Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JXZUA4hthGPvYlHPkeIE5QZ52eU.roa
File: JXZUA4hthGPvYlHPkeIE5QZ52eU.roa (raw, json)
Hash identifier: cb0GzHAFS5+PKJixddg3Y4KPAohoGdG0cgnU50otxpA=
Subject key identifier: 25:76:54:03:88:6D:84:63:EF:62:51:CF:91:E2:04:E5:06:79:D9:E5
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93F033F58C6BD818A6DA96E6A9E84
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JXZUA4hthGPvYlHPkeIE5QZ52eU.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197769
IP address blocks: 85.187.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3f:03:3f:58:c6:bd:81:8a:6d:a9:6e:6a:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25765403886d8463ef6251cf91e204e50679d9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:18:f4:43:97:48:a0:a0:94:b2:45:88:be:
03:4d:e5:7c:55:29:3a:eb:bc:c6:9f:6b:d4:c5:8a:
29:97:69:d0:ae:b1:85:90:ce:0a:a9:ed:9c:56:13:
d1:60:28:85:ac:70:bd:42:58:cc:20:56:ec:48:d9:
66:61:dc:44:97:73:d2:0d:52:b0:e5:cb:79:90:a4:
0f:3e:6d:7c:ca:ec:25:90:2a:82:56:c6:9b:61:18:
79:67:15:45:12:82:30:28:f5:62:e9:d9:2d:8a:84:
da:f2:67:81:6f:7b:d3:9a:8f:2c:4c:f9:5b:51:da:
e4:94:78:df:a6:ed:83:07:0b:27:2e:3b:83:f9:d1:
bc:e9:d6:9d:6e:9a:d2:ca:ba:b0:4e:fe:94:60:02:
0a:70:7e:de:41:8b:05:90:21:c2:df:06:7a:c3:a6:
3c:1b:b2:02:3b:ab:b3:50:98:eb:25:f8:85:83:51:
f8:2a:57:74:fe:ce:b4:0b:67:35:f4:9e:bb:71:69:
9b:90:b8:00:a0:7e:17:b7:31:c2:02:a5:bf:f6:3f:
8c:1a:67:df:50:4a:19:9f:9c:5c:c8:76:32:51:59:
78:83:0e:38:ad:fc:56:f7:2d:b7:5d:7f:1e:b6:cc:
dc:67:fe:70:42:99:7b:f9:59:13:b0:b2:eb:12:20:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:76:54:03:88:6D:84:63:EF:62:51:CF:91:E2:04:E5:06:79:D9:E5
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JXZUA4hthGPvYlHPkeIE5QZ52eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0f:04:4f:29:c5:40:1b:6a:f3:d7:6f:a6:27:5b:6d:31:0e:
62:d7:43:2d:55:b6:87:01:f1:91:48:99:e7:78:7c:38:d8:bd:
f6:36:10:de:8b:a8:31:06:d4:ef:a2:44:c2:2e:14:b6:ab:a7:
c1:aa:a0:25:65:1d:67:b7:1d:29:29:9a:8e:8d:ea:92:37:2b:
0e:c5:12:a7:bc:de:c4:1f:c6:91:fa:b5:e0:a2:15:23:5b:fd:
4a:5f:ea:d1:a2:2f:f4:d8:47:91:73:b4:07:c5:9b:1f:42:cf:
e9:7b:21:d8:35:92:17:6c:b2:60:1a:35:cc:c5:76:62:fd:61:
55:e4:e3:9c:3a:dd:26:c6:bf:50:a5:af:42:3c:b9:2c:42:ac:
98:ab:7f:09:8d:5d:f5:92:37:13:e6:51:6f:4b:11:23:02:f9:
1f:54:c7:94:96:4f:8c:9c:e5:b1:84:a1:db:38:ec:27:fd:7b:
f1:c0:34:9e:09:aa:54:66:e3:53:fc:a8:f9:54:3f:6f:14:04:
76:0a:33:fb:ff:2d:05:a2:4c:d4:3c:ad:71:24:33:93:85:27:
03:ff:9f:37:58:b1:6e:43:2c:b1:8f:2a:c6:b9:ea:5f:25:a9:
78:e1:6a:d3:c6:c2:b3:7a:19:c0:5c:e4:67:cc:3d:f2:07:8b:
1c:ee:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:58 2024 by rpki-client on console-fra.rpki-client.org