Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/JPVIE-sLZR2LisYbrBGb6NoRtPc.roa
File: JPVIE-sLZR2LisYbrBGb6NoRtPc.roa (raw, json)
Hash identifier: nReBvdsfT4WicNBAaAU+W9L1aUN8W/yat1tKQNC/yDY=
Subject key identifier: 24:F5:48:13:EB:0B:65:1D:8B:8A:C6:1B:AC:11:9B:E8:DA:11:B4:F7
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 018CC500D57D81E66EFE2C0DA3D866202DE2
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/JPVIE-sLZR2LisYbrBGb6NoRtPc.roa
Signing time: Mon 01 Jan 2024 12:30:15 +0000
ROA not before: Mon 01 Jan 2024 12:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60615
IP address blocks: 195.28.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d5:7d:81:e6:6e:fe:2c:0d:a3:d8:66:20:2d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Jan 1 12:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24f54813eb0b651d8b8ac61bac119be8da11b4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:7f:ec:8b:bd:56:ad:c7:9e:03:c8:bc:ba:
f1:eb:48:82:16:2c:e6:16:61:7b:ad:6a:3f:1b:23:
13:2e:e5:ae:6d:a1:07:30:05:6e:43:9c:be:95:84:
9f:36:f7:cc:01:76:8d:ab:bd:59:bf:f8:70:72:5a:
66:3a:6a:f4:22:d7:97:26:81:81:91:1a:0e:4b:c8:
ef:dc:39:31:63:bb:40:59:4d:57:22:8b:ad:62:42:
dc:d4:e5:39:a3:5e:23:cd:db:07:93:91:39:d1:2e:
c9:7e:20:5f:01:a3:f0:d2:4b:c7:bd:ce:5f:50:c5:
bd:fa:f1:e0:62:92:d9:b6:25:38:4e:10:76:5a:6f:
aa:64:ae:d6:f6:58:64:62:a8:ec:ba:78:70:81:fd:
48:b3:30:a4:fc:d6:51:33:10:c7:4b:34:6d:87:13:
f9:17:1a:83:6f:16:ec:3c:5e:fe:9f:cf:d3:8e:52:
5c:70:0f:50:21:f6:93:f4:03:b5:45:2d:55:c0:0a:
93:4b:8a:9b:8b:85:71:c3:a1:12:a0:22:91:df:c1:
43:f0:88:e7:b5:10:ac:0e:e9:e5:ca:97:8a:3b:ad:
0e:46:d0:8d:73:78:be:28:eb:e9:53:d5:e2:cc:f8:
be:ae:61:e5:d6:af:be:ee:df:81:dc:25:dd:25:2b:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:48:13:EB:0B:65:1D:8B:8A:C6:1B:AC:11:9B:E8:DA:11:B4:F7
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/JPVIE-sLZR2LisYbrBGb6NoRtPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.162.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:2a:b1:4c:b3:79:78:29:e0:c4:e8:90:5c:f9:51:00:c8:ab:
3b:15:89:a2:c6:0c:f7:b4:bb:13:bb:93:f1:2e:0f:8c:1f:1c:
a3:a5:b7:77:48:26:24:d7:9d:cb:d1:3b:be:02:23:c4:da:76:
2a:9f:50:c8:eb:09:98:f2:79:de:6b:f8:c1:d2:3c:14:9e:9a:
26:7f:90:2d:5b:db:9f:e9:a2:e1:e0:89:02:a0:5c:02:21:0d:
7b:a8:56:c9:73:4e:39:85:d4:56:61:5e:4d:2d:2d:8b:c9:13:
1c:92:8a:2b:9d:23:ec:77:19:91:75:9f:01:98:69:a8:dd:ab:
e0:04:b8:7b:ba:b4:f4:f1:9c:2a:ec:6d:92:78:8e:3c:ae:fc:
e8:b0:c7:1e:40:bb:a9:07:4e:18:7c:98:2d:df:0b:a5:e6:69:
03:ee:4f:6e:c0:ff:fd:05:80:a2:f8:f8:2f:31:24:a5:47:f0:
7c:68:57:8f:10:06:4a:64:4e:da:04:66:1d:26:0d:74:e3:d1:
a3:db:1e:aa:14:79:a1:79:0c:e4:f6:11:fd:cc:4f:65:b2:ba:
e0:3a:e6:37:0d:36:af:1c:84:ad:9c:50:18:80:f6:95:df:3f:
49:fd:81:8d:69:32:a5:7c:cd:f6:03:66:16:64:4b:54:92:4e:
37:1b:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:23 2024 by rpki-client on console-ams.rpki-client.org