Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/JMqQz0LyPug8Lw4hPe9xOo4XAyU.roa
File: JMqQz0LyPug8Lw4hPe9xOo4XAyU.roa (raw, json)
Hash identifier: 3JW6orhnnIvCohVO2P4d9w/jJ8zYGWP8qYjsk3B7usw=
Subject key identifier: 24:CA:90:CF:42:F2:3E:E8:3C:2F:0E:21:3D:EF:71:3A:8E:17:03:25
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019220A04C9B52B0D48CDF7910613ED0FE8B
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/JMqQz0LyPug8Lw4hPe9xOo4XAyU.roa
Signing time: Mon 23 Sep 2024 20:43:49 +0000
ROA not before: Mon 23 Sep 2024 20:43:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35372
IP address blocks: 109.95.65.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.68.0/24 maxlen: 24
109.95.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:20:a0:4c:9b:52:b0:d4:8c:df:79:10:61:3e:d0:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Sep 23 20:43:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24ca90cf42f23ee83c2f0e213def713a8e170325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:f8:6b:6e:e8:ba:0b:5c:99:45:90:fb:46:
de:28:fa:7a:c2:e3:83:7c:ae:54:2d:62:6d:f1:b7:
67:d5:df:20:68:84:f7:72:80:09:ad:a5:d9:0f:e5:
c2:9d:42:69:eb:c7:0d:25:f7:06:68:86:70:a0:f5:
fb:03:db:46:77:38:ca:e6:a6:fc:d7:0f:ea:17:8a:
d6:9e:db:37:1e:14:b4:99:f1:b6:6a:a6:6e:5c:ec:
56:c5:cd:37:cf:27:e2:5b:1c:aa:9f:d6:ad:37:8e:
ce:bb:45:3b:a6:c7:1f:5c:a5:1f:f4:70:db:3f:f0:
f1:3b:29:87:13:39:01:b8:e1:f5:a0:cf:58:03:7e:
a2:47:43:c5:d0:f1:0d:25:f6:27:ec:40:e0:46:84:
c4:0b:9e:04:8b:9d:fc:fd:47:03:d1:82:cb:17:68:
8e:22:0d:26:5f:7a:6e:6f:da:ba:87:69:8b:a4:d5:
3b:8d:29:ea:af:b0:c5:53:4a:1e:63:76:a1:db:af:
e3:c6:58:4c:32:33:34:38:b7:48:a9:86:e2:a5:8e:
de:93:fe:55:ba:49:71:6a:8a:fc:ba:7d:05:9e:11:
0f:86:77:99:e6:d9:e7:e0:45:55:12:57:04:d7:01:
b8:8e:c1:1f:65:40:9f:e4:c5:47:3e:f4:19:ad:2c:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:90:CF:42:F2:3E:E8:3C:2F:0E:21:3D:EF:71:3A:8E:17:03:25
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/JMqQz0LyPug8Lw4hPe9xOo4XAyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.65.0-109.95.68.255
109.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0f:8f:e4:0d:1f:dc:93:38:f7:1c:74:3a:97:59:fc:a4:bb:
c5:0b:6d:fd:e1:78:87:9c:7c:5f:1e:6d:4c:a1:c0:0c:f4:8a:
1b:b6:5d:96:d1:55:9c:c4:a1:49:c5:09:c7:be:89:e6:c0:0e:
35:e6:7f:84:f2:e0:22:be:35:ff:85:5c:37:f6:e5:69:5e:1a:
1c:c6:5b:c3:0d:fa:70:05:cd:56:39:5e:8a:5b:01:d1:91:82:
86:cc:67:3d:20:d8:60:bf:8a:52:b2:de:0f:fa:4b:5a:74:40:
f8:71:4f:7c:b4:af:eb:46:be:c1:ab:93:19:c8:28:c9:94:82:
5a:c2:70:15:76:b0:45:b8:d6:7f:c6:40:b6:5b:11:be:f7:35:
b3:21:f6:43:f8:fb:6a:b8:25:cf:d0:89:40:5a:fa:a5:21:c8:
cf:5e:3e:ec:64:c5:fc:f7:dc:3d:0b:89:90:f6:32:ba:ac:03:
cd:85:e7:d7:2d:6e:3b:eb:d9:f0:a7:c2:54:86:f7:57:59:0c:
4a:5d:b3:83:1d:1b:88:d4:bd:f8:e8:66:cb:9c:6c:ca:01:d6:
2b:fb:d1:d2:65:7e:20:c1:eb:e6:67:2f:c3:c6:5e:26:97:fe:
ba:83:a2:2f:35:e7:64:f0:f9:97:de:90:3f:c0:03:4d:76:a9:
3a:da:3b:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:29 2024 by rpki-client on console-ams.rpki-client.org