Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/JOTAHPuuVCpVRI1W8RQhBRy-iGQ.roa
File: JOTAHPuuVCpVRI1W8RQhBRy-iGQ.roa (raw, json)
Hash identifier: U7pRBipp/fg3lAqSY8H5YHaO3VwaaWPieMeh7p+tMdw=
Subject key identifier: 24:E4:C0:1C:FB:AE:54:2A:55:44:8D:56:F1:14:21:05:1C:BE:88:64
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 018CC5DBEF4CCDEA1411C55738A8C1EF541E
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/JOTAHPuuVCpVRI1W8RQhBRy-iGQ.roa
Signing time: Mon 01 Jan 2024 16:29:34 +0000
ROA not before: Mon 01 Jan 2024 16:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8455
IP address blocks: 109.71.50.0/24 maxlen: 24
109.71.49.0/24 maxlen: 24
109.71.48.0/24 maxlen: 24
109.71.51.0/24 maxlen: 24
109.71.53.0/24 maxlen: 24
109.71.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ef:4c:cd:ea:14:11:c5:57:38:a8:c1:ef:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e4c01cfbae542a55448d56f11421051cbe8864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:41:85:fc:1d:9f:ef:2a:7a:f1:5b:ce:70:
4f:15:08:94:91:0d:d4:3c:fc:7a:39:5e:29:34:d9:
d5:7c:ee:51:1a:ad:f1:87:46:1b:c3:6b:47:2e:08:
36:24:28:eb:cf:a6:6b:6f:63:6d:a6:e9:1c:0a:fb:
77:34:7d:3d:a8:6a:fd:5f:1a:ae:43:ec:3a:58:e7:
50:1e:9d:72:1f:9d:32:52:f3:30:8e:ea:90:a8:ca:
20:5e:70:08:e8:c7:ec:1d:d3:8d:0e:34:c9:e1:11:
80:b4:b8:49:c2:20:24:68:94:30:60:8e:61:4d:31:
3b:33:c2:f7:23:2b:96:f0:a4:f9:d3:4f:93:70:a8:
2b:4d:19:fb:3d:b3:1e:e5:c6:ec:05:69:20:69:b6:
d3:35:d3:2f:dd:ac:85:ee:ec:8a:11:2e:a1:69:b9:
2f:f7:89:e5:1b:37:45:b0:23:65:36:5b:63:58:6a:
6d:cb:60:ef:43:eb:49:6a:e1:d3:a4:2f:1b:26:1c:
e4:d4:ae:3c:d7:1c:2a:f8:fb:44:48:15:dc:64:1e:
fa:f1:c4:4a:eb:9b:04:94:51:47:e9:83:78:e3:c2:
80:63:fc:c8:dc:da:7f:cc:f6:94:b2:0f:94:b2:31:
37:2e:1d:6f:cb:be:0c:55:e1:d2:b9:6b:1a:2f:54:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:C0:1C:FB:AE:54:2A:55:44:8D:56:F1:14:21:05:1C:BE:88:64
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/JOTAHPuuVCpVRI1W8RQhBRy-iGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.48.0-109.71.53.255
Signature Algorithm: sha256WithRSAEncryption
8f:cf:f4:ea:7e:45:16:cb:f1:93:cb:aa:62:00:e1:c2:af:24:
65:ba:4f:f2:8a:0f:21:7a:e3:03:df:8c:01:5e:51:47:43:3e:
48:06:d9:2a:ef:5e:a0:56:eb:c9:ce:2b:34:7f:a7:2a:91:91:
0e:86:62:81:a3:ae:7b:8c:ee:9f:3e:c1:d5:fa:b2:e5:a2:59:
0e:ce:fa:cb:16:ca:9e:37:82:19:98:9f:c5:19:6d:af:a9:28:
2c:4e:fe:0e:41:2a:9f:b2:b0:b3:37:a0:26:2e:42:f8:fd:a5:
6b:72:d0:63:79:c3:aa:8f:dc:e2:5b:26:ee:dd:5a:6e:48:30:
76:7f:75:cb:73:4c:51:92:aa:eb:0f:4b:a1:e9:1b:2c:9f:4a:
b3:27:2c:f7:3a:70:b9:d6:1b:0e:b0:92:3a:1c:4f:43:fc:17:
ca:89:95:40:74:ae:c1:60:27:ee:ad:41:42:e6:e2:fa:9c:a8:
da:a6:6c:ec:a8:65:4e:7f:f8:72:5a:fb:9a:ec:c1:04:0a:24:
d7:a2:da:da:78:bc:73:21:27:65:09:ea:b1:64:e4:d9:1f:2c:
f2:3c:38:9f:db:79:b2:70:87:6f:e9:92:5e:1a:53:53:ee:1d:
58:99:61:c4:57:74:be:c2:0a:f1:2c:9f:83:60:03:bb:d6:19:
b2:be:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:20:59 2024 by rpki-client on console-ams.rpki-client.org