Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/jnbjeJFwJgdBuRfiLymQTlxa2KI.roa
File: jnbjeJFwJgdBuRfiLymQTlxa2KI.roa (raw, json)
Hash identifier: 6J90oVe8rw/3nhfCDiqjjJlZLwI/5gYKRmJA1vSj+vs=
Subject key identifier: 8E:76:E3:78:91:70:26:07:41:B9:17:E2:2F:29:90:4E:5C:5A:D8:A2
Certificate issuer: /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial: 018D9E74A854190BACE81CA1F00897F0C621
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/jnbjeJFwJgdBuRfiLymQTlxa2KI.roa
Signing time: Mon 12 Feb 2024 17:54:21 +0000
ROA not before: Mon 12 Feb 2024 17:54:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41872
IP address blocks: 185.65.168.0/22 maxlen: 22
194.33.98.0/23 maxlen: 23
195.12.40.0/22 maxlen: 22
195.43.56.0/22 maxlen: 22
195.90.112.0/23 maxlen: 23
2a05:80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:74:a8:54:19:0b:ac:e8:1c:a1:f0:08:97:f0:c6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Validity
Not Before: Feb 12 17:54:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e76e3789170260741b917e22f29904e5c5ad8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:1f:01:2a:94:12:1b:e0:35:bf:4a:f6:d3:
29:e2:5b:62:2b:29:23:77:68:8a:71:f2:5f:b6:5c:
eb:38:1b:0b:52:9d:2c:c8:1b:76:c2:2e:56:dc:15:
4f:ce:a4:59:ab:67:8e:19:71:82:f0:4e:c6:14:0e:
ab:54:09:44:d4:27:c5:0a:3a:f0:61:e3:9f:78:3b:
c8:13:4a:56:d5:2a:09:80:65:b3:7d:bf:c3:02:85:
af:54:57:aa:18:df:43:10:21:51:22:f8:e7:5a:a1:
e4:7e:fa:dc:9c:c4:48:e0:83:73:69:4a:dd:51:81:
e0:a6:f2:5b:c4:e9:59:79:2e:cc:dc:51:69:a8:60:
7d:6a:f3:42:73:b0:82:ee:fe:e5:af:c9:18:ef:3f:
08:76:58:6e:a0:c6:0b:e6:be:11:63:39:2f:da:14:
30:3a:76:09:8e:86:74:5f:43:8f:fd:5e:0c:1a:da:
d9:9f:70:db:e4:75:73:06:57:01:72:97:59:49:ba:
d8:30:4e:d2:59:5b:65:a6:d8:89:08:c2:53:cd:67:
c7:fb:ae:a4:c2:75:16:ba:83:7a:e7:07:52:82:7f:
98:0d:94:90:cc:06:91:68:bb:42:f4:e5:89:9c:3d:
12:1b:0b:0b:fa:bf:5c:35:60:10:a4:ca:db:37:ec:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:E3:78:91:70:26:07:41:B9:17:E2:2F:29:90:4E:5C:5A:D8:A2
X509v3 Authority Key Identifier:
keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/jnbjeJFwJgdBuRfiLymQTlxa2KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.168.0/22
194.33.98.0/23
195.12.40.0/22
195.43.56.0/22
195.90.112.0/23
IPv6:
2a05:80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:8d:9a:f7:56:49:ed:7e:ab:7b:63:4e:13:40:8c:c2:ca:1f:
a2:a0:f4:33:e7:c8:c9:eb:45:b4:00:f3:1e:2f:14:ee:a4:18:
b0:65:96:41:bc:11:5f:d2:55:58:12:19:d8:a2:14:f6:29:6b:
f8:53:ab:59:5d:8b:ef:67:20:0d:12:bd:25:94:ad:c7:ad:0c:
cf:0d:bc:2b:d8:cf:4d:09:40:e3:92:7c:04:67:f5:1e:da:4b:
e1:de:0e:52:79:18:20:49:e3:b4:51:47:e9:2d:53:0d:a8:b8:
fc:8c:bf:dc:e4:1e:85:36:c3:84:35:69:81:b4:c9:e8:49:e4:
c5:50:66:8f:3e:db:92:2f:23:f0:17:74:3e:ec:f0:df:b3:38:
61:6e:22:fb:b6:53:57:c0:d2:6f:77:9b:63:52:92:e0:36:7a:
08:a3:7b:90:ef:f2:59:28:83:44:66:40:07:73:60:35:4a:68:
d3:b6:7e:84:7b:e0:58:a9:c2:a8:96:3a:01:2f:3c:c8:f1:d6:
0e:f9:1b:62:9e:5d:07:0d:71:77:ea:60:a9:6c:d3:a4:88:0e:
7f:8f:ff:57:36:b1:bb:36:d1:e1:77:04:a9:0d:76:8e:30:eb:
38:d1:4c:bc:44:bb:4e:f4:5b:d2:08:2a:60:ca:4c:2f:9f:53:
61:1f:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:28 2024 by rpki-client on console-ams.rpki-client.org