Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Jda_6kAX9s5BktrcqlaoZnyt10U.roa
File: Jda_6kAX9s5BktrcqlaoZnyt10U.roa (raw, json)
Hash identifier: KJgPw6IVQe2D9EeNamBrCavPN9eDXC8kFV8L1FVEdg4=
Subject key identifier: 25:D6:BF:EA:40:17:F6:CE:41:92:DA:DC:AA:56:A8:66:7C:AD:D7:45
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0191124654F140B146B3ECFF57F38EFFD35D
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Jda_6kAX9s5BktrcqlaoZnyt10U.roa
Signing time: Fri 02 Aug 2024 08:48:04 +0000
ROA not before: Fri 02 Aug 2024 08:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 86.104.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:46:54:f1:40:b1:46:b3:ec:ff:57:f3:8e:ff:d3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 2 08:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d6bfea4017f6ce4192dadcaa56a8667cadd745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:7d:00:bb:0e:e1:b9:da:e7:1a:be:70:f2:
5c:f8:89:7b:b8:0e:a9:1f:0d:33:e7:f5:f4:dc:b5:
eb:42:b6:ac:7a:ac:57:ae:6b:b2:a6:4e:20:da:be:
6e:e2:a1:e4:22:ec:93:b0:b2:c9:04:4b:07:b8:1f:
92:4e:4f:c8:26:be:0f:e9:71:96:2f:26:eb:ec:b3:
a0:a5:bf:4e:e1:a6:b3:c1:a3:65:b1:db:d9:9c:22:
fc:58:02:bf:13:ab:c3:dc:b8:62:46:80:c0:c6:2a:
48:04:91:08:bb:09:42:d0:e2:ac:0f:07:7e:30:94:
0f:fd:1d:19:6d:a8:db:c9:3b:a1:66:27:d4:2f:75:
4f:ce:bf:9f:c8:33:41:27:32:82:14:99:40:52:09:
ac:7e:34:00:34:86:74:a6:85:c5:22:36:f4:0b:bc:
37:6b:a7:71:05:06:3d:f2:1d:32:54:d0:bb:21:8f:
8b:6d:65:78:ef:3b:d6:47:7d:fc:91:13:d4:60:f5:
c5:95:73:26:bf:c6:84:47:a7:ce:e3:43:1d:47:5e:
61:c6:16:8d:ed:d7:7b:4c:e4:d2:3a:ba:46:bf:dd:
a1:89:65:6f:b0:f9:7e:f0:9b:d6:e8:b5:dd:59:e3:
33:e7:a5:43:56:13:52:37:13:7c:55:d3:67:15:71:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:BF:EA:40:17:F6:CE:41:92:DA:DC:AA:56:A8:66:7C:AD:D7:45
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Jda_6kAX9s5BktrcqlaoZnyt10U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.209.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6a:f9:18:e9:88:a5:68:e6:9a:30:82:7d:00:32:1d:05:da:
5f:ed:bf:be:9e:7b:6b:13:2b:e9:cf:ce:48:bf:9e:71:6e:05:
4e:cd:aa:eb:eb:80:10:8b:99:64:79:98:da:17:de:6c:00:17:
9f:83:85:fd:b3:71:e3:c3:f6:76:01:a1:9a:1c:8e:b1:f2:90:
a1:0a:fd:7f:35:47:15:c6:6b:32:d9:06:e0:af:9b:7a:d7:df:
de:c9:bb:fe:15:8d:12:d8:54:6a:01:35:62:cc:5e:8a:f8:1b:
3a:30:e1:27:0e:fd:e1:4d:e1:45:08:a8:4e:f9:e9:f5:46:65:
c1:f3:81:5a:71:b1:dd:0d:d0:5c:84:d7:43:64:a6:69:68:3b:
9e:f2:31:44:5c:f6:41:1b:9c:d1:d4:4c:d5:b7:4d:f8:32:0f:
7d:a0:42:8e:18:b8:df:ce:ce:0b:98:5a:d3:f9:13:1d:e3:81:
d9:09:3d:e6:9b:77:6c:7d:5a:ea:84:f1:7c:5e:e6:fc:24:25:
cc:71:08:b9:8f:60:b8:43:ab:bd:8b:f6:f8:c1:11:e0:8c:80:
e3:fb:42:40:88:01:d6:6a:34:b2:a5:84:4e:68:79:ad:e3:22:
12:33:2d:b0:2d:0c:66:82:66:31:45:f6:fa:3d:ad:de:8d:d1:
9d:9b:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:55 2024 by rpki-client on console-ams.rpki-client.org