Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/jwB2o6JG9EAG_mVAX3jktwB3VcA.roa
File: jwB2o6JG9EAG_mVAX3jktwB3VcA.roa (raw, json)
Hash identifier: R2191C89qJTizGI4N92Dsl4OLlbzKd3P86QUnxi1E+w=
Subject key identifier: 8F:00:76:A3:A2:46:F4:40:06:FE:65:40:5F:78:E4:B7:00:77:55:C0
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 018CC3B6801BC737048F5236437D3314F7E5
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/jwB2o6JG9EAG_mVAX3jktwB3VcA.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 84.252.112.0/24 maxlen: 24
84.252.115.0/24 maxlen: 24
84.252.114.0/24 maxlen: 24
84.252.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:80:1b:c7:37:04:8f:52:36:43:7d:33:14:f7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f0076a3a246f44006fe65405f78e4b7007755c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:44:b1:81:db:c2:ec:f3:43:7a:45:4d:de:
79:1a:45:72:14:83:a3:12:08:6d:2d:9d:b7:f2:45:
86:92:c0:c1:9a:7c:c8:41:c8:cc:d1:af:40:5f:e8:
46:e0:60:2d:46:fc:d1:7f:d6:21:97:ff:73:d7:52:
19:40:8d:2f:6c:80:1e:ba:d7:92:e1:c7:b3:04:3f:
50:32:7d:cb:4e:4b:73:3f:c9:43:eb:c8:ee:91:0d:
9e:09:e3:20:98:7e:19:cb:60:6a:19:c6:17:b8:0c:
2c:05:04:fe:76:6c:35:70:f6:ca:b4:2e:6f:94:2f:
64:46:ea:39:84:9a:4f:0d:6e:e0:c4:c7:2d:50:00:
d7:d5:56:a3:6c:21:31:23:22:61:6d:d5:a2:31:32:
e6:17:8c:b7:de:12:40:46:dd:4a:4a:c0:cc:b8:7c:
cb:8a:23:db:f4:5b:3d:4d:d6:89:a6:c3:25:4e:b4:
2c:2b:02:07:bc:6f:01:bf:f2:d4:a5:0f:44:12:78:
88:b5:36:32:46:71:93:b3:3e:de:82:ed:43:b1:d2:
ae:de:41:4d:aa:17:eb:6c:ba:a5:cc:01:db:d2:ae:
b8:72:16:71:9b:78:47:d0:df:ea:14:dd:ee:1a:a0:
97:50:ab:60:be:89:52:04:99:c4:e1:bb:35:34:c7:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:76:A3:A2:46:F4:40:06:FE:65:40:5F:78:E4:B7:00:77:55:C0
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/jwB2o6JG9EAG_mVAX3jktwB3VcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.112.0/22
Signature Algorithm: sha256WithRSAEncryption
39:7e:25:0a:6e:22:f9:24:32:9e:a7:c4:69:4e:ee:56:4b:5a:
1a:9a:88:b6:00:be:8f:f4:5c:85:be:bc:52:8c:7e:b4:94:5e:
ba:d4:21:18:d2:61:1b:81:20:df:f7:ef:98:71:b4:ed:f1:6b:
98:1c:c3:a7:f5:6e:15:d1:5a:7e:f1:ea:bc:c6:bf:71:ba:73:
11:c5:93:17:66:06:53:86:d1:80:17:90:31:3b:f9:b9:1b:19:
87:b4:77:81:44:5e:e1:28:c6:5c:17:83:27:8d:83:e6:70:a3:
82:dd:fe:f8:54:42:70:9c:18:3c:ef:d8:1b:1f:df:dc:08:f6:
3c:f9:4f:7e:ca:06:77:4e:84:b2:9e:d9:1c:c6:a7:6c:16:31:
12:40:31:08:d0:93:94:31:62:80:ba:b3:80:84:32:dd:28:3b:
71:3b:cf:aa:f4:4b:5c:70:11:0a:35:12:0f:f2:05:ad:d4:2d:
bd:5f:f2:9d:88:dc:01:a1:a4:cb:17:21:0a:25:c0:b0:83:df:
dd:a7:97:77:5d:c3:2a:df:7d:3e:05:c1:d2:74:a8:3e:98:75:
bf:95:cf:34:c0:ec:0f:a9:d5:6b:2e:13:bb:f7:db:6c:0e:69:
a5:05:51:ac:c3:f7:a0:25:82:ee:c4:52:66:19:12:d2:a5:a3:
cf:46:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:30:10 2024 by rpki-client on console-ams.rpki-client.org