Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jfBKWB3d3Y2cjtdKbFCVY4fKaE8.roa
File: jfBKWB3d3Y2cjtdKbFCVY4fKaE8.roa (raw, json)
Hash identifier: npC2i5gQ5pxmdeuWhPTgBQIz1VUKMR5VEeC5/aESPYs=
Subject key identifier: 8D:F0:4A:58:1D:DD:DD:8D:9C:8E:D7:4A:6C:50:95:63:87:CA:68:4F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01926AE8B64CD8228768DE0FF0032D89FCCB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jfBKWB3d3Y2cjtdKbFCVY4fKaE8.roa
Signing time: Tue 08 Oct 2024 06:54:48 +0000
ROA not before: Tue 08 Oct 2024 06:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 192.71.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:e8:b6:4c:d8:22:87:68:de:0f:f0:03:2d:89:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 8 06:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8df04a581ddddd8d9c8ed74a6c50956387ca684f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:31:29:51:90:d6:67:10:62:b5:c8:8c:55:
1e:7c:92:0a:b4:32:4c:83:8f:e0:94:08:50:c5:ae:
85:9c:91:25:74:44:39:8c:b8:2f:b6:e7:57:c1:a4:
e4:7b:f0:ee:7c:3b:08:4a:5a:a5:3b:bc:1c:be:5c:
a5:b0:ef:0f:71:20:19:3c:ca:f2:de:32:2f:e6:be:
d9:3d:e7:62:e7:ef:38:ae:01:e5:1a:fa:61:e9:e4:
f7:a5:d7:36:66:a6:0a:85:6f:b8:5c:ec:0c:9d:6d:
9b:40:8a:77:11:e2:86:a5:1c:49:ab:9d:bd:07:a1:
d9:0d:12:bd:1f:39:57:47:f2:2b:b2:66:e3:b7:91:
60:c2:b0:cf:3c:1a:10:f3:35:df:c5:5a:71:7b:a2:
8d:05:bf:0a:27:fa:7e:7a:94:d1:c5:8d:1a:5b:65:
3d:e9:1d:93:d7:3b:1a:9a:f7:a5:8a:4e:d4:f2:48:
54:cb:8a:68:a0:78:47:03:31:54:61:27:cc:d2:91:
3d:f8:6c:d7:35:86:3a:18:6f:96:58:2e:6d:ce:1e:
cc:c2:76:8e:9c:c2:cd:76:e7:b1:b6:c3:3a:31:94:
de:bd:9c:9f:79:60:f7:4d:51:14:7c:7f:d8:53:94:
27:c9:71:9e:dd:3c:28:b0:2e:5c:9c:2c:29:04:be:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F0:4A:58:1D:DD:DD:8D:9C:8E:D7:4A:6C:50:95:63:87:CA:68:4F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jfBKWB3d3Y2cjtdKbFCVY4fKaE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:07:c3:6d:6e:a3:b4:ad:92:9a:72:5d:c2:6c:c0:95:1d:85:
78:cf:c5:48:e6:fc:50:c3:3f:fe:f7:af:e0:0d:ee:2c:be:6d:
e7:d4:11:d2:0a:58:02:96:87:35:bf:be:7a:56:1f:43:4e:58:
e4:ad:20:0c:48:0e:1b:e1:e7:d1:45:ed:9d:37:54:4c:2c:c7:
b6:a3:cc:39:fe:eb:22:ce:34:22:ea:6e:19:d8:11:69:83:0c:
93:ad:fc:2c:5a:95:90:6b:1e:84:47:92:c3:d0:5e:df:48:2d:
6f:6e:71:9f:f7:77:12:a9:16:7a:d7:2a:0d:90:23:21:46:70:
c2:2d:97:ae:cc:41:af:8e:4a:7c:97:d9:28:42:62:30:9e:f3:
d4:ae:e5:21:c6:07:84:b5:c5:fc:21:40:76:74:a8:29:08:94:
8d:c7:67:f2:44:2a:d5:9a:40:cd:4b:7d:16:00:f6:9a:1e:13:
8a:33:47:41:15:05:8f:76:32:c7:34:86:9c:41:57:3d:e4:e7:
fa:7e:56:3e:3b:b4:eb:9b:d3:87:04:ca:b2:40:85:28:bf:90:
3d:74:d6:57:dd:6e:ce:22:a3:e8:86:d8:4c:cc:e5:b3:6a:c9:
04:61:ca:c4:56:af:15:c4:e1:26:4d:00:7d:98:d8:2b:bd:ea:
1d:c5:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:58 2024 by rpki-client on console-ams.rpki-client.org