Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/jhqsv_8e6DR_2qQ3xmdM6MF_W50.roa
File: jhqsv_8e6DR_2qQ3xmdM6MF_W50.roa (raw, json)
Hash identifier: BBimXB8NwTllGoX2ffaLOfXe2A6vwayNOc2GrTrEaxs=
Subject key identifier: 8E:1A:AC:BF:FF:1E:E8:34:7F:DA:A4:37:C6:67:4C:E8:C1:7F:5B:9D
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 01900D1628F56CD2DF03E95F1499055B142D
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/jhqsv_8e6DR_2qQ3xmdM6MF_W50.roa
Signing time: Wed 12 Jun 2024 15:34:34 +0000
ROA not before: Wed 12 Jun 2024 15:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210129
IP address blocks: 185.94.132.0/22 maxlen: 22
185.227.120.0/22 maxlen: 22
2a0d:52c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:16:28:f5:6c:d2:df:03:e9:5f:14:99:05:5b:14:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Jun 12 15:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e1aacbfff1ee8347fdaa437c6674ce8c17f5b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:04:f3:2f:1d:92:1e:bd:4f:f6:a8:02:1f:
07:86:61:d9:0d:07:dd:c1:90:62:2c:3d:54:ea:cc:
18:0c:65:b7:4e:0d:f5:27:7a:91:d5:e6:e5:90:c2:
88:a1:7f:36:ed:ba:ff:24:c5:10:06:6e:2e:fb:8f:
b1:bb:c8:3d:2a:d6:9b:8d:25:d0:31:0e:ee:4b:55:
b2:09:57:97:cf:18:c2:7c:3f:12:dd:79:06:13:3b:
ec:54:f4:bc:37:c8:c1:1b:a6:bf:bc:cb:cb:47:d0:
78:95:5d:09:30:8e:b5:c1:51:48:3a:93:fd:b3:a6:
e7:35:23:d4:dd:05:46:2b:da:c4:e4:fe:c3:b0:d2:
0e:0c:6d:f6:ef:74:9a:89:4b:99:8f:66:04:e7:61:
e4:e1:bd:0c:55:48:bd:9f:0a:4a:13:7c:02:36:b2:
dc:99:68:68:2f:98:ba:16:c7:52:51:6e:fe:eb:c1:
46:86:d4:79:2a:e6:23:96:16:3f:c3:b2:41:3d:21:
cf:29:b9:e6:39:a9:d1:4b:d0:39:7c:f7:d9:ec:fb:
87:02:f7:1a:cc:ba:f8:1e:1d:d7:ad:7e:10:c4:77:
81:5c:82:37:86:7d:f4:c6:2c:e6:86:33:0c:ca:7b:
5d:21:ff:ad:2e:30:56:a7:78:33:47:fd:0b:a7:32:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:AC:BF:FF:1E:E8:34:7F:DA:A4:37:C6:67:4C:E8:C1:7F:5B:9D
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/jhqsv_8e6DR_2qQ3xmdM6MF_W50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.132.0/22
185.227.120.0/22
IPv6:
2a0d:52c0::/29
Signature Algorithm: sha256WithRSAEncryption
77:ed:87:3f:27:a6:c5:fb:71:bc:0f:70:8b:91:26:7b:d9:76:
85:90:21:25:86:4f:1a:f4:5b:76:7e:c8:72:2d:ec:0d:93:2d:
07:6f:ed:51:42:95:c5:7e:0d:a1:f1:02:1d:b3:dd:f9:3d:f2:
b4:d0:32:92:c3:fc:49:52:fb:27:c8:62:17:d3:73:72:f9:ee:
be:51:44:29:ab:8c:ad:a8:9a:c6:4d:42:f4:6f:c4:f3:b6:6b:
e6:9b:83:38:71:85:7c:a1:31:0c:d9:6c:ef:a9:79:53:d1:b4:
6b:39:75:07:17:d5:66:4c:d4:a7:e6:44:b6:35:e7:5d:6c:4f:
b8:4c:1b:a6:46:40:ac:71:a2:9f:ca:f6:ba:b6:76:2a:61:17:
74:6a:17:c0:07:a8:93:55:42:59:b4:0a:1e:4a:6c:5b:38:be:
8b:6f:fb:e5:bb:77:eb:7d:4b:4d:49:a0:bb:dc:14:1b:84:a6:
16:99:68:e1:0a:bf:b6:17:8e:f8:71:b1:88:ab:f7:70:db:a2:
e1:1d:1e:fa:d7:7d:e0:2e:08:9f:8c:28:51:ea:8d:47:04:f6:
b9:55:bb:86:31:2d:9d:35:b4:4c:c3:4e:92:5b:3e:58:cb:ac:
ef:ae:2b:37:3d:cd:5e:14:52:ee:35:41:9f:ba:1b:cc:d1:40:
bd:62:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:41:39 2024 by rpki-client on console-fra.rpki-client.org