Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JUBdtpDLwU2rn-drzBv5r284NwI.roa
File: JUBdtpDLwU2rn-drzBv5r284NwI.roa (raw, json)
Hash identifier: Jv5mz9WVgTz8YWhHqHFbfPzkugLvzvD7kwQffPIUMKo=
Subject key identifier: 25:40:5D:B6:90:CB:C1:4D:AB:9F:E7:6B:CC:1B:F9:AF:6F:38:37:02
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8027A03EBD6A8785D0498693A35F385
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JUBdtpDLwU2rn-drzBv5r284NwI.roa
Signing time: Tue 02 Jan 2024 02:30:54 +0000
ROA not before: Tue 02 Jan 2024 02:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41378
IP address blocks: 45.131.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:7a:03:eb:d6:a8:78:5d:04:98:69:3a:35:f3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25405db690cbc14dab9fe76bcc1bf9af6f383702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:cd:33:11:ac:67:e6:69:fb:73:2b:be:e5:
cd:e7:f8:de:4e:86:a8:10:09:b2:74:cc:80:1d:05:
53:27:45:0c:31:5f:08:12:88:b2:10:87:35:88:8b:
5a:88:88:e0:0c:bf:3d:44:02:5f:99:df:c4:4f:47:
9b:24:87:d2:0c:e1:15:6e:36:37:aa:3e:a2:61:33:
1b:87:d7:59:a2:dc:ff:a0:44:64:0f:f7:ce:88:ab:
a3:fc:dd:0a:91:8e:2f:85:74:51:b1:99:d8:c1:7b:
6d:5d:75:82:e0:61:53:9c:f1:12:af:45:11:4b:37:
ce:b0:e6:1a:87:33:ef:42:87:a6:8d:c6:db:9f:fd:
33:b8:2c:81:aa:a8:ef:94:ed:36:b2:fb:7a:15:b0:
71:e7:52:3f:23:1d:ad:b3:28:9a:ec:24:7f:bb:af:
ba:80:4b:77:31:74:4a:69:10:9f:b4:60:39:bb:7b:
8e:5a:93:aa:a4:62:cc:f2:9a:9c:fc:c4:11:f6:58:
ba:62:3b:21:20:80:94:1d:df:6b:b7:8d:b4:5c:87:
db:fa:11:bc:83:62:f5:23:ed:12:87:fb:5a:a5:5b:
47:d9:fb:1f:12:e9:e8:d5:56:67:60:ec:01:8d:01:
4f:bb:95:75:5c:b3:bf:82:fc:e8:23:c7:12:f3:ee:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:5D:B6:90:CB:C1:4D:AB:9F:E7:6B:CC:1B:F9:AF:6F:38:37:02
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JUBdtpDLwU2rn-drzBv5r284NwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.132.0/23
Signature Algorithm: sha256WithRSAEncryption
48:70:42:77:28:52:2f:ba:ac:2e:a4:1b:ec:94:10:76:c2:f8:
fd:81:71:61:ea:f3:58:83:59:36:f5:0c:68:f7:68:34:9e:55:
3d:d2:28:14:20:cb:6a:02:90:56:7c:78:67:50:2c:1f:e0:ab:
99:3b:0a:79:83:ea:5c:87:ed:82:65:fb:59:ab:ae:dd:6d:5d:
ea:dd:03:23:22:79:5d:cc:e3:75:95:f0:e8:a3:8c:07:5d:ce:
ed:15:db:b6:80:13:50:93:14:f9:c1:aa:48:36:9a:30:7b:1e:
40:d4:de:a6:57:d0:3c:0d:84:d3:f5:8d:12:d7:e3:7b:1e:ba:
85:ee:fb:3c:ce:22:09:98:48:93:8c:a6:9a:92:d4:ea:29:4e:
c7:e1:cf:02:62:8e:2e:d4:5b:84:37:bf:69:6c:54:d5:2d:61:
69:06:71:03:8f:62:91:a8:ad:40:20:9f:6c:2a:2e:e9:bf:81:
6c:fb:c4:00:9c:91:c5:d5:4d:99:87:1c:ab:7c:1c:3b:ef:98:
60:46:51:75:e0:ca:f8:b6:1d:dc:cf:ef:cf:c6:d3:d6:9c:4d:
c3:a3:91:9e:5a:3a:ec:68:1a:8a:ac:92:6d:cd:dc:e8:fe:17:
1f:60:f8:aa:0c:f4:64:fb:19:2d:68:6c:c6:de:66:51:0e:43:
21:12:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:02:38 2024 by rpki-client on console-ams.rpki-client.org