Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/jvd7Z3BdwigbMTMHDj-A34nD304.roa
File: jvd7Z3BdwigbMTMHDj-A34nD304.roa (raw, json)
Hash identifier: h34bBdDaxJdu+4ScMYLDDVl2bWM2tN5ZSvOHa479dIY=
Subject key identifier: 8E:F7:7B:67:70:5D:C2:28:1B:31:33:07:0E:3F:80:DF:89:C3:DF:4E
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F07303EB6AD317126CF26FF899379
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/jvd7Z3BdwigbMTMHDj-A34nD304.roa
Signing time: Mon 01 Jan 2024 14:30:37 +0000
ROA not before: Mon 01 Jan 2024 14:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204281
IP address blocks: 194.12.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:07:30:3e:b6:ad:31:71:26:cf:26:ff:89:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ef77b67705dc2281b3133070e3f80df89c3df4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:53:2d:c9:c3:d8:1a:3d:fd:9f:5f:c8:5a:
a5:dd:2a:17:b7:29:3c:14:cf:74:28:76:e6:c6:f1:
30:4b:87:59:6c:ae:2b:f9:0c:74:3f:64:b0:ee:8e:
eb:0e:2d:e7:17:eb:73:9e:a1:2f:ef:96:b1:b5:a6:
22:66:34:4f:8f:c4:0e:f1:90:7f:c5:35:26:05:a5:
c9:86:fd:ca:b3:e6:1c:eb:2c:9e:44:4b:6d:89:20:
0d:61:6b:f2:c3:95:f7:da:63:c1:0c:aa:8e:d7:f2:
b9:90:40:5a:a8:0b:63:32:55:d7:c5:0e:7d:6e:50:
bc:3d:52:6e:cd:62:3d:ec:6c:88:e2:de:c7:5b:a4:
00:25:44:73:c2:e0:b7:36:d8:c5:d7:e3:b8:1c:90:
d0:48:29:ab:e7:0d:cb:a2:6b:55:0f:85:fc:37:d8:
d4:fe:50:2a:25:f0:6b:1c:62:4e:fb:94:ea:fa:b6:
4e:bf:b2:94:da:8b:1b:8f:7a:6c:4b:1c:d3:70:7a:
64:72:59:00:a5:c3:bd:eb:6b:e2:8c:68:89:37:1c:
a9:1a:ec:d3:a1:84:59:16:a2:e3:a5:e6:a1:50:8d:
76:7d:42:f7:9a:65:98:49:41:c7:4f:16:26:b6:47:
34:1b:7c:14:4a:75:fe:8c:d3:fb:4f:f0:f7:e5:52:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:7B:67:70:5D:C2:28:1B:31:33:07:0E:3F:80:DF:89:C3:DF:4E
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/jvd7Z3BdwigbMTMHDj-A34nD304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.237.0/24
Signature Algorithm: sha256WithRSAEncryption
00:86:bf:c0:b0:2f:0c:a9:9c:07:3e:7e:8f:78:53:13:ad:c7:
2e:a9:2d:91:ff:d0:39:31:36:b0:28:cd:1a:ad:57:b8:86:ad:
61:8d:9a:b4:9e:da:8e:02:50:42:04:7a:9b:39:84:91:71:85:
12:80:68:8f:22:3b:7b:a6:9c:b6:08:fb:7c:6e:64:cc:4b:ca:
1c:12:b1:cc:18:0b:50:65:99:f8:e3:af:1a:16:78:ab:7a:a1:
f8:d4:de:14:af:33:84:b2:d8:4e:ad:79:44:dc:ee:f5:8d:68:
c5:57:b1:5d:8b:fa:87:e5:d9:52:2f:29:8a:f9:c4:15:61:a8:
83:3c:f0:c9:f1:e3:e7:68:df:ba:ad:06:8a:76:be:11:a2:49:
c4:2e:5e:df:41:28:66:32:ae:f2:64:31:0c:9c:23:b8:a4:fa:
ae:f5:3c:1e:4a:8e:45:7a:13:07:e9:78:1b:5f:19:83:be:6c:
85:9d:7d:1d:f0:5e:c7:61:09:c2:8e:5b:1d:f1:8e:16:8d:ca:
11:50:cb:48:71:23:c7:a9:4d:20:2a:ec:f4:c1:32:c5:02:c5:
76:39:fb:1f:f4:39:4b:2c:c7:71:29:31:70:83:88:6d:88:f0:
00:39:ac:13:1d:c9:92:27:b7:21:65:29:37:74:de:ff:85:a6:
06:1c:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:37 2024 by rpki-client on console-fra.rpki-client.org