Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/JiXB4jx1FapkKlRsMLRNDskIOFY.roa
File: JiXB4jx1FapkKlRsMLRNDskIOFY.roa (raw, json)
Hash identifier: hLgU/7YzsylLP8vNUl9bD00bW6w2bfMInRGrwdluhxA=
Subject key identifier: 26:25:C1:E2:3C:75:15:AA:64:2A:54:6C:30:B4:4D:0E:C9:08:38:56
Certificate issuer: /CN=0bb7a29b255451e61bc42c8b9ae4943f71696ccf
Certificate serial: 018CC6B9399D9324022E4F51B00EDC494B02
Authority key identifier: 0B:B7:A2:9B:25:54:51:E6:1B:C4:2C:8B:9A:E4:94:3F:71:69:6C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/JiXB4jx1FapkKlRsMLRNDskIOFY.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212077
IP address blocks: 185.113.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/C7eimyVUUeYbxCyLmuSUP3FpbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/C7eimyVUUeYbxCyLmuSUP3FpbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:39:9d:93:24:02:2e:4f:51:b0:0e:dc:49:4b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb7a29b255451e61bc42c8b9ae4943f71696ccf
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2625c1e23c7515aa642a546c30b44d0ec9083856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:d4:c3:85:15:52:60:cc:bb:0f:3f:dd:51:
f7:e5:0b:08:4d:69:18:f2:61:4a:9e:12:72:b5:f5:
ac:69:34:05:14:c4:9c:7e:4f:67:dc:4f:93:2b:39:
2c:7a:75:66:76:f6:9c:1b:d4:41:a8:da:a5:31:7f:
71:c0:d3:f8:90:1d:85:30:f1:43:d0:3e:e1:f3:a5:
c5:53:b7:a4:e8:2c:0a:62:3d:8e:33:1a:a7:78:05:
94:6e:cc:3f:8a:3e:40:88:dc:f8:dc:86:88:76:b0:
af:fc:26:c9:85:97:a7:54:f7:68:36:65:3e:bc:ee:
a1:65:1d:18:3f:c3:f3:a8:dc:4f:62:16:e1:24:ff:
6d:c2:93:83:8d:bf:56:83:19:a7:a7:bf:84:6a:aa:
8b:40:6f:23:aa:f8:1b:9a:ff:c2:0f:0f:d1:d8:e8:
8d:e2:d4:d5:91:bc:56:61:16:c1:34:85:68:50:5f:
9e:40:34:a2:25:6d:3d:2a:ec:ca:81:48:6f:e8:e6:
1c:dd:40:d0:b8:e1:38:a9:3c:ec:04:c0:46:23:3d:
67:f9:83:c7:08:ad:76:a0:a8:e9:15:f5:3c:20:15:
79:a8:19:d1:2e:3e:45:d8:b0:aa:24:52:55:05:59:
49:56:16:25:de:73:27:c2:5e:0f:d9:3a:5a:25:db:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:C1:E2:3C:75:15:AA:64:2A:54:6C:30:B4:4D:0E:C9:08:38:56
X509v3 Authority Key Identifier:
keyid:0B:B7:A2:9B:25:54:51:E6:1B:C4:2C:8B:9A:E4:94:3F:71:69:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/JiXB4jx1FapkKlRsMLRNDskIOFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/C7eimyVUUeYbxCyLmuSUP3FpbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.10.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d5:83:05:4b:3a:5d:38:ff:e8:ee:48:41:3b:ca:4b:29:e6:
70:ae:4a:46:9e:96:1c:94:52:db:3c:d6:9f:0b:72:7d:8c:b0:
62:b5:64:bf:33:20:e5:89:6c:cd:ca:3a:e2:d1:b9:45:2a:76:
50:a2:75:96:8d:8a:10:8c:a7:eb:e7:19:25:67:7c:bc:c3:7a:
a5:c8:77:83:da:a4:60:60:03:41:8e:d8:bb:ac:3b:49:80:2a:
69:93:e6:8d:8a:55:44:ae:e3:48:66:14:68:40:4e:66:1f:ba:
06:da:6d:1d:d4:09:c9:df:57:12:19:75:62:32:71:70:35:53:
3f:52:00:c4:bf:54:59:56:84:fd:0b:91:55:20:09:0a:cc:48:
dc:ae:80:41:51:60:35:b3:8d:fa:d2:77:a2:02:1f:98:6b:8d:
dd:3f:f2:2e:06:c2:e5:9f:60:c4:e5:72:ae:7d:f3:5d:1c:fb:
e8:cb:32:82:a1:83:da:06:8a:e8:f6:cf:44:3a:86:b7:27:76:
6b:31:ff:4c:fa:aa:2a:89:a7:a6:58:62:2d:3b:4a:62:30:af:
a5:2c:0d:cb:6d:04:d4:db:57:72:e9:7c:6a:ff:3e:a7:f1:78:
38:c1:da:85:c1:02:df:bb:cb:54:f1:45:39:82:73:ab:06:5a:
fb:c1:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:03:32 2024 by rpki-client on console-ams.rpki-client.org