Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/Jj3AC1X5UkdFLgtZHCeS-hArUZQ.roa
File: Jj3AC1X5UkdFLgtZHCeS-hArUZQ.roa (raw, json)
Hash identifier: hKKLWNkn3MNPm/EeBUCnpzo+sFIDPGsnzAaUhtqyt64=
Subject key identifier: 26:3D:C0:0B:55:F9:52:47:45:2E:0B:59:1C:27:92:FA:10:2B:51:94
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 018CC500F3C1B643C1174280A610FACDA850
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/Jj3AC1X5UkdFLgtZHCeS-hArUZQ.roa
Signing time: Mon 01 Jan 2024 12:30:23 +0000
ROA not before: Mon 01 Jan 2024 12:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205814
IP address blocks: 185.249.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f3:c1:b6:43:c1:17:42:80:a6:10:fa:cd:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=263dc00b55f95247452e0b591c2792fa102b5194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:d2:60:68:6b:7e:22:da:bf:77:ae:8d:58:
c0:04:19:74:bc:16:be:ce:36:d4:66:95:5a:6f:10:
b9:a3:b5:4a:8f:fe:94:05:00:d0:fe:87:81:3c:75:
bf:a2:75:1a:76:28:35:17:94:52:aa:a0:31:be:91:
fe:f3:0f:3c:16:e1:1d:27:fc:34:f6:dd:b5:7a:cc:
df:ce:fc:59:78:b5:81:2f:ee:74:2a:f4:96:a6:9f:
33:bf:47:31:51:77:3a:08:a4:f4:20:b8:68:0c:95:
c2:77:bf:91:4a:ee:89:1f:58:28:ed:05:62:69:8a:
f1:ed:2f:ad:92:42:d0:2f:33:13:93:91:cf:50:38:
4d:5c:df:2a:ba:dd:4c:e7:73:50:2f:15:01:84:18:
e5:be:2b:0e:3c:c7:09:e4:90:3e:82:f1:76:09:6e:
f1:57:e1:43:b2:d4:ac:5a:ad:ba:20:84:a7:44:08:
28:f3:22:3a:03:99:fb:fe:58:05:38:34:de:83:27:
9f:9a:6f:45:a9:dc:44:98:89:9e:6a:6d:b2:46:56:
cb:24:53:73:a1:56:57:c9:fb:3a:fd:2e:d2:b7:5e:
93:0d:0a:e6:e5:fa:4d:3e:40:1b:cd:89:b8:cd:a1:
d4:6c:8d:cf:2d:e4:61:6c:33:e4:0f:39:fd:07:82:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:C0:0B:55:F9:52:47:45:2E:0B:59:1C:27:92:FA:10:2B:51:94
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/Jj3AC1X5UkdFLgtZHCeS-hArUZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.159.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2d:7a:5f:7e:1a:a7:00:38:1e:37:34:49:23:a4:9c:ee:9a:
36:7e:a7:1b:9c:0a:d1:69:75:d3:a1:fa:07:ef:02:88:5d:d2:
0e:e8:4a:3e:3e:7c:cd:50:cf:53:be:04:4e:1b:f5:42:8d:89:
79:6d:49:82:5a:bb:6f:66:90:4a:60:5c:fd:59:fa:81:34:a0:
f4:9e:e3:d0:84:4e:ae:40:e5:f7:47:9f:02:97:54:fb:10:be:
f4:3b:3e:90:a2:17:ea:02:2d:a4:7d:22:25:68:cc:4c:28:91:
ee:99:cf:af:73:8c:fe:69:8e:a5:52:5c:af:4e:e2:02:63:5d:
26:d7:c4:9a:5d:85:75:08:da:d7:ef:8a:b8:94:f1:8a:4e:86:
11:47:f6:e9:9c:5e:e9:ff:b2:78:17:c2:3e:19:fd:68:da:1b:
8e:d8:36:b8:5c:16:6a:7b:ea:40:c6:ee:d1:49:02:30:88:80:
72:d4:ae:b1:43:de:7a:bd:9d:45:ae:10:22:eb:1a:84:81:d7:
7b:0b:76:99:63:0a:5e:f5:46:98:26:5c:d3:7f:49:d8:1d:c0:
50:ad:e8:2a:2d:e8:13:93:1c:f0:f7:bf:a6:31:2b:4e:81:e8:
ca:2f:23:ef:59:85:b2:5e:54:24:93:dd:45:48:63:7e:3a:48:
55:a6:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:29 2024 by rpki-client on console-ams.rpki-client.org