Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/JUAoLKNcTvQX4mr8dTxExMpLw6I.roa
File: JUAoLKNcTvQX4mr8dTxExMpLw6I.roa (raw, json)
Hash identifier: C/tuj9hAt074ZaF1NKAmRT/ez7tYzZMDVlq6AYZ0Hsk=
Subject key identifier: 25:40:28:2C:A3:5C:4E:F4:17:E2:6A:FC:75:3C:44:C4:CA:4B:C3:A2
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 018CC49376D0178101FB735D7AA9C61DB9D7
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/JUAoLKNcTvQX4mr8dTxExMpLw6I.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21465
IP address blocks: 217.23.96.0/20 maxlen: 20
217.23.96.0/21 maxlen: 21
217.23.104.0/21 maxlen: 21
217.23.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:76:d0:17:81:01:fb:73:5d:7a:a9:c6:1d:b9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2540282ca35c4ef417e26afc753c44c4ca4bc3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:d1:aa:54:c9:27:15:8e:be:b4:7d:c9:80:
56:6a:08:99:92:d8:54:2c:e3:fb:fd:f2:61:c0:c9:
3d:60:ec:43:2f:44:f3:4e:3b:3c:5b:73:e1:57:78:
37:d7:9e:64:81:8f:08:9a:60:4f:3b:31:c4:86:05:
4e:04:e2:7d:b7:ab:75:85:cb:89:18:a3:00:17:59:
94:8b:df:db:9f:85:4c:98:af:21:62:6e:55:3b:7f:
33:88:34:3f:21:ee:44:82:79:0c:9e:89:a9:c8:42:
db:22:44:da:4d:d9:a9:cf:55:1c:a3:d4:01:ed:01:
3d:f9:41:5b:93:3c:e8:17:5c:ae:c1:3a:fa:6e:dd:
fd:b2:ce:28:e4:c4:9f:0d:b6:a2:67:b4:c9:2d:86:
32:4a:f3:c6:d0:fd:e5:84:21:4e:d5:0d:fa:b4:80:
0b:d1:74:2b:48:e1:5e:3c:5e:1d:15:61:c6:52:84:
27:3c:f8:31:a5:65:ec:bb:90:f1:fd:1b:68:c0:de:
52:3d:85:94:8d:c5:f4:99:28:51:8a:9e:cb:c4:39:
d1:a2:7f:d9:e9:e5:c8:79:82:69:0b:20:fb:47:a6:
d3:bb:82:61:9c:dc:47:dd:77:8e:a6:52:e7:93:d3:
c5:6d:35:d1:19:23:ff:5c:b3:59:5d:a7:8a:91:20:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:28:2C:A3:5C:4E:F4:17:E2:6A:FC:75:3C:44:C4:CA:4B:C3:A2
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/JUAoLKNcTvQX4mr8dTxExMpLw6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.96.0/20
Signature Algorithm: sha256WithRSAEncryption
03:02:0d:af:d8:ec:b1:e9:d3:30:5e:58:1b:39:bc:ca:10:55:
b0:d5:58:94:03:79:94:6d:55:15:ce:33:d8:b7:6e:e7:78:74:
95:aa:3b:1f:94:ed:19:31:8d:54:69:a8:5d:4f:03:0b:59:5a:
48:e6:de:ce:c8:10:c2:bb:b5:0f:a2:34:49:f2:37:79:bd:ba:
7d:47:51:2d:dd:a7:43:bd:e1:28:d2:37:c0:b2:8e:4e:45:13:
3c:88:c1:16:76:48:ba:fe:07:51:a3:48:47:73:e2:e4:06:d3:
01:61:6e:96:01:43:a9:7c:ec:73:1b:ea:d1:83:90:80:c6:05:
77:b0:87:b3:f7:49:42:74:28:37:f9:a0:42:ee:f2:a6:2d:90:
2d:af:0e:6f:85:98:27:1f:c0:92:f5:14:0a:dd:04:3c:63:de:
a2:b0:41:f4:d6:cd:8f:8d:77:2c:76:d4:94:80:5f:7f:4f:b6:
2a:fc:58:cc:d5:d9:33:bd:04:98:e6:11:af:7e:8b:0d:f1:24:
34:00:b0:65:94:aa:94:f6:3e:ce:89:7f:86:ec:28:60:6c:9f:
cc:5f:f8:c3:39:5d:22:7a:2f:3b:57:cb:ab:22:b6:19:dd:fc:
d3:82:94:02:b6:9d:b7:39:1f:c3:15:f2:34:57:fc:50:df:02:
c3:11:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:41:14 2024 by rpki-client on console-ams.rpki-client.org