Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/Jmm8c32qcBMJ4ApUjNceIZLseJI.roa
File: Jmm8c32qcBMJ4ApUjNceIZLseJI.roa (raw, json)
Hash identifier: G6Ps7lcHEInZCW+YNBdsPUPx6F1fw8zP3adfz1K4VwY=
Subject key identifier: 26:69:BC:73:7D:AA:70:13:09:E0:0A:54:8C:D7:1E:21:92:EC:78:92
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018CC794E0F759285582A9FA183EF6372139
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/Jmm8c32qcBMJ4ApUjNceIZLseJI.roa
Signing time: Tue 02 Jan 2024 00:31:11 +0000
ROA not before: Tue 02 Jan 2024 00:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42898
IP address blocks: 185.73.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e0:f7:59:28:55:82:a9:fa:18:3e:f6:37:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 00:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2669bc737daa701309e00a548cd71e2192ec7892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:e4:73:67:66:64:d2:7e:f6:54:3c:dc:a5:
d4:de:95:29:49:f5:aa:2f:49:93:3f:47:8c:1e:c7:
6b:b6:7d:85:63:39:cc:09:d0:0d:aa:00:ee:10:21:
ea:95:c7:63:21:d2:62:91:c0:48:63:ab:94:ce:38:
f5:eb:7e:96:30:ff:d8:d6:da:34:09:07:30:69:b4:
43:14:e9:7b:ca:02:77:be:7e:07:18:2d:9f:83:46:
42:87:a3:06:47:f5:8a:3b:30:d9:45:7b:93:b1:0c:
d5:dd:07:8e:e7:90:16:79:58:85:f0:66:7e:df:a9:
50:cc:1a:d0:d0:cb:f1:4b:ec:10:52:1c:4a:66:db:
32:36:e2:d7:55:e9:95:87:2f:50:9e:5d:71:33:1f:
46:81:bf:6e:dc:4b:ca:25:c4:e7:b6:08:dc:0c:0d:
cd:81:e6:f1:22:8c:3f:f3:68:d3:7a:7e:82:ca:f7:
14:60:f1:01:0e:22:83:d7:b6:b9:f1:77:c4:1d:b5:
95:72:dd:9f:46:9e:a7:bf:a8:12:9f:c3:f4:83:04:
83:e1:85:84:09:d1:1f:60:a5:18:17:18:fb:2b:51:
4e:f1:2a:46:bf:84:5a:a8:7b:55:4d:06:b7:78:67:
ee:7c:96:9c:75:b3:b2:36:75:ef:5f:8b:84:82:13:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:69:BC:73:7D:AA:70:13:09:E0:0A:54:8C:D7:1E:21:92:EC:78:92
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/Jmm8c32qcBMJ4ApUjNceIZLseJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.243.0/24
Signature Algorithm: sha256WithRSAEncryption
32:eb:de:c2:27:3a:89:ef:ad:d1:64:51:ef:34:3d:41:d0:cf:
46:1d:38:0f:7b:dd:87:8b:51:66:1f:ab:ac:b8:be:27:b2:b2:
22:93:aa:04:70:37:7a:73:e9:78:e1:d1:f2:e8:3c:f1:39:e0:
f6:ca:d2:4d:5a:e3:63:80:71:d3:3f:1f:24:50:aa:1a:d8:ef:
de:03:27:4d:17:2a:27:be:15:30:3e:c1:62:10:e4:f3:7f:90:
78:86:f2:c9:b9:6c:40:78:43:bc:31:ec:d2:1c:6a:91:95:b6:
33:18:d9:d3:ad:77:19:3e:1d:e0:c5:c4:01:2b:02:7a:6b:0d:
6b:b0:22:63:d8:cf:08:0b:1d:18:a1:d9:9b:6b:80:b1:51:18:
96:1e:7c:b6:f6:a4:eb:36:c2:33:67:45:c5:12:00:10:5e:7a:
94:03:81:cf:41:9f:f1:20:12:0a:80:45:d6:88:ca:9e:be:7d:
da:8e:37:c5:66:28:a8:34:bf:c2:bc:17:1a:ab:82:42:be:56:
54:d0:13:55:e7:4e:11:a7:97:b8:f4:b3:0d:45:a2:5f:5a:29:
77:c6:99:e4:fa:b6:ed:8b:c1:ea:5d:e9:9f:12:cc:98:b0:eb:
bc:85:11:a8:94:5b:54:cd:32:aa:ed:eb:4a:d0:50:60:f4:bb:
94:b0:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:15:26 2024 by rpki-client on console-fra.rpki-client.org