Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/JJxGUTgif6sDNrrLg_4fBY2fBRk.roa
File: JJxGUTgif6sDNrrLg_4fBY2fBRk.roa (raw, json)
Hash identifier: nf1xZ/PcFC8ntITgxhMvgeUATboOWAsDg27vm5oU020=
Subject key identifier: 24:9C:46:51:38:22:7F:AB:03:36:BA:CB:83:FE:1F:05:8D:9F:05:19
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 018F5FF5D23EFC7F72460912F853EAD02590
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/JJxGUTgif6sDNrrLg_4fBY2fBRk.roa
Signing time: Fri 10 May 2024 00:44:56 +0000
ROA not before: Fri 10 May 2024 00:44:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211709
IP address blocks: 188.125.162.0/24 maxlen: 24
193.3.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5f:f5:d2:3e:fc:7f:72:46:09:12:f8:53:ea:d0:25:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: May 10 00:44:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=249c465138227fab0336bacb83fe1f058d9f0519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:05:a3:a5:57:14:4a:5e:67:b0:1f:54:ff:
27:8a:55:0f:82:35:a5:bf:d8:85:56:ba:0b:76:36:
c2:d7:4f:fb:19:fd:6e:3e:4c:75:88:6b:e2:1d:ec:
9e:10:0b:b3:81:f7:04:f3:ff:88:f1:af:87:11:3f:
5d:4b:58:64:8d:93:dc:28:35:fb:31:23:8a:f2:6f:
8f:d6:dc:ed:39:3c:2d:db:d7:f4:1f:61:ad:95:84:
61:d1:39:19:16:b8:cb:46:41:a1:07:94:91:d3:36:
21:1b:e8:4c:67:1f:24:15:bb:b3:11:99:fd:01:8c:
c2:68:a7:2f:d7:80:c3:e7:d7:2c:c5:dd:54:77:b8:
ae:3a:46:30:79:b0:54:5f:8a:3b:c3:06:7c:40:f2:
a2:5e:7d:2b:fa:9d:26:b9:20:14:5d:0a:1c:1c:64:
a1:64:bf:38:09:32:e7:bf:bc:55:29:4c:ba:8e:90:
3f:62:c6:61:ee:4d:04:c3:25:2a:c4:65:2c:f4:f6:
3f:6d:88:10:f5:c4:12:64:7e:a8:bc:b4:db:50:3f:
33:7f:96:b0:e2:fb:f3:74:34:76:21:27:59:64:24:
95:6d:5e:9d:57:00:f4:73:8b:01:64:82:71:1b:41:
df:ed:64:4b:20:45:d6:9f:28:49:b0:13:67:68:20:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9C:46:51:38:22:7F:AB:03:36:BA:CB:83:FE:1F:05:8D:9F:05:19
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/JJxGUTgif6sDNrrLg_4fBY2fBRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.162.0/24
193.3.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:12:99:15:53:e1:47:44:91:f4:f7:80:98:ab:45:62:02:90:
5c:4f:3c:ed:60:5a:d4:fd:13:1f:c4:9b:a9:08:96:ce:81:aa:
7d:23:a8:6c:f6:6f:aa:4f:a3:9f:6a:5d:6d:66:d0:5f:6e:a6:
3c:f7:7d:af:90:7a:cf:fe:f4:81:64:95:b1:50:cc:c8:4e:de:
de:0b:e4:b4:b9:a5:26:1a:a7:1e:24:9f:71:69:53:24:65:28:
35:75:78:d2:00:b6:88:f7:a2:92:a0:2a:47:8f:0c:52:3b:49:
e2:71:a8:45:3a:bd:cf:da:46:a5:6d:a8:b3:56:3d:6a:72:dd:
35:f3:1f:8c:a0:19:91:20:88:57:1b:ad:ef:fb:0e:83:9e:a4:
e6:9f:91:57:1b:fe:ab:80:2c:89:7a:2f:ee:83:4b:95:a6:e5:
c3:c8:21:97:e5:dd:01:b6:02:cf:65:6f:64:69:f2:57:79:ed:
aa:63:43:30:3d:47:1b:d6:7b:da:76:9e:d6:22:21:eb:38:66:
23:c7:3a:36:a9:30:cf:a9:e6:62:03:ef:3f:1a:d7:85:46:39:
71:e6:15:3c:dc:2a:40:e7:db:42:48:88:d9:16:7c:15:18:c9:
58:8a:03:02:42:c0:75:05:0b:1d:ca:26:ff:d6:5c:96:c3:57:
e5:97:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:08 2024 by rpki-client on console-ams.rpki-client.org