Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/JVFaDxDIjWWqoVKtVeLiVyNbr_Y.roa
File: JVFaDxDIjWWqoVKtVeLiVyNbr_Y.roa (raw, json)
Hash identifier: KzeojqSMGSHBh+pjXkn6OaG2utHT7CeVkgQKy5+arPw=
Subject key identifier: 25:51:5A:0F:10:C8:8D:65:AA:A1:52:AD:55:E2:E2:57:23:5B:AF:F6
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 018CC64AA7F4E3B0C2CA0C4755E3BF994C9A
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/JVFaDxDIjWWqoVKtVeLiVyNbr_Y.roa
Signing time: Mon 01 Jan 2024 18:30:30 +0000
ROA not before: Mon 01 Jan 2024 18:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 109.121.166.0/24 maxlen: 24
109.121.162.0/24 maxlen: 24
109.121.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:a7:f4:e3:b0:c2:ca:0c:47:55:e3:bf:99:4c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 1 18:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25515a0f10c88d65aaa152ad55e2e257235baff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:ab:c0:49:4d:63:fb:6d:9c:14:48:e3:d2:
61:76:c4:f4:c7:72:06:af:ab:74:20:20:0c:e0:63:
8e:12:1a:22:ce:43:15:b7:d4:e4:91:6b:e9:8e:2b:
34:a9:41:b8:93:66:be:3d:4b:0c:f6:e8:5b:f9:c7:
28:bf:05:31:bd:7b:4a:61:4c:5d:22:19:97:38:62:
33:5d:b3:ab:0a:e9:86:6f:9f:7f:ef:78:4d:64:71:
cb:63:f3:13:39:af:64:87:4f:59:58:ea:d7:22:a2:
d7:b6:3c:cd:2b:20:a5:40:e7:8c:e4:aa:82:74:99:
86:c0:7b:15:fd:2c:67:86:b5:97:38:ba:20:4e:e1:
cd:02:ad:4b:fd:0b:48:90:43:16:35:11:a4:0d:b5:
72:6d:01:27:34:f6:f4:34:b3:55:de:d4:8e:94:c5:
8e:be:20:a7:22:d7:f4:cf:0f:e0:90:f7:72:b3:7a:
0f:9c:34:7b:5f:fd:fe:7d:41:de:a0:c6:68:a2:01:
d2:d8:8f:2c:63:53:6f:53:12:77:58:90:70:fd:65:
f2:f0:a0:9c:f8:fb:fe:ce:a2:0b:d3:3d:a4:66:59:
28:2f:17:93:9b:2d:08:ac:fb:8f:6f:a6:d1:88:f8:
13:11:d0:e8:f8:c2:ae:4b:03:3f:17:4e:67:54:82:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:5A:0F:10:C8:8D:65:AA:A1:52:AD:55:E2:E2:57:23:5B:AF:F6
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/JVFaDxDIjWWqoVKtVeLiVyNbr_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.160.0-109.121.162.255
109.121.166.0/24
Signature Algorithm: sha256WithRSAEncryption
47:07:79:37:d6:f8:c2:1b:1b:ef:ca:10:10:44:62:9b:f1:9c:
54:dd:cd:9d:3f:a8:d9:2a:75:2b:b1:c9:65:2a:7f:23:c7:a6:
71:b3:a4:52:03:eb:97:82:f6:13:72:cc:11:c5:78:5d:03:70:
83:39:b9:46:da:d1:50:a7:69:5a:dd:52:89:58:58:15:3e:13:
fd:48:ef:1d:46:79:e8:f1:68:b6:e2:08:3a:65:31:ff:07:c4:
3a:95:7a:f8:4a:cd:d5:56:19:94:16:15:c3:b1:1a:8f:7d:26:
3f:fb:d4:d3:14:ff:47:f3:80:34:6b:b6:8e:ce:a6:d3:a7:54:
89:3c:fc:87:ac:24:1c:2f:82:1a:72:f5:b3:4e:9a:84:b9:a3:
8f:24:5e:2b:54:92:11:19:62:33:15:2f:76:e4:0f:09:7f:a4:
e8:50:39:49:e4:b4:5e:50:01:4a:3b:8e:f3:24:6d:4c:32:de:
e3:48:17:5d:66:f6:50:84:71:40:9d:e2:44:84:45:da:79:24:
fb:7e:c6:6a:a0:5a:63:b0:b7:96:29:a5:34:b8:b1:d8:b9:e4:
1d:4e:d6:cd:61:9d:a2:d4:f5:38:d6:6c:fd:ad:20:f2:c5:00:
8b:2c:a5:7b:6a:74:8a:f6:3e:81:56:17:e2:34:40:c1:33:95:
4a:a6:2d:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 02:13:18 2024 by rpki-client on console-ams.rpki-client.org