Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/J_tuXno-8HJ99UZZbK2MzjgY5Q0.roa
File: J_tuXno-8HJ99UZZbK2MzjgY5Q0.roa (raw, json)
Hash identifier: sABNVe4RR2ZH8AIQYk0VUNevch6aoOlg0/MBjOSOT+w=
Subject key identifier: 27:FB:6E:5E:7A:3E:F0:72:7D:F5:46:59:6C:AD:8C:CE:38:18:E5:0D
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 018CC8DED1F0F639A70607B42F45647E15A1
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/J_tuXno-8HJ99UZZbK2MzjgY5Q0.roa
Signing time: Tue 02 Jan 2024 06:31:35 +0000
ROA not before: Tue 02 Jan 2024 06:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204053
IP address blocks: 185.115.172.0/22 maxlen: 32
45.143.16.0/22 maxlen: 32
193.16.97.0/24 maxlen: 32
91.198.78.0/24 maxlen: 32
185.203.92.0/22 maxlen: 32
45.152.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d1:f0:f6:39:a7:06:07:b4:2f:45:64:7e:15:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Jan 2 06:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27fb6e5e7a3ef0727df546596cad8cce3818e50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:0a:07:d3:10:90:b6:8a:40:ce:9d:45:0f:
b8:74:cc:32:f4:ba:56:be:4b:a4:2e:de:78:e8:86:
d2:22:e8:59:53:63:94:33:a6:cb:87:1a:9e:fe:6f:
21:e2:5e:7f:36:40:8b:7a:aa:e5:47:0e:af:69:b6:
11:ff:dd:7f:f6:03:d6:67:45:30:13:77:0c:16:67:
07:c1:2f:7f:cc:ac:0b:33:8b:57:cb:96:5c:72:e0:
9d:95:db:ed:e7:94:f7:5e:c0:bc:e2:d6:79:48:d2:
c1:d8:02:a5:09:d5:2d:1d:8b:ce:29:be:f1:28:7c:
57:29:3b:5d:e8:f8:00:7e:0f:0b:80:b3:05:52:bc:
2d:e5:d3:9a:63:5e:10:96:09:cf:fb:38:67:2a:67:
6d:45:5f:c3:bf:c4:65:d2:1f:d8:f3:b5:34:e3:f0:
f7:fd:50:bd:75:70:18:1c:c3:d5:b4:24:e0:af:40:
5c:11:8c:03:0b:d5:ac:b5:dd:14:8c:96:38:c8:77:
5d:28:e5:32:b1:56:a9:02:35:44:80:4d:17:57:69:
0f:62:93:98:1f:8a:5e:a6:4f:c8:78:07:9e:a5:e9:
a8:97:da:ec:47:47:c2:d1:26:c0:fe:7e:7b:cd:1f:
c4:da:e3:cb:f2:a4:4d:b1:10:15:17:b9:dc:78:6d:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:6E:5E:7A:3E:F0:72:7D:F5:46:59:6C:AD:8C:CE:38:18:E5:0D
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/J_tuXno-8HJ99UZZbK2MzjgY5Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.16.0/22
45.152.152.0/22
91.198.78.0/24
185.115.172.0/22
185.203.92.0/22
193.16.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d0:7f:6d:81:8a:54:19:7e:25:e6:09:35:2a:64:e7:ba:93:
c7:96:1d:e9:ec:c9:ec:d0:47:aa:95:f5:b0:85:51:ae:56:33:
b0:32:48:52:0d:52:03:90:5c:26:01:be:d7:b8:98:ee:0a:96:
de:04:61:0b:36:34:fc:b8:6e:d3:12:fc:03:05:0b:19:4a:a1:
3d:73:88:d1:a5:99:58:9f:5a:fa:50:d9:ff:25:53:52:be:66:
9b:4f:7c:85:77:29:30:92:9e:1b:ce:f9:a5:f4:cb:04:03:ed:
1b:87:2d:35:32:55:82:73:b9:99:94:fb:91:b8:63:0d:82:6b:
13:bb:62:0b:d0:2c:57:e5:ea:43:da:4d:0c:de:bc:87:80:67:
a1:97:04:b1:96:4f:d7:43:eb:2d:30:0b:9a:0c:18:8d:1b:a3:
eb:14:af:fe:e9:51:32:f7:bd:4d:10:a9:ce:4e:85:3b:5b:7a:
af:40:79:0d:7a:8f:e1:ea:b7:2a:04:38:3c:48:72:0e:85:02:
eb:f6:bf:b9:2d:dd:03:8b:9d:29:0d:04:e0:7b:90:6b:d3:cf:
f2:ce:9e:0f:8e:7c:7b:83:b7:18:f1:bf:a7:88:3e:0b:d1:46:
f0:3c:d7:02:c8:0a:84:df:5a:42:57:09:df:2c:b3:e5:f3:0a:
71:f3:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:46 2024 by rpki-client on console-fra.rpki-client.org