Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/JiaiogvTE7KG9jAsDcvKjKY3UW8.roa
File: JiaiogvTE7KG9jAsDcvKjKY3UW8.roa (raw, json)
Hash identifier: 8IJJTODWCM6R59SzUNMtaG95R9jRYLSDtC43xMziJSM=
Subject key identifier: 26:26:A2:A2:0B:D3:13:B2:86:F6:30:2C:0D:CB:CA:8C:A6:37:51:6F
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 018CC348B8225DF99CD62A92E526E14C66C1
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/JiaiogvTE7KG9jAsDcvKjKY3UW8.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13037
IP address blocks: 185.169.116.0/23 maxlen: 23
185.169.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b8:22:5d:f9:9c:d6:2a:92:e5:26:e1:4c:66:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2626a2a20bd313b286f6302c0dcbca8ca637516f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:ef:00:0d:dd:b6:9f:98:62:dc:f5:14:26:
64:5e:4d:7a:36:de:1e:15:01:68:e9:63:2d:59:1a:
d5:03:8e:fb:8e:bb:29:74:93:63:72:1b:7a:3e:5b:
29:11:01:55:ae:89:48:04:c8:db:da:74:80:a9:48:
4f:d1:8f:c4:33:b7:98:e4:bd:66:3d:ca:a7:52:b1:
d3:d9:49:6a:6a:a1:74:2a:15:90:f7:04:4b:57:ff:
a8:da:f4:0d:41:38:89:de:3b:88:c1:28:5e:0f:f5:
f1:d5:02:89:66:da:02:af:bb:6d:34:64:af:dd:dc:
5b:58:04:88:a3:05:69:c4:02:61:22:1f:ef:5a:47:
c8:5e:35:fd:0a:79:b5:b2:d1:c2:8e:21:e1:85:dc:
09:b5:6f:94:06:b2:2b:0e:7f:74:69:32:09:fd:72:
fe:7f:55:bf:aa:9d:16:9e:3e:c0:85:32:fb:9d:9f:
dc:9d:e9:3d:8d:f2:99:f0:38:99:ed:9b:e6:ce:ed:
79:bc:1b:14:59:42:a8:ca:f8:32:db:8d:12:a0:e2:
3d:62:56:9b:e3:f9:35:72:02:bb:4d:fb:7c:04:9b:
e2:c5:c3:bc:6b:08:26:a2:14:4c:4c:1a:e5:50:ae:
a9:4a:ee:ed:a6:f9:a6:fc:c1:b5:79:f3:fa:1c:1a:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:26:A2:A2:0B:D3:13:B2:86:F6:30:2C:0D:CB:CA:8C:A6:37:51:6F
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/JiaiogvTE7KG9jAsDcvKjKY3UW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.116.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:02:16:67:22:a9:d8:76:cf:0a:ee:82:8e:16:9a:0c:7f:95:
b0:bc:12:c4:0e:d1:09:73:98:42:01:45:a4:92:9e:4a:b9:9d:
02:0d:3b:28:f7:17:31:b2:3a:39:d0:d1:8e:4b:7d:4c:84:cd:
3d:01:cf:61:8f:9e:84:63:bd:12:93:c3:4f:95:96:f9:6e:0e:
6d:ba:dd:6d:a9:3d:da:ae:86:be:6c:1d:03:e2:be:2d:b4:81:
0b:13:23:1e:84:dd:1f:53:cb:1e:38:42:03:6d:43:86:11:6b:
e9:f6:b8:ad:f4:72:ab:be:a8:51:5a:1c:78:58:a5:8f:6b:b6:
bb:ee:97:f5:2d:0c:c3:55:af:43:57:6b:46:d6:2b:ca:42:cc:
66:e9:56:46:45:7d:d8:1e:a3:6c:26:59:f3:f1:0a:7e:87:12:
30:8d:fa:b1:22:27:3b:7f:fb:52:7b:ab:e4:91:01:fa:9b:ca:
7f:bf:b9:31:97:56:2b:12:30:4b:d5:7e:df:7d:3a:9d:15:1c:
6e:25:d9:3e:15:df:bd:1c:b1:7c:6b:b9:b1:d6:29:58:54:96:
8f:13:7b:01:59:6c:bf:22:4b:54:e9:c7:78:5f:d0:20:ba:c3:
9d:a2:d4:2e:44:b1:ba:ff:ed:77:bb:22:75:8b:5d:d1:56:9d:
98:8c:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:10:38 2024 by rpki-client on console-ams.rpki-client.org