Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JfhAIP_O7OoZXWODuzeY-szQH80.roa
File: JfhAIP_O7OoZXWODuzeY-szQH80.roa (raw, json)
Hash identifier: Rfv/EK4WVfR8buCjUQ06DVdSC4ZTmoh+PXv1h4tGrzM=
Subject key identifier: 25:F8:40:20:FF:CE:EC:EA:19:5D:63:83:BB:37:98:FA:CC:D0:1F:CD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501142404F110008AA24CDCA4224AAD
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JfhAIP_O7OoZXWODuzeY-szQH80.roa
Signing time: Mon 01 Jan 2024 12:30:31 +0000
ROA not before: Mon 01 Jan 2024 12:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49321
IP address blocks: 185.192.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:14:24:04:f1:10:00:8a:a2:4c:dc:a4:22:4a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25f84020ffceecea195d6383bb3798faccd01fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:35:2b:74:21:2c:e1:cc:01:f3:f6:e6:e1:
30:f7:a0:ea:2a:d8:0a:f4:76:47:d5:5f:2d:ba:d0:
06:c1:b0:53:77:80:48:0e:61:dd:d1:ae:03:ca:ff:
75:9e:c3:ce:c4:90:4f:c6:b2:92:be:09:0b:51:60:
80:24:cc:ea:34:42:17:d5:2b:fd:e6:6c:51:88:41:
f0:43:9b:e4:5f:be:d0:04:bb:ee:b9:20:f7:fb:94:
a7:b7:53:f3:23:57:db:6f:78:92:e3:c1:06:0d:79:
0e:28:7a:a2:2f:05:d2:d0:43:17:56:60:c1:09:06:
12:3a:9b:ef:b8:ae:71:08:e6:da:c8:ff:93:0e:b8:
3a:3e:2a:6f:c7:fe:27:a7:3b:46:2f:fa:b7:6c:2d:
c8:83:b2:9c:9d:1e:79:30:2f:fb:cc:f0:90:f0:04:
4d:ef:4a:8e:31:81:2f:d1:0d:9b:f0:3e:e6:ed:a2:
e4:61:db:ee:6f:12:93:1e:1e:be:da:20:ab:b3:ba:
1b:9b:bb:22:88:6c:5b:a9:1c:c5:83:bd:68:e2:8b:
64:6f:b9:02:cd:b2:11:58:d8:37:f5:6b:b6:7e:80:
f6:4e:26:dd:85:4c:b0:98:b5:10:b1:59:f3:85:31:
c3:35:2f:5f:57:8f:19:83:d3:6b:bd:7a:e3:ff:bf:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:40:20:FF:CE:EC:EA:19:5D:63:83:BB:37:98:FA:CC:D0:1F:CD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JfhAIP_O7OoZXWODuzeY-szQH80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f0:6b:1f:49:54:f2:2d:4e:3e:ba:1b:cc:de:e1:bd:4e:6f:
9c:07:af:31:61:c1:0e:db:65:7e:09:74:7d:6a:0c:ec:9f:04:
23:62:70:f1:bb:9f:24:df:3b:91:ce:db:8c:69:45:53:c9:f6:
a6:1f:09:c9:5b:28:6d:3b:2c:c4:23:ab:67:f6:14:f7:77:90:
ef:4d:b5:ba:33:af:a7:b1:85:30:5d:84:2c:77:53:31:57:93:
80:f5:e9:d9:59:80:f7:0a:65:73:a8:55:39:ae:ee:e0:48:fe:
e9:ac:18:51:f9:af:9c:c9:d5:71:20:42:c5:4f:bb:56:f7:c9:
e3:3b:c8:f0:bf:79:d6:98:7f:cb:21:dd:08:cf:c8:13:d5:76:
02:39:0a:66:f6:1a:ba:9b:7a:4a:c1:fd:16:6d:bc:05:12:2c:
db:4f:84:01:b1:49:65:70:5b:c1:92:8c:30:bf:77:ae:d1:42:
c4:de:7b:d0:70:a3:0e:fd:69:0f:06:7c:1d:6d:18:8b:53:94:
50:81:ff:83:25:30:17:91:87:9e:b3:0c:75:c7:6a:2a:6f:06:
9e:86:38:a5:94:90:7c:9d:e8:5f:93:14:3d:94:9a:d1:b4:26:
09:32:96:52:77:58:b8:46:b9:be:4d:46:5b:af:d3:61:47:a2:
5e:63:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:10 2024 by rpki-client on console-ams.rpki-client.org