Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/JMLzvJmu_dcEsW9-eLZ404ZLejA.roa
File: JMLzvJmu_dcEsW9-eLZ404ZLejA.roa (raw, json)
Hash identifier: lfKbRxpOs/10xX7azF90O/RFzoluuZp/iI6K2i4pDiA=
Subject key identifier: 24:C2:F3:BC:99:AE:FD:D7:04:B1:6F:7E:78:B6:78:D3:86:4B:7A:30
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 018D094D0BB8DC482F50B7ECD32FC5AD384B
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/JMLzvJmu_dcEsW9-eLZ404ZLejA.roa
Signing time: Sun 14 Jan 2024 18:47:40 +0000
ROA not before: Sun 14 Jan 2024 18:47:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13030
IP address blocks: 193.28.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:09:4d:0b:b8:dc:48:2f:50:b7:ec:d3:2f:c5:ad:38:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Jan 14 18:47:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24c2f3bc99aefdd704b16f7e78b678d3864b7a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f8:f2:c2:11:28:1d:18:90:f2:c7:8c:2f:ca:
82:36:17:13:54:b7:c2:3e:3b:39:79:0a:32:8a:75:
98:f2:c1:6e:85:1c:97:cc:24:d1:71:0e:7c:d5:52:
d1:5a:8b:90:dd:b7:f3:4d:d9:87:e8:21:4f:9a:43:
55:3f:b7:28:f6:1e:8c:f1:fb:11:65:30:c8:d1:d0:
3c:58:85:2c:96:40:0b:cf:f0:75:55:15:a2:74:06:
2a:dd:cd:a5:3b:53:4b:a8:b8:d6:da:8d:bc:3c:37:
98:bb:e3:31:31:99:d7:5a:e7:49:9e:62:c2:de:f6:
f0:9d:34:ee:00:e2:d3:41:2c:b1:8d:a3:99:79:fd:
a1:cb:cb:1f:62:56:60:cc:ef:3c:3a:af:90:c1:07:
67:03:3f:bf:82:40:3d:52:cd:93:a2:15:62:af:9d:
e1:ef:29:09:83:fe:fe:f7:02:d2:82:54:31:82:31:
78:64:d1:cc:5c:7a:5e:22:8f:1b:41:d6:5f:f9:12:
47:7c:1a:d1:5d:ac:81:c3:4d:2b:b9:25:4a:02:c2:
6a:11:49:fc:55:42:e5:0c:d1:42:f3:0f:9a:37:6f:
d2:0c:1e:e3:c2:59:67:ed:47:ef:14:05:01:5d:3b:
cb:0d:60:99:bf:7c:9b:8c:ce:32:4e:9c:81:70:4b:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:F3:BC:99:AE:FD:D7:04:B1:6F:7E:78:B6:78:D3:86:4B:7A:30
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/JMLzvJmu_dcEsW9-eLZ404ZLejA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f7:9f:aa:0c:ba:c7:28:ff:23:96:a7:dc:6d:8f:e5:1d:00:
e7:f6:88:cb:f1:ac:ea:55:f2:75:34:1c:61:f6:f6:08:79:f6:
ab:89:cc:13:bf:47:ed:a2:fd:b8:40:ed:90:f9:74:1f:65:f5:
0a:72:69:bc:22:34:b5:ef:2b:a3:5f:f1:0a:93:73:18:eb:78:
86:86:bc:f1:55:36:8d:93:ce:a7:cb:e9:7e:6a:a6:0e:a7:2d:
86:52:a0:66:2a:f7:28:31:c5:a8:97:8c:1a:3f:ac:a9:b2:77:
d0:87:c5:5a:a9:17:68:9f:9a:cf:2a:45:be:6c:56:8d:5f:2c:
e3:e5:3a:cc:b4:f0:bd:76:c9:26:5e:0f:00:24:7c:ee:49:f1:
d2:ec:61:44:71:b5:ff:8f:4b:a2:c1:0b:9f:63:1a:96:7e:89:
65:df:7b:64:d0:c6:83:ee:4d:80:a7:94:1f:46:29:09:f5:22:
24:fc:65:af:64:9b:12:eb:ff:a1:51:69:a3:01:da:08:47:20:
f1:77:fe:e0:21:35:92:ed:b9:6c:35:74:ef:67:cd:cd:cc:95:
7f:ab:a9:a6:47:f6:91:0e:a3:02:72:d0:ea:ca:69:34:22:f5:
aa:37:8f:c4:41:de:ca:55:23:ff:80:6c:8c:5d:15:c9:8a:11:
d6:8c:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:24:47 2024 by rpki-client on console-ams.rpki-client.org