Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/jgUtYxCNBzme_hf7ORI1H6od-NQ.roa
File: jgUtYxCNBzme_hf7ORI1H6od-NQ.roa (raw, json)
Hash identifier: MuVeLc6m0Ekw9RZUH5Ex+TmrvIngAziiWX6WduSiNSE=
Subject key identifier: 8E:05:2D:63:10:8D:07:39:9E:FE:17:FB:39:12:35:1F:AA:1D:F8:D4
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01911712F8060C96CEE8E8444B1B8119970A
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/jgUtYxCNBzme_hf7ORI1H6od-NQ.roa
Signing time: Sat 03 Aug 2024 07:10:04 +0000
ROA not before: Sat 03 Aug 2024 07:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.140.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:17:12:f8:06:0c:96:ce:e8:e8:44:4b:1b:81:19:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 3 07:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e052d63108d07399efe17fb3912351faa1df8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:b3:e1:97:fa:aa:4f:c5:3c:19:16:af:59:
f1:e7:cb:9b:33:57:ea:76:26:91:64:0a:d7:40:66:
04:b2:d3:dc:75:9f:48:f0:7c:b4:c3:27:8c:51:ae:
12:18:50:9a:62:ca:a8:2e:5a:42:c0:87:1e:ac:28:
d5:c0:74:c2:dc:12:88:2b:a6:fd:b8:df:50:39:2d:
52:d0:57:dc:79:73:7d:9b:89:92:8b:70:77:dd:34:
25:a9:bb:83:6c:8f:14:d2:9f:1f:c2:3e:7f:a7:64:
2d:77:fb:64:7a:b6:cf:65:8f:da:ef:15:3f:cb:23:
c4:a3:ba:a8:8c:6a:af:30:fa:f3:da:ac:59:14:3d:
58:58:29:06:97:aa:f6:60:3b:9b:ae:08:fe:e3:5b:
9a:ea:47:a3:ac:85:4c:5b:d7:a8:9f:1c:9d:3e:d3:
a0:2c:d7:a1:a6:1a:7a:a0:88:b4:83:9f:5f:fd:d4:
59:34:e0:a6:0a:43:a3:01:2f:69:e0:0f:76:28:f1:
a4:fd:5a:13:33:8e:fc:52:f8:ea:42:b4:23:6b:9d:
e4:28:38:35:b2:88:19:96:a0:9c:cd:74:5e:2f:c3:
6a:f0:f5:65:0f:82:fd:53:11:10:7d:50:15:6d:82:
eb:0f:2e:e1:da:fc:5e:90:5e:78:f6:85:7e:98:73:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:2D:63:10:8D:07:39:9E:FE:17:FB:39:12:35:1F:AA:1D:F8:D4
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/jgUtYxCNBzme_hf7ORI1H6od-NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.59.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5a:f9:fa:e4:a3:5f:72:6f:6d:52:32:e1:38:f5:ab:a3:a1:
36:12:97:cc:8c:35:b2:22:d3:da:66:6d:eb:2d:5f:0a:c3:b8:
a6:45:86:d3:d5:9a:9b:56:99:3e:67:52:2d:28:c8:cd:af:a1:
01:c6:10:ef:12:d9:e1:74:d7:18:88:f7:75:2e:9b:3e:30:29:
44:6e:12:83:44:23:d1:c0:5d:3d:ca:7d:40:75:a8:d6:81:51:
fc:bc:24:6a:b3:2d:c7:a0:69:38:85:b0:c8:27:31:c2:f2:9d:
c4:8d:b6:64:6d:33:a5:f1:34:49:7c:31:c4:95:77:72:d8:49:
76:5c:d5:b5:a5:4c:03:26:0b:a6:df:07:be:b1:0c:d5:06:73:
8e:e7:cc:98:a9:ff:02:f8:fd:a2:0d:db:83:af:82:1c:8c:ce:
34:f8:5b:44:2d:1f:eb:86:c6:dd:4a:9a:ed:eb:6c:17:a2:91:
1a:1c:1c:82:d5:0d:b0:0b:62:39:de:fa:28:39:a4:61:b3:4d:
7e:e6:fa:9f:d2:f8:5c:25:c5:67:ba:43:2c:d0:ac:20:13:13:
e5:fc:ab:6c:96:7f:cb:10:f1:79:87:39:61:08:cf:a0:fd:6c:
fe:0b:fb:6c:37:3e:8e:21:f5:55:a7:14:28:e8:85:a5:e7:d8:
94:df:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 01:34:40 2024 by rpki-client on console-ams.rpki-client.org