Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/2JClXaxTz8riePoTyqT8ZE7oLn4.roa
File: 2JClXaxTz8riePoTyqT8ZE7oLn4.roa (raw, json)
Hash identifier: RieOp0wikrjh8S35t8VYHc1HLlnXIpCMkH3F5ELJpP4=
Subject key identifier: D8:90:A5:5D:AC:53:CF:CA:E2:78:FA:13:CA:A4:FC:64:4E:E8:2E:7E
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 01903A7DF15D26B91F9CD2C809AA75167722
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/2JClXaxTz8riePoTyqT8ZE7oLn4.roa
Signing time: Fri 21 Jun 2024 11:10:50 +0000
ROA not before: Fri 21 Jun 2024 11:10:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9080
IP address blocks: 79.127.128.0/18 maxlen: 24
85.132.140.0/22 maxlen: 24
85.132.160.0/20 maxlen: 24
85.132.176.0/22 maxlen: 24
212.71.128.0/18 maxlen: 24
213.168.160.0/20 maxlen: 24
2001:ae8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:7d:f1:5d:26:b9:1f:9c:d2:c8:09:aa:75:16:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Jun 21 11:10:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d890a55dac53cfcae278fa13caa4fc644ee82e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:29:74:15:00:65:fd:1f:f7:56:54:56:85:
f0:a1:12:f5:9b:76:61:c8:e5:7b:e2:35:9d:f4:52:
f3:4c:40:8b:d8:b6:d1:17:53:fb:8b:6e:2b:e1:c7:
17:d4:67:9a:a0:c7:49:b9:98:41:21:68:ac:09:ba:
f7:42:db:da:2e:ca:4d:e7:ea:dc:b6:45:af:87:30:
4f:82:93:26:1f:08:4b:5f:7e:17:f0:c2:a6:ab:e3:
2c:89:06:38:ab:00:67:a2:c3:eb:8e:71:e6:bb:92:
9b:78:f1:11:00:c7:cb:97:5b:37:25:71:6a:0b:cd:
2f:cc:15:e0:37:e1:8f:8b:ca:63:f9:92:6d:65:34:
2a:47:1e:74:cf:c1:ef:b0:6c:a7:ed:eb:f5:79:bc:
a8:0e:8e:68:e8:90:82:3d:64:ba:d1:6f:51:0a:e5:
8c:cb:b0:9c:f1:06:30:5d:76:9e:27:00:37:ba:06:
48:04:94:6b:bd:3f:f5:e6:27:60:6d:7c:3b:a0:a0:
c5:a8:4e:77:23:2b:db:e8:86:b7:e4:e4:40:f9:6a:
eb:db:32:4f:3a:67:8a:ae:7a:83:2a:38:a1:90:73:
6a:67:11:12:06:da:00:b5:85:3f:af:68:55:6b:05:
2e:66:4f:02:21:c1:2e:2d:63:7e:8b:72:6a:1f:34:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:A5:5D:AC:53:CF:CA:E2:78:FA:13:CA:A4:FC:64:4E:E8:2E:7E
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/2JClXaxTz8riePoTyqT8ZE7oLn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.128.0/18
85.132.140.0/22
85.132.160.0-85.132.179.255
212.71.128.0/18
213.168.160.0/20
IPv6:
2001:ae8::/32
Signature Algorithm: sha256WithRSAEncryption
37:f2:e9:9a:50:cf:b4:cd:3a:a0:63:ec:d6:fe:eb:f5:dd:d4:
7a:a0:ec:cb:3f:0d:43:86:e3:ef:f8:03:15:09:e3:67:27:85:
9d:a4:ce:d2:b9:ec:2a:27:f2:99:a5:dc:72:07:c4:c7:b5:bf:
9e:ee:3a:8a:90:31:50:37:a8:f8:2b:ed:d1:f0:da:ec:8b:d1:
4c:b2:9c:f2:1a:b7:e5:e2:d0:ee:bf:08:88:4a:58:99:0e:97:
56:dd:d7:79:39:fb:05:57:7a:35:64:cb:b5:ce:e4:a8:02:a4:
21:31:6d:2f:41:4a:0d:44:d4:eb:86:c9:94:6d:cf:68:4c:18:
55:78:44:ed:f9:70:5c:cf:b4:22:91:7d:ff:56:9f:a4:0a:b2:
32:ce:77:70:97:8f:d5:c2:5e:13:2b:a2:cd:8c:48:27:27:0f:
86:de:01:2d:93:eb:4f:b5:b5:aa:e0:c9:e8:7c:04:c9:78:07:
b2:7a:0f:f4:72:a2:93:55:94:0f:7b:60:c3:9a:f3:a1:02:4c:
68:55:4b:4b:24:93:75:10:02:82:47:f7:81:70:23:c1:cd:d8:
1e:a5:86:5d:05:4d:b1:ed:e1:7f:0c:23:84:4b:7d:e8:e1:dd:
4a:7e:df:3d:63:04:fc:1f:92:a4:7d:1b:a9:8f:32:30:57:e7:
f3:d0:61:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 09:12:24 2024 by rpki-client on console-fra.rpki-client.org