Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/jhN0kBLONpdLYJZP1zZUeD-Wgis.roa
File: jhN0kBLONpdLYJZP1zZUeD-Wgis.roa (raw, json)
Hash identifier: MOoXaEhocVFbe9Ji9PqhifjVWoFR8im5bYeMnd9WwKA=
Subject key identifier: 8E:13:74:90:12:CE:36:97:4B:60:96:4F:D7:36:54:78:3F:96:82:2B
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 018CC4924FCD6B42002E07C3FA3D8F10AC65
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/jhN0kBLONpdLYJZP1zZUeD-Wgis.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1836
IP address blocks: 82.211.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4f:cd:6b:42:00:2e:07:c3:fa:3d:8f:10:ac:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e13749012ce36974b60964fd73654783f96822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:4e:b1:b6:d4:3b:b5:3f:47:95:c1:bb:30:
6d:d3:42:7a:92:81:b1:37:65:5d:ef:c4:10:68:5b:
1a:cf:39:47:84:b6:ed:b0:5e:29:57:65:63:cd:cd:
dc:52:9a:bd:96:6e:72:47:a8:a9:98:b3:74:6f:e1:
5b:ae:97:ba:6a:cf:f1:2e:27:28:09:d6:ac:2e:04:
08:db:35:0f:3a:c8:fd:e7:bb:94:6e:57:2c:ef:a6:
b0:f5:5f:50:75:9b:a8:d9:52:2b:a1:3f:d5:7a:dd:
4c:ad:63:08:d9:15:ef:3c:a7:c1:d1:d3:15:48:40:
56:64:5c:91:4c:18:20:b6:60:91:1b:c9:93:6e:85:
f6:b3:c6:b6:c8:3e:c7:3f:df:2b:06:c2:25:29:30:
1a:03:07:79:f3:c3:ac:84:49:8d:38:43:b7:f6:d3:
13:16:6b:c1:3e:0a:95:d2:74:c0:fd:9c:ce:58:0d:
ed:3c:8c:86:63:ba:ce:d1:99:a7:ac:52:7e:6d:f2:
18:fc:28:c6:47:d2:d1:42:db:c0:b9:cf:bd:37:88:
27:8a:e0:26:31:43:5f:cd:ec:b7:3d:03:23:14:5e:
bd:d6:18:2f:d8:08:19:b1:2e:59:6b:9f:35:50:2f:
ed:14:2d:ab:60:cc:78:02:0c:05:e2:09:f8:34:8c:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:13:74:90:12:CE:36:97:4B:60:96:4F:D7:36:54:78:3F:96:82:2B
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/jhN0kBLONpdLYJZP1zZUeD-Wgis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.211.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d9:95:72:f3:68:e1:e0:16:f6:d9:38:b5:0a:0e:0e:76:5d:
05:a7:7f:5b:c8:0e:d6:7c:9b:95:04:54:7a:a5:1a:74:b5:2e:
16:66:a6:ce:d7:6d:1d:fa:a0:71:41:79:50:1d:72:ec:78:0c:
44:b4:9f:d6:19:67:37:a7:ff:28:2b:3d:ff:f7:63:04:8b:ae:
e6:05:16:69:6b:13:ce:59:d5:fd:c9:d8:45:74:07:dc:33:87:
c3:d1:5f:a1:7b:1e:cd:44:f3:2a:6b:7d:8a:7b:f0:1f:07:d8:
37:df:66:97:5c:5e:f9:f3:ae:23:5f:a3:2a:1a:3c:9b:93:14:
59:2c:1d:61:7d:24:0e:f1:e7:2f:0e:00:8a:88:77:16:46:71:
2d:5a:b1:8b:1b:68:35:9c:49:82:5a:fc:d5:09:3e:1f:f9:7c:
7f:64:32:29:03:2f:ea:7b:8a:9a:b9:a1:56:f3:e4:5b:38:b1:
bc:8b:93:69:4e:fa:02:3d:e5:81:dc:59:4a:7c:49:cd:02:23:
2f:48:ed:84:e1:c8:68:df:d3:05:10:d1:36:87:aa:6b:da:2d:
f9:44:3d:e7:27:79:02:c4:51:ea:80:fd:0e:99:37:c6:0b:c1:
83:88:f9:b3:6e:65:09:08:20:c5:ff:58:b6:e6:e8:42:26:fd:
4b:a3:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:08:42 2024 by rpki-client on console-ams.rpki-client.org