Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/JVlNxuwmte_YAG3KTKrsumqKRFM.roa
File: JVlNxuwmte_YAG3KTKrsumqKRFM.roa (raw, json)
Hash identifier: BsBXvAsoSH/fPY0u4Ncz+daH2awcg1eksfROcOepPWE=
Subject key identifier: 25:59:4D:C6:EC:26:B5:EF:D8:00:6D:CA:4C:AA:EC:BA:6A:8A:44:53
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018CC87103861C3BDC84C52B1C03156ECC03
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/JVlNxuwmte_YAG3KTKrsumqKRFM.roa
Signing time: Tue 02 Jan 2024 04:31:38 +0000
ROA not before: Tue 02 Jan 2024 04:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29509
IP address blocks: 80.250.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:03:86:1c:3b:dc:84:c5:2b:1c:03:15:6e:cc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 04:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25594dc6ec26b5efd8006dca4caaecba6a8a4453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:8c:33:7e:cb:e8:7a:0d:62:c6:76:5c:47:
bf:b3:26:3a:29:9e:4f:5e:43:16:c1:a6:dc:39:b0:
7b:b6:75:65:14:56:7b:fa:bb:61:bd:b9:a7:ca:cf:
30:33:f8:74:fc:98:f5:bc:7c:c1:e2:95:8e:1d:05:
69:02:2d:22:29:f0:0f:3e:0e:b4:1d:07:1d:e1:ad:
da:1c:c3:7c:1d:5f:49:4b:97:c9:b2:e9:31:a3:ae:
47:17:19:e4:17:b7:12:f9:0f:8a:f2:dd:ec:fd:7f:
3d:04:90:a3:55:4e:10:44:4b:02:38:0f:90:4b:cb:
5c:e9:d0:50:c1:71:fc:da:da:a6:5a:08:7f:8b:e6:
b1:ee:f4:e4:ea:d1:24:b2:07:49:a2:a5:40:16:78:
9f:83:29:da:78:e7:5d:5e:d9:64:03:a9:d3:ce:14:
f5:31:30:d2:67:5b:e4:42:c0:ec:fa:5a:2c:0c:96:
6b:4d:d8:9a:cd:33:02:d2:f0:26:b8:b2:2e:5a:95:
7c:0f:0a:39:b1:af:f9:f3:76:2d:6b:b4:f0:95:14:
9c:73:3e:f9:35:49:34:c3:7e:97:9b:eb:b4:17:08:
88:b9:96:41:92:85:ae:8d:21:d3:97:39:1e:fe:88:
56:80:28:ca:46:09:b3:7d:05:8d:7a:86:b0:a0:c7:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:4D:C6:EC:26:B5:EF:D8:00:6D:CA:4C:AA:EC:BA:6A:8A:44:53
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/JVlNxuwmte_YAG3KTKrsumqKRFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.87.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f0:c1:13:08:5d:61:d4:f3:6d:3b:cf:7c:51:e3:27:f9:ec:
76:4d:d7:9d:75:57:15:6d:f6:17:b1:0f:32:64:e4:53:a3:ef:
3a:9c:89:db:db:2c:ca:af:3e:0a:52:6a:fd:85:45:da:ac:0c:
19:0f:d9:fe:13:22:49:33:20:cb:f8:8a:52:95:8d:cc:3f:1b:
af:d9:77:ba:44:98:04:17:39:d3:f4:d2:22:30:25:27:d7:37:
a1:14:33:c0:02:da:13:3d:17:32:5c:36:15:2c:5b:5b:6c:e9:
05:35:4e:7f:cf:37:6d:46:ae:91:1e:55:7d:c2:1f:25:7a:29:
0c:d7:e9:38:32:1b:af:bb:25:3b:7c:be:9a:d9:3f:09:ef:95:
7c:47:d9:70:91:83:ea:ac:af:4f:03:1b:c2:78:cc:19:c7:23:
80:58:ac:82:d4:9b:ed:2d:e1:44:18:1d:eb:13:cc:aa:14:9d:
3e:85:46:f9:8e:9c:e1:c5:cb:7c:ad:71:2c:46:e5:99:54:48:
b5:ba:94:25:0c:bd:c8:01:0c:24:d6:1a:59:32:3c:62:9f:c9:
3e:dd:04:fa:62:63:29:d7:a8:b4:4b:18:a4:bc:ad:af:5c:5b:
3f:1a:59:0a:ad:d6:bf:c2:d8:02:3a:83:d6:10:75:20:b6:c2:
68:ef:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:53:13 2024 by rpki-client on console-fra.rpki-client.org