Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/jvq1D-yh8OTI0DUlAfWJIWNa8p8.roa
File: jvq1D-yh8OTI0DUlAfWJIWNa8p8.roa (raw, json)
Hash identifier: jR72d5HIy+6OF2TZ7SXN4wR0FLW18UK4nwjJTPFEnLk=
Subject key identifier: 8E:FA:B5:0F:EC:A1:F0:E4:C8:D0:35:25:01:F5:89:21:63:5A:F2:9F
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 018D63B9C923B585B3891723FD9DE72B6891
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/jvq1D-yh8OTI0DUlAfWJIWNa8p8.roa
Signing time: Thu 01 Feb 2024 08:12:16 +0000
ROA not before: Thu 01 Feb 2024 08:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.195.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:b9:c9:23:b5:85:b3:89:17:23:fd:9d:e7:2b:68:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Feb 1 08:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8efab50feca1f0e4c8d0352501f58921635af29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:4b:0f:83:dd:29:d5:68:78:6b:88:be:04:
91:c4:e8:61:20:b8:9f:23:3c:18:83:72:6d:8f:46:
58:dc:8a:8b:70:cc:8e:56:e2:75:31:48:cd:b8:14:
3a:bf:71:61:7d:16:7c:e5:6a:31:9c:7f:71:89:ed:
96:d0:e7:76:1e:bf:88:17:59:7a:a0:c3:93:c7:fa:
af:84:99:e1:58:2e:b1:d6:74:2b:e1:f6:7a:92:27:
5c:40:89:55:13:5a:64:69:41:d2:fe:a6:f2:7a:07:
2a:22:ff:6d:c5:2c:ba:b2:d7:33:35:1b:48:c2:0f:
fa:ee:3e:1b:ef:59:31:15:73:a4:33:94:8e:10:22:
83:be:1a:3d:37:cb:20:86:a0:40:44:28:a4:ff:13:
7c:5c:2a:17:b6:e8:bd:90:ea:32:b5:8e:43:8f:f7:
87:df:9a:21:66:88:7c:90:dc:7d:f3:63:95:90:82:
df:03:3c:ad:ee:89:08:f5:36:5b:6d:4e:3c:78:95:
fa:bf:38:e5:f8:a4:b5:fe:38:fe:63:d8:a9:14:fe:
c3:2e:bf:6f:5f:cd:a4:a9:3d:2e:47:a4:cd:2f:42:
a5:1b:37:72:c2:92:bb:8b:2f:04:ca:7f:0b:38:00:
0d:15:0e:30:c2:4a:b7:5f:fe:a5:bb:b7:1f:13:61:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:B5:0F:EC:A1:F0:E4:C8:D0:35:25:01:F5:89:21:63:5A:F2:9F
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/jvq1D-yh8OTI0DUlAfWJIWNa8p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:09:02:56:4b:9c:dd:e3:a2:83:14:33:de:3c:e4:70:01:e3:
17:32:f6:41:43:98:5a:83:8b:8d:80:46:bb:cf:9b:cd:0f:17:
08:02:6a:b1:d8:41:ec:a0:b3:3b:ae:e5:0d:0f:b6:9a:d5:2a:
15:6a:14:8e:6f:d1:8f:47:03:e6:01:24:00:90:de:b2:8c:1e:
62:d2:79:7d:1a:79:40:76:0e:70:60:e6:83:20:84:dc:49:1b:
c1:66:8a:0e:89:37:ce:6e:ea:ad:65:6c:d6:89:1c:0c:23:d8:
d8:20:15:f9:fa:f4:7e:05:54:79:ac:cb:f6:8f:f3:e5:f3:1d:
7a:f8:92:ab:18:09:32:d3:d5:8a:e3:95:96:84:df:6c:97:65:
d6:fe:9c:e6:46:20:9b:bd:43:b0:3f:5d:84:e5:73:02:99:b9:
b5:a4:15:97:2f:a2:9f:5b:6d:9a:43:ad:58:ac:a4:97:42:92:
81:5c:11:ee:af:80:0d:31:be:09:b6:c3:e9:58:58:96:f2:18:
a5:c2:18:de:78:1c:a3:36:fc:a7:e9:18:44:73:f3:cd:fe:26:
0b:b7:84:e4:96:c2:01:28:2a:ac:0c:21:5b:d2:a2:00:d4:fb:
3b:5e:35:03:77:7e:9b:cc:5a:6e:98:bb:3f:ba:4b:7b:71:b8:
bb:ed:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:38:59 2024 by rpki-client on console-ams.rpki-client.org