Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jmBqW6-9KltgNcwW4OWEOWsBjig.roa
File: jmBqW6-9KltgNcwW4OWEOWsBjig.roa (raw, json)
Hash identifier: Ooz4jtTJm6ARx8GQABljeoxm6nWfk0Uoydd5VlF/bO4=
Subject key identifier: 8E:60:6A:5B:AF:BD:2A:5B:60:35:CC:16:E0:E5:84:39:6B:01:8E:28
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802C7B288076F5E0A564A0CCF2EBBC8
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jmBqW6-9KltgNcwW4OWEOWsBjig.roa
Signing time: Tue 02 Jan 2024 02:31:14 +0000
ROA not before: Tue 02 Jan 2024 02:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41635
IP address blocks: 89.38.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:c7:b2:88:07:6f:5e:0a:56:4a:0c:cf:2e:bb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e606a5bafbd2a5b6035cc16e0e584396b018e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:6f:c1:86:8a:46:d2:7a:b8:45:3a:eb:42:
e1:a6:85:ef:69:2c:4a:b5:0f:e9:ac:a9:4e:eb:d4:
51:4f:41:0d:3f:0a:86:37:20:17:14:d1:75:ab:2e:
2e:e5:43:70:ba:4f:ed:c9:9b:b9:ff:00:c9:21:73:
c1:76:68:73:39:cf:2e:7a:cc:74:65:08:64:6d:a3:
5c:f8:7d:52:1f:31:84:18:45:6d:8e:ca:d3:1e:d0:
aa:91:23:2d:e9:68:3b:59:3d:e1:fe:5d:49:7b:84:
72:e3:05:b8:a3:2f:3e:fb:5c:71:ff:b7:d7:0b:27:
1f:cc:23:7d:4e:5f:9f:31:66:e8:7f:5a:22:5c:e0:
98:cf:97:45:ea:20:cb:39:ea:47:ad:cf:90:75:17:
55:2c:28:03:3c:f3:a4:29:23:c7:95:7c:6f:fe:1d:
aa:1a:a4:cf:eb:cc:cf:19:18:02:24:a0:6c:d3:9e:
4e:53:e4:11:66:9b:87:fa:ac:99:64:63:8e:53:ca:
3f:63:9a:5a:6d:2c:fc:eb:d1:b3:29:9c:88:ef:5c:
11:cf:60:ce:f3:0e:1a:b6:0e:d7:7b:c4:1a:8a:91:
50:5c:61:ed:50:cb:ba:bb:92:e9:39:63:6a:d9:19:
3c:43:da:d7:ff:02:10:6c:47:6a:56:8b:74:f4:d7:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:6A:5B:AF:BD:2A:5B:60:35:CC:16:E0:E5:84:39:6B:01:8E:28
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jmBqW6-9KltgNcwW4OWEOWsBjig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.208.0/22
Signature Algorithm: sha256WithRSAEncryption
63:33:7b:8b:9c:19:85:f8:02:8c:11:15:5e:e8:ad:a8:c9:aa:
52:d7:b5:75:31:3d:91:e4:ba:c3:b3:c6:4d:d7:69:4f:cd:c4:
8e:30:fe:42:87:db:ae:d1:33:bb:d9:e7:8a:c6:e3:35:01:2c:
75:1d:5b:a2:bd:c2:38:b5:2d:ee:fc:cc:43:5b:35:98:0a:b3:
9e:ce:ec:cf:c5:9e:ed:00:86:e3:3e:4f:c4:c8:ea:ac:c2:08:
9d:e4:1e:89:fa:c9:3b:3e:be:cf:0a:fa:81:6e:3c:45:58:4a:
fc:f8:38:c8:48:2c:85:e6:89:c5:8b:06:64:54:06:a6:cd:a5:
86:80:62:9d:76:e1:d6:30:d2:85:1e:8a:17:15:db:0f:d0:ba:
36:a1:3c:d9:5e:2d:73:7e:3a:f6:49:81:b5:03:66:ce:2e:aa:
78:53:d4:a2:59:9a:dd:18:a0:d1:a9:94:e2:34:11:b2:4e:15:
26:19:bc:c3:aa:5e:04:64:f5:cf:5f:f6:e5:09:63:22:43:9c:
ad:dd:60:40:62:d8:7b:8f:dd:a4:a5:59:02:36:32:8b:64:57:
ff:bb:3f:52:1e:60:73:87:bb:c0:c9:31:4d:4d:8e:bb:56:37:
4b:4f:e4:4a:18:51:b7:18:03:75:26:16:bc:4a:ba:14:36:3d:
6d:12:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org