Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/jMTK_5OjrWyVk-xglOQaB6IlA7A.roa
File: jMTK_5OjrWyVk-xglOQaB6IlA7A.roa (raw, json)
Hash identifier: RqyARmF11D+B/Hqmgnvgba6svYpxRvfKvq3LivS6mVc=
Subject key identifier: 8C:C4:CA:FF:93:A3:AD:6C:95:93:EC:60:94:E4:1A:07:A2:25:03:B0
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 018CCA2A32C12CC72C6CB13F47E817969C9C
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/jMTK_5OjrWyVk-xglOQaB6IlA7A.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52215
IP address blocks: 91.225.16.0/22 maxlen: 22
194.11.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:32:c1:2c:c7:2c:6c:b1:3f:47:e8:17:96:9c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cc4caff93a3ad6c9593ec6094e41a07a22503b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:32:f1:59:12:09:db:5b:dd:16:2c:1b:78:
d8:66:36:16:81:89:e8:02:d1:d2:95:ba:dd:15:52:
da:81:db:83:79:11:8e:94:9c:9f:19:bd:61:f9:d6:
43:1b:7c:62:29:20:76:02:ee:d8:9e:39:e5:07:d2:
58:18:5e:f8:62:78:5d:6a:18:ee:3b:a8:b3:ad:44:
d5:f1:33:32:ae:bf:ff:ff:36:d6:c5:53:e4:cf:a8:
f3:96:98:13:b7:bd:6c:80:a7:ae:32:74:97:75:c8:
64:d8:f1:75:4e:12:cf:95:79:ef:fc:41:10:43:57:
b9:ac:d8:35:a7:ed:3c:15:c1:2e:9a:9f:57:89:ca:
bc:e6:b4:97:d2:7b:d4:67:11:18:8d:63:31:02:ea:
7a:ce:2a:81:f2:6a:ae:90:6c:9e:d0:e4:89:b0:38:
6a:90:83:eb:8e:cc:ae:2f:6e:be:08:c0:3b:49:f0:
23:9b:6b:d3:13:43:b8:c6:68:5e:8c:ec:88:24:b9:
75:c5:4e:4b:cf:e6:90:66:45:b4:c5:0c:ac:01:0d:
75:10:4a:5c:c6:40:32:f7:97:73:ad:6b:44:ac:f4:
cb:02:13:86:a4:3f:9f:92:1c:26:44:2a:51:ef:e4:
6c:ea:1a:3d:47:c1:1f:ea:66:93:0a:0d:b6:02:b8:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C4:CA:FF:93:A3:AD:6C:95:93:EC:60:94:E4:1A:07:A2:25:03:B0
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/jMTK_5OjrWyVk-xglOQaB6IlA7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.16.0/22
194.11.18.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0e:11:77:1d:c1:e4:d7:27:cc:0e:c4:4b:59:bb:4a:77:78:
58:b1:62:b1:39:9b:14:7f:48:ba:fa:04:6e:9d:a6:9c:1e:11:
70:6e:c2:ab:65:b5:a3:f1:01:63:5d:a1:40:6b:f7:44:6d:3b:
6d:d5:03:d3:06:33:a9:a1:29:14:bc:be:62:f9:db:15:01:54:
04:60:92:66:04:da:09:4f:06:19:d0:64:83:cb:4b:c7:65:18:
fa:1f:c7:17:0a:2f:e3:c2:54:1a:83:f1:d0:ec:60:20:30:8c:
17:12:4c:fa:3e:d2:7b:b4:c5:c1:96:ac:93:44:6c:4a:c8:65:
a9:f1:26:fc:36:ed:2d:07:85:79:94:65:f0:76:6e:c9:cb:17:
a0:d9:99:95:36:28:22:8a:f7:1e:e7:27:40:51:e9:aa:de:d2:
fc:19:b4:d8:86:64:a3:a5:70:ed:23:4a:aa:28:0f:55:74:f1:
05:67:85:c7:7b:d7:9b:a4:63:ee:f0:d2:01:1f:f3:50:ed:67:
b8:90:dd:6c:81:4b:92:69:f2:9e:d1:25:c3:71:fb:4b:f7:4c:
9b:a5:53:a6:98:65:2d:6d:36:54:f3:65:bc:77:15:b1:95:e9:
9a:83:28:51:ab:3e:60:3f:1b:37:2e:8a:e6:c4:70:5d:13:a3:
a9:ef:b7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:24:24 2024 by rpki-client on console-fra.rpki-client.org