Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/jKlo2eWLIg3R9diTqO265-pxI9U.roa
File: jKlo2eWLIg3R9diTqO265-pxI9U.roa (raw, json)
Hash identifier: v9EIirDgd7J5eR8E5t67Bctkh7WvubeCiG+8ADnTpws=
Subject key identifier: 8C:A9:68:D9:E5:8B:22:0D:D1:F5:D8:93:A8:ED:BA:E7:EA:71:23:D5
Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial: 018CC425472216BC3AA824247CBEEB650198
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/jKlo2eWLIg3R9diTqO265-pxI9U.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 78.158.48.0/20 maxlen: 32
185.158.56.0/22 maxlen: 32
193.104.103.0/24 maxlen: 32
193.104.131.0/24 maxlen: 32
77.240.48.0/20 maxlen: 32
2a03:7600::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:47:22:16:bc:3a:a8:24:24:7c:be:eb:65:01:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795013346c8d8f23e0128d306997980237db2374
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ca968d9e58b220dd1f5d893a8edbae7ea7123d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:44:51:a6:3b:5e:41:e2:ae:fa:d1:57:31:
db:9f:55:6d:25:ed:54:df:de:0b:20:cb:23:12:d2:
64:1e:1d:e4:b9:e0:ee:4a:71:81:2b:76:60:5e:8a:
bf:a1:20:f5:60:74:b7:77:8f:4e:b3:50:1d:b3:bd:
c4:97:bd:6b:f4:ac:79:9a:ce:a9:21:b6:39:0e:8c:
d3:5c:f6:d9:d4:6d:4d:a7:ab:79:53:1f:5b:eb:fe:
d9:a0:43:b6:a1:4e:6e:45:0d:c4:16:68:8d:98:ba:
17:ca:97:16:c7:84:13:0b:11:45:57:5b:3b:52:30:
d0:5c:10:8a:35:f0:00:8a:47:f8:71:52:63:ec:e1:
f9:ed:81:46:f8:4a:36:20:0a:0b:67:38:ae:c1:ed:
df:d3:7e:bf:90:1e:df:13:b2:63:6a:d2:fd:5e:79:
fa:66:1f:b4:c7:6e:da:15:a1:a1:0e:27:fe:29:fa:
d7:88:d8:f7:d5:3e:6a:b9:5b:35:2a:c2:b5:ca:df:
76:08:c1:a4:67:51:41:c7:18:32:c9:80:17:5b:4e:
39:10:ca:34:d0:09:bd:94:69:9a:0d:25:0f:db:ec:
cd:66:7b:9e:06:1f:dd:02:16:a9:e7:8a:8e:4f:01:
07:20:e7:06:38:92:1e:b8:6f:43:b4:9a:72:ab:40:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A9:68:D9:E5:8B:22:0D:D1:F5:D8:93:A8:ED:BA:E7:EA:71:23:D5
X509v3 Authority Key Identifier:
keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/jKlo2eWLIg3R9diTqO265-pxI9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.48.0/20
78.158.48.0/20
185.158.56.0/22
193.104.103.0/24
193.104.131.0/24
IPv6:
2a03:7600::/32
Signature Algorithm: sha256WithRSAEncryption
95:3e:ed:7b:00:66:98:11:57:01:ea:e8:cb:ec:ee:35:a4:ff:
48:fe:b8:0e:25:7c:53:88:5b:d6:9a:dc:72:72:c2:ec:c9:64:
a1:2f:c1:42:66:48:40:86:be:2f:72:d5:89:b5:df:0d:25:3c:
7c:1c:63:b0:46:96:cb:6f:62:71:4a:79:3f:83:4d:61:fb:14:
b6:16:e1:d8:07:a3:62:98:95:42:82:f4:bf:47:b3:a7:a3:ba:
a9:f7:d9:31:b1:c0:e0:c0:38:eb:e4:30:5e:2d:8b:b8:49:b8:
38:64:f3:d2:d0:8b:e5:ef:c9:e8:d7:b7:a2:49:08:d4:1d:74:
a2:26:c3:e7:03:38:e4:09:ca:a1:c0:82:8a:d8:81:0b:5a:4f:
f3:55:4c:7f:26:05:81:80:be:db:a4:69:d7:82:9f:a5:8b:46:
f3:a6:9c:f9:b8:4c:b5:96:44:51:92:12:41:44:30:ed:94:0f:
47:91:85:4d:cb:43:54:3e:4e:75:f7:ad:a8:1d:3d:14:98:90:
a5:07:85:a6:dd:cb:38:24:c6:30:c5:01:6b:d8:2c:8a:b7:42:
7f:f8:1a:fd:91:35:c4:cf:d9:23:50:6e:b4:ee:82:37:32:8c:
1b:3f:b8:a4:e6:26:e3:36:34:6e:ba:a4:46:42:da:50:8c:13:
45:75:a6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:36:10 2024 by rpki-client on console-fra.rpki-client.org