Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/_Jxae0tQVKXtHaJCIvwCTFRch_o.roa
File: _Jxae0tQVKXtHaJCIvwCTFRch_o.roa (raw, json)
Hash identifier: F/syfXnXOlsOFqQCJpBIjWgbJ3IZHPv8r0JYAMVK5ZI=
Subject key identifier: FC:9C:5A:7B:4B:50:54:A5:ED:1D:A2:42:22:FC:02:4C:54:5C:87:FA
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 018CC5000D0ECB197E8135CB9AE02818386A
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/_Jxae0tQVKXtHaJCIvwCTFRch_o.roa
Signing time: Mon 01 Jan 2024 12:29:23 +0000
ROA not before: Mon 01 Jan 2024 12:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48579
IP address blocks: 88.80.8.0/22 maxlen: 24
185.141.30.0/23 maxlen: 24
88.80.12.0/22 maxlen: 24
217.61.244.0/22 maxlen: 24
185.24.132.0/22 maxlen: 24
212.237.144.0/22 maxlen: 24
91.197.40.0/22 maxlen: 24
212.237.148.0/22 maxlen: 24
2a07:2180::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0d:0e:cb:19:7e:81:35:cb:9a:e0:28:18:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc9c5a7b4b5054a5ed1da24222fc024c545c87fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:b8:ec:f1:da:57:db:9e:d8:d6:53:2f:87:
62:27:97:83:a8:5f:33:24:50:11:b1:c7:35:ab:86:
37:dc:23:1c:9e:98:ab:a6:28:e2:e0:3f:fa:53:63:
48:68:69:63:7e:b9:95:cb:01:b7:57:c7:c0:58:ad:
aa:9c:01:57:dc:4e:8a:b6:93:87:e2:22:19:6f:64:
ba:a1:3a:cc:8c:48:e5:38:6b:a6:de:54:45:50:a1:
aa:ed:81:f0:09:91:d6:97:b3:76:97:2c:cb:9d:4b:
5a:72:e0:2f:5c:19:08:ad:06:cd:d1:bf:13:bf:0b:
64:dd:6d:ec:94:91:e7:3c:f5:52:0c:56:66:4b:51:
9b:18:9b:f6:5c:07:2e:d7:cc:e3:2d:b3:61:16:b4:
6a:9c:3f:2f:f7:f1:d9:b2:f3:0f:44:ec:36:f0:71:
71:b6:53:08:d0:d7:f6:73:30:8b:2e:21:b1:43:61:
28:9e:cb:00:a0:dd:25:5f:9f:c7:b0:5f:93:1f:a0:
55:8b:0c:39:8b:20:de:c5:ab:b6:53:20:e6:c2:c5:
a3:9c:c4:5f:db:ee:7b:ad:cd:5f:1e:72:bc:c0:68:
34:68:b6:24:57:ae:3d:80:47:89:63:53:b1:c3:76:
91:19:e8:04:85:8e:7d:25:3f:91:1c:37:82:68:9f:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:5A:7B:4B:50:54:A5:ED:1D:A2:42:22:FC:02:4C:54:5C:87:FA
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/_Jxae0tQVKXtHaJCIvwCTFRch_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.8.0/21
91.197.40.0/22
185.24.132.0/22
185.141.30.0/23
212.237.144.0/21
217.61.244.0/22
IPv6:
2a07:2180::/32
Signature Algorithm: sha256WithRSAEncryption
3b:b5:24:62:62:df:d6:02:d5:b2:a3:5f:a6:b0:63:fd:2d:88:
09:84:1a:ec:22:a6:f2:21:da:72:24:99:43:8d:e4:c3:f0:9c:
a9:02:a6:c4:1b:d9:7d:8b:7f:48:ac:ba:5e:16:0f:4d:94:f2:
b0:ca:69:be:c0:74:52:4d:6e:8a:3d:1f:77:98:1c:ae:ca:d2:
2e:68:e5:0e:26:45:96:c1:2c:cc:67:d4:1a:af:8b:56:d7:b7:
f2:e5:9e:24:2b:19:a8:4d:ab:85:2c:56:47:49:b1:e5:f4:8a:
39:45:55:cf:a1:88:c4:c8:82:8b:d4:f8:b5:6a:fe:79:9a:41:
95:57:15:5b:ad:5b:10:c4:02:22:e1:f6:26:bd:a2:97:8d:71:
31:46:a9:89:2f:21:db:65:0b:10:51:e4:a6:0d:67:1d:52:99:
32:a6:24:c7:94:d9:85:49:14:ae:f1:af:1c:60:e4:21:d4:63:
7f:57:b7:f3:c0:62:04:b8:ce:dc:cf:0b:7e:eb:ad:af:d0:fe:
44:86:9d:b4:7c:68:36:42:14:02:48:7f:78:40:29:93:ad:1c:
be:69:13:6e:02:21:2c:d3:6b:7e:73:90:39:bb:23:97:59:4d:
ac:97:2a:0b:68:f7:b0:11:65:d6:f2:de:fd:aa:09:fe:06:87:
21:32:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:39:12 2024 by rpki-client on console-ams.rpki-client.org