Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JE0bPkwJ5vJ3ValcPLW4mI9sBDM.roa
File: JE0bPkwJ5vJ3ValcPLW4mI9sBDM.roa (raw, json)
Hash identifier: CodA+5TOpf1VlrrLMr8hHzq6KloRAiNwsT+mQ10Liw4=
Subject key identifier: 24:4D:1B:3E:4C:09:E6:F2:77:55:A9:5C:3C:B5:B8:98:8F:6C:04:33
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018E4C82CF8874A699244CA501E32A8E57EC
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JE0bPkwJ5vJ3ValcPLW4mI9sBDM.roa
Signing time: Sun 17 Mar 2024 13:03:44 +0000
ROA not before: Sun 17 Mar 2024 13:03:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 212.18.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4c:82:cf:88:74:a6:99:24:4c:a5:01:e3:2a:8e:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Mar 17 13:03:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=244d1b3e4c09e6f27755a95c3cb5b8988f6c0433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:0d:85:2f:1f:65:8b:aa:f2:9b:ba:c9:de:
91:3d:7d:a7:79:d5:13:a2:2a:14:6a:76:a8:7c:f0:
35:92:34:25:9b:f5:e5:d6:15:25:79:36:b1:e7:0e:
2e:d0:67:e2:d3:7f:f3:2e:12:8c:4c:c6:e7:5b:64:
90:d2:c0:bd:9f:dc:89:67:4b:b2:06:fc:27:4e:b4:
c9:10:3f:38:4e:26:e7:e2:5f:50:dd:31:65:e3:ab:
85:8d:e9:aa:a7:b1:f7:fe:fe:55:7c:62:d8:1c:4f:
60:9d:22:d3:8c:ed:b6:e3:83:a1:30:18:bf:97:84:
62:5a:c5:2a:ae:4e:c5:74:aa:eb:38:a4:f3:c5:88:
ef:ad:81:ec:4c:98:48:01:a1:de:82:fc:61:e2:76:
9b:5e:37:59:ea:b9:b5:97:42:6f:b6:87:f6:ad:12:
69:2b:69:bf:76:38:39:7d:f9:a3:a4:c9:0c:46:6b:
05:2b:a1:a4:44:13:b7:20:56:cc:46:31:d3:23:61:
fa:74:41:5a:c9:3d:cc:ab:d8:d4:51:00:23:96:ec:
3c:78:a5:41:18:05:db:98:7c:17:85:4c:bf:5c:61:
27:2f:6a:0f:9b:18:ad:36:79:e7:ad:70:ca:27:c5:
0d:73:d9:c8:95:5d:10:7c:46:9a:46:78:d5:98:03:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:1B:3E:4C:09:E6:F2:77:55:A9:5C:3C:B5:B8:98:8F:6C:04:33
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/JE0bPkwJ5vJ3ValcPLW4mI9sBDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.104.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f9:28:28:b0:75:96:4d:a5:04:b6:c9:d7:03:04:67:2e:c9:
f0:cd:4f:c9:86:a7:e2:f0:b9:cd:d1:51:64:c4:1a:67:c7:96:
bd:af:ef:0a:41:5d:4e:e1:10:2d:60:88:c4:7b:e2:18:ff:9b:
b3:d7:9d:7a:9d:90:eb:b2:ac:a1:da:35:9f:8e:70:a0:b9:07:
6e:54:5b:7f:29:f7:c7:2e:0c:24:64:1d:da:84:1e:a2:3f:18:
f4:eb:35:21:de:e5:71:7e:4e:c2:70:11:e8:04:bf:47:64:30:
4b:71:ff:0d:bb:52:46:a0:a5:b6:f8:aa:31:9b:e0:55:96:b5:
16:48:44:b8:58:5d:35:0b:06:ec:48:eb:90:07:7a:c9:07:7e:
4e:db:f2:dc:2d:32:61:e6:6d:06:ef:29:eb:69:11:be:03:ce:
e7:50:6d:23:61:6b:55:a0:ad:b0:35:a2:1b:d1:f8:87:c7:38:
10:be:2f:3e:9e:38:0e:d4:79:01:ff:d2:1a:16:ce:f9:75:84:
f9:24:82:fd:12:32:5a:48:30:81:a2:df:86:54:c4:37:c7:c5:
7a:89:43:fa:eb:a4:b4:2b:ce:63:42:62:4e:b8:79:85:76:66:
38:57:ef:ce:56:a8:6a:c8:53:8b:74:8c:8a:4a:a7:7b:e9:c7:
d9:65:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:16:31 2024 by rpki-client on console-fra.rpki-client.org