Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Jc0PmoRiYw4FMpap616npM3Nask.roa
File: Jc0PmoRiYw4FMpap616npM3Nask.roa (raw, json)
Hash identifier: B233hWE2dtK7LfhrieMhm0vez8Qec3jPLFp3amJ+jTU=
Subject key identifier: 25:CD:0F:9A:84:62:63:0E:05:32:96:A9:EB:5E:A7:A4:CD:CD:6A:C9
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 018CC64B6F666A42153B3593D738C7A0C822
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Jc0PmoRiYw4FMpap616npM3Nask.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197726
IP address blocks: 185.112.14.0/23 maxlen: 23
185.112.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6f:66:6a:42:15:3b:35:93:d7:38:c7:a0:c8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25cd0f9a8462630e053296a9eb5ea7a4cdcd6ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:d2:f7:e0:89:97:bf:b3:ec:c4:4a:97:8b:
16:d0:52:59:1b:64:03:1c:8d:09:2c:61:4c:b8:ba:
3f:b4:61:c6:4d:ec:46:ea:f1:a3:ce:b2:44:8a:5a:
e5:48:0f:8c:f9:de:f8:10:ba:2e:0a:de:a1:78:0a:
a5:f4:e7:41:66:b0:d0:81:e4:85:31:8a:25:1f:50:
61:80:7b:43:47:ab:d9:ee:4e:95:f9:86:10:4b:21:
c5:06:6f:10:2d:ed:7f:ab:9b:f4:06:30:79:31:a6:
c2:81:7a:07:bc:76:16:94:f6:da:d6:35:c2:90:30:
09:66:72:1e:4b:6d:69:bd:cb:b8:76:ba:42:e3:44:
42:5a:d9:4d:17:c4:6d:f4:0e:87:60:9e:0f:1f:55:
6d:f2:3b:c6:a9:f5:80:4d:ec:76:05:8e:23:0b:b6:
98:9c:01:f5:35:cc:12:c2:ac:f3:f0:96:74:2c:84:
4c:2b:e1:10:c9:a4:5a:93:10:7e:6a:2d:e5:e7:70:
b7:86:6b:ca:41:a2:14:fa:4b:0c:63:7b:ff:41:5e:
5c:87:d7:1b:c5:ab:b6:f1:1f:2c:e6:f8:8c:8b:dd:
a9:ef:bb:53:8e:6f:fe:7b:0e:df:5e:9d:30:96:ef:
e6:57:ad:ad:5d:74:7b:8e:6c:44:5b:76:84:0f:90:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:0F:9A:84:62:63:0E:05:32:96:A9:EB:5E:A7:A4:CD:CD:6A:C9
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Jc0PmoRiYw4FMpap616npM3Nask.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.12.0/22
Signature Algorithm: sha256WithRSAEncryption
66:a5:81:05:98:e9:f5:39:15:46:d0:31:15:e2:4d:e0:cf:c0:
85:88:eb:f6:0a:73:4a:ec:3d:9a:17:ba:a5:65:ac:57:1c:7b:
c8:42:f4:9d:5a:38:bd:37:19:5a:83:56:31:5c:41:f3:5c:13:
8c:80:c2:38:bb:46:0c:97:33:d4:86:92:ac:d3:29:d5:74:ba:
13:0a:95:a4:fd:26:0a:35:97:27:9b:99:99:7a:9f:ae:50:d6:
4e:26:df:f4:c8:f5:1f:f1:41:82:ae:1a:a2:f6:79:14:d3:30:
60:60:0b:95:1e:23:16:b3:37:f9:bc:d9:52:ff:3c:93:e2:05:
25:15:38:7c:1d:c0:c8:86:b6:54:3e:32:69:cc:0c:f6:3a:a1:
01:92:01:38:42:44:1a:d5:16:b5:9e:73:d7:75:b5:92:2b:77:
b5:cf:27:fc:30:99:38:ab:12:b4:a7:bb:b2:cc:c0:53:05:9f:
a6:b1:99:b8:59:3f:54:52:d5:19:55:99:fd:37:bd:be:22:44:
fc:c8:a5:e8:23:c7:a4:84:1e:1a:d4:3a:80:32:a6:8f:c6:a6:
54:11:d2:32:07:ab:7b:4a:e3:c4:1f:cc:e9:3c:37:25:1d:6f:
b1:2c:df:34:cf:7e:c8:fb:a6:e1:6d:e4:35:d1:ca:9a:3f:03:
9c:91:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:55:31 2024 by rpki-client on console-ams.rpki-client.org