c:dd:7d:9d:e3:ac:03:87:eb:92:
28:fa:33:45:ae:6d:5f:67:53:82:4a:b4:fc:87:e1:
d6:11:45:09:c5:b4:9a:58:f5:58:74:a8:a9:04:f5:
90:7c:a9:1f:c1:d9:87:5c:a9:82:63:96:f5:c0:83:
d2:ca:86:23:96:c5:1b:21:fc:fc:b8:29:0b:82:22:
d0:7e:d0:81:67:4e:22:2d:0f:5b:71:fa:65:89:08:
a6:aa:5d:96:1a:a1:2f:9e:6f:a7:f1:fb:8d:27:b2:
c9:43:c6:69:e3:e0:0e:c7:42:bf:c3:80:6a:73:e9:
19:3b:75:64:18:54:9b:e2:31:c8:b8:21:11:fd:f0:
56:ae:d4:d3:98:9a:e2:68:e7:d6:fc:a0:c3:aa:aa:
ad:ee:72:34:c5:bd:b7:94:1d:8c:7f:8d:e4:5d:ab:
80:21:44:e7:8e:5b:19:3d:4b:c0:0d:93:73:e0:b5:
62:fa:7f:de:c0:a6:9b:01:a6:ae:e2:c1:34:86:5f:
59:2a:ce:ca:e3:13:9a:d7:71:44:df:4a:8f:e3:8e:
b9:6f:91:2c:a9:29:9e:76:1a:ae:0c:28:8c:77:52:
b6:36:f9:86:0d:68:cd:fe:a9:c4:a2:e6:0c:28:d5:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:E8:B4:35:7B:57:A3:B1:0B:CE:6B:8F:98:58:BC:58:78:54:36
X509v3 Authority Key Identifier:
keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/jHnotDV7V6OxC85rj5hYvFh4VDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fe:22:0f:5a:90:03:f0:17:0f:19:1c:38:fe:5e:37:77:3d:
76:3f:6c:b1:80:25:68:fe:d9:70:2d:ab:85:7e:7c:b0:86:6a:
34:3c:ef:7b:d4:e0:f2:fe:54:d5:f0:43:64:c4:da:9b:2e:5e:
2c:e6:65:0c:b7:b1:13:e3:c0:f1:04:21:5d:df:f2:25:aa:98:
27:19:ca:b1:70:9b:e7:7e:36:e2:81:0f:c6:77:14:00:80:34:
40:30:50:66:ff:18:e7:73:30:2d:4c:c6:3c:6a:54:7b:d1:5e:
7e:57:a9:d8:5f:5c:ba:b9:2f:c7:03:c6:42:03:19:75:4d:ba:
2a:56:58:c4:50:be:96:b0:3c:e6:00:57:77:35:d2:33:9f:a7:
0f:57:0c:53:4d:7b:38:36:05:cc:d7:44:c6:1e:e8:6a:da:94:
a9:5a:33:a5:b7:d0:c3:57:da:2a:3c:0c:31:c3:26:40:41:94:
9c:28:18:87:28:8a:31:f2:3d:79:da:fe:fe:6d:48:60:28:24:
70:3f:20:36:cd:ff:ed:53:b6:e7:64:f9:90:aa:5f:da:60:6b:
07:7a:69:4d:fe:07:6e:67:3f:70:aa:ad:a9:17:ee:c2:37:c5:
1a:47:7c:ee:05:16:51:ba:62:63:2d:fb:a6:30:26:69:e3:99:
f9:38:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:51:29 2024 by rpki-client on console-fra.rpki-client.org