Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/jkFm2Y6p0zJ8rZRgYoZV6mXGgnE.roa
File: jkFm2Y6p0zJ8rZRgYoZV6mXGgnE.roa (raw, json)
Hash identifier: jc5QOZ9LFzvtFGNnEulYtdxF6ZT0jDuitm6RFc2oFg8=
Subject key identifier: 8E:41:66:D9:8E:A9:D3:32:7C:AD:94:60:62:86:55:EA:65:C6:82:71
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 018CC348ACB4425EF8ACB5454C26A33243DF
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/jkFm2Y6p0zJ8rZRgYoZV6mXGgnE.roa
Signing time: Mon 01 Jan 2024 04:29:29 +0000
ROA not before: Mon 01 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199363
IP address blocks: 94.240.38.0/24 maxlen: 24
94.240.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ac:b4:42:5e:f8:ac:b5:45:4c:26:a3:32:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e4166d98ea9d3327cad9460628655ea65c68271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:6e:6f:cb:40:43:ed:61:68:cd:5b:ce:b6:
08:92:1c:4e:ba:14:eb:cf:89:b3:52:7c:21:e5:40:
30:d4:39:ab:60:70:54:6e:13:3f:5e:c8:a4:a7:26:
ce:04:7b:57:96:80:14:53:ca:20:d9:52:6b:9d:ef:
02:33:7f:62:93:ab:0b:82:be:10:fa:e4:b6:75:d6:
80:7a:54:88:79:37:cf:c5:19:d3:56:cc:6e:e8:24:
5b:50:82:4a:20:a7:9e:12:12:58:c1:65:29:7f:0f:
ae:97:e2:1f:14:42:8a:7b:c1:3e:98:f7:33:62:39:
88:c3:44:99:2a:2f:4e:d2:2f:32:cb:72:2e:b7:d3:
ed:c7:e2:4f:38:76:76:f4:d4:a2:65:77:79:f4:15:
b0:fa:2e:e3:47:21:85:51:8b:5b:0b:a2:1a:85:e9:
be:8d:69:1a:fa:7e:76:8a:85:85:34:31:18:71:a4:
96:1b:8c:22:3b:aa:2b:a7:a0:52:35:2a:69:28:06:
d2:47:6e:e7:48:5a:e7:ed:62:71:26:fd:63:9e:87:
3a:14:15:2b:9a:aa:32:54:c1:76:4e:66:9a:51:8c:
d3:98:3f:3b:96:f0:50:67:f9:be:c5:4d:ec:d5:b9:
4e:6e:e5:29:d7:9b:08:56:60:48:1f:fc:e4:2e:be:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:41:66:D9:8E:A9:D3:32:7C:AD:94:60:62:86:55:EA:65:C6:82:71
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/jkFm2Y6p0zJ8rZRgYoZV6mXGgnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.38.0/23
Signature Algorithm: sha256WithRSAEncryption
59:82:e2:6d:4c:69:34:ab:41:12:a2:87:9d:e9:6a:47:c5:e9:
06:48:09:39:07:d9:22:84:7a:4f:0b:73:49:65:33:94:a6:fe:
d2:03:dd:bf:26:8d:29:09:2e:d2:50:b6:48:ce:76:06:57:b8:
50:c3:c6:fc:d4:fa:ff:83:b8:08:a8:7a:a0:ae:7e:85:37:72:
19:2c:9b:90:92:13:fe:4b:f4:4b:16:d3:fc:a9:a7:d7:e7:b9:
47:0a:d2:51:0f:f6:b0:5c:48:f9:c1:a1:ea:a4:b8:2c:5d:21:
6a:72:61:46:44:03:b6:bf:a1:96:63:b4:e0:a5:f5:31:c2:2d:
c7:78:d0:21:a9:19:db:44:bf:48:de:75:25:b5:f2:ca:b3:08:
b4:9b:98:da:8e:82:6b:bc:f3:a6:39:5b:11:b0:47:49:be:ac:
dd:a6:ad:e9:25:c3:f3:93:ed:01:4f:41:8a:77:9c:f1:24:c1:
57:71:75:cf:0f:9b:52:73:a4:55:50:ad:a4:8c:cc:02:fd:8c:
28:e5:7e:7d:cc:23:eb:30:e2:dc:53:ca:4b:74:7f:64:84:82:
8a:59:f6:7d:df:7c:94:22:3f:fd:35:2b:67:da:a1:42:f4:b5:
fc:50:20:c1:93:23:24:84:33:73:91:a7:5d:32:49:a9:4d:6c:
3b:eb:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:21 2024 by rpki-client on console-ams.rpki-client.org