Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/jX_0rCcRlctQoFptcI2IX2O1soI.roa
File: jX_0rCcRlctQoFptcI2IX2O1soI.roa (raw, json)
Hash identifier: L1QZEQcuFKAweQMDgzWSzg/RU6+/Kyjh+upgzE28w9E=
Subject key identifier: 8D:7F:F4:AC:27:11:95:CB:50:A0:5A:6D:70:8D:88:5F:63:B5:B2:82
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 018CC4247D458096A404FDA4705A8DFF27CE
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/jX_0rCcRlctQoFptcI2IX2O1soI.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.223.96.0/22 maxlen: 22
195.128.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7d:45:80:96:a4:04:fd:a4:70:5a:8d:ff:27:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d7ff4ac271195cb50a05a6d708d885f63b5b282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:32:19:7c:9b:66:00:3f:3e:c6:27:ba:46:
ea:6d:e2:10:8e:f8:43:6e:1f:de:22:5d:62:b7:9e:
06:0a:d4:6f:86:ea:61:db:24:09:57:07:83:b9:6e:
f8:96:f8:6d:e5:1f:d8:c1:74:ee:6c:ed:77:60:3b:
c4:c3:01:8b:95:57:63:3c:5e:4d:a2:e2:7b:08:c4:
0e:75:c0:54:0d:8c:81:aa:1a:c9:06:ad:e0:bd:6d:
b0:22:bc:96:10:a4:d2:cd:07:45:08:d3:ad:c5:74:
83:96:e9:5c:7a:6b:e0:72:22:07:21:41:9b:95:d6:
14:29:eb:9d:40:69:7a:93:a7:58:3e:ae:9f:cb:02:
8b:01:12:f1:52:e0:66:9e:32:00:aa:01:cf:03:e7:
78:89:41:df:8b:92:fe:d1:15:79:e0:22:d7:43:8f:
55:85:16:ac:e6:f7:37:05:53:54:b5:6c:9d:17:f9:
c4:a5:9f:0a:3d:53:4a:43:be:45:a0:4c:7d:3e:4c:
12:a2:03:32:c1:bf:85:35:dd:4f:4f:77:03:23:04:
99:b8:6b:e8:e6:0b:11:0d:fe:ad:26:cc:f3:c9:27:
7e:f8:3c:55:d5:63:d9:eb:c6:c3:d5:f2:6f:42:7d:
32:c1:e0:6a:8a:b6:67:ab:1a:ee:32:60:dc:62:9d:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:F4:AC:27:11:95:CB:50:A0:5A:6D:70:8D:88:5F:63:B5:B2:82
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/jX_0rCcRlctQoFptcI2IX2O1soI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.96.0/22
195.128.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:4b:eb:83:d9:a5:0a:fb:5f:1b:61:ac:37:da:c9:42:7c:a8:
be:94:5b:8f:0c:ee:6b:cd:db:b0:b6:de:ee:39:17:98:34:e1:
e7:f6:87:de:7f:42:fd:98:4e:b9:01:07:79:1e:c4:47:15:4c:
6f:62:28:fa:50:46:4c:3e:92:63:d1:5b:b4:01:cf:15:98:0f:
c3:32:6b:f6:41:58:e0:2d:d1:b8:80:90:fa:c9:3c:c0:69:5e:
c8:5b:09:be:f5:d1:2f:eb:65:b3:aa:2b:33:76:c9:82:9b:9b:
6c:f9:76:e5:ca:18:91:4c:a9:1c:45:a2:ad:01:1a:f0:ce:42:
55:d1:bc:8f:37:0a:78:b8:fc:d8:94:49:90:3e:2b:4a:42:ba:
10:2b:6d:82:24:ea:da:a5:82:8c:2d:b5:8f:2a:d3:24:14:08:
05:09:ce:5d:ef:5f:d6:29:97:01:9a:a3:0d:7b:b1:76:b2:88:
81:1b:3d:88:e4:92:40:a6:b7:c8:d1:7f:ed:97:8a:da:21:51:
48:17:87:35:4c:0d:2b:85:52:b1:23:43:75:1f:07:e1:3d:12:
58:f0:bd:34:61:a3:81:7e:05:6b:c6:19:a1:dc:0e:35:c9:e0:
eb:48:9a:93:c9:e1:e3:ca:93:d2:69:0f:12:63:db:84:58:ee:
d1:db:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:13:58 2024 by rpki-client on console-fra.rpki-client.org