Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/J0_CLpWzDeS7m3t-mYkBwuhdgeA.roa
File: J0_CLpWzDeS7m3t-mYkBwuhdgeA.roa (raw, json)
Hash identifier: yicuwRpdOM/ZZ59rqIk/zdQ93cHh5OUKRZu0pLvPiws=
Subject key identifier: 27:4F:C2:2E:95:B3:0D:E4:BB:9B:7B:7E:99:89:01:C2:E8:5D:81:E0
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 0191DAFD257E089F3566BB1CB5A2720B9F5A
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/J0_CLpWzDeS7m3t-mYkBwuhdgeA.roa
Signing time: Tue 10 Sep 2024 08:11:48 +0000
ROA not before: Tue 10 Sep 2024 08:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.96.0/21 maxlen: 21
212.126.96.0/22 maxlen: 22
212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.103.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.108.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:fd:25:7e:08:9f:35:66:bb:1c:b5:a2:72:0b:9f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Sep 10 08:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=274fc22e95b30de4bb9b7b7e998901c2e85d81e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:51:e9:1a:fe:41:47:81:90:9f:09:6e:03:
bf:cd:9a:2c:47:09:2a:71:c0:81:fb:34:32:0c:96:
78:30:48:2f:3f:e8:aa:3e:23:e1:95:99:a5:ac:59:
2f:66:46:9d:8c:b4:63:85:39:65:53:61:66:81:2f:
87:12:1b:de:85:40:20:a0:58:4c:d4:d8:74:7e:9a:
51:f2:ac:e0:dd:c4:23:6b:31:e3:30:3b:15:5d:84:
4c:69:26:e6:8b:17:b5:9d:66:57:16:ec:77:63:51:
42:f5:2c:b6:36:35:25:0b:49:82:04:68:5b:f0:ff:
e7:bc:6a:a5:ce:3e:d1:9b:03:66:4f:d5:31:0f:bc:
56:88:7c:23:a1:88:f6:fe:20:67:7d:d0:5b:34:9c:
75:96:31:64:c8:b1:cd:fe:3f:b3:8b:34:1e:da:bd:
d4:cb:05:b3:28:aa:e7:13:81:b0:c3:fb:0d:ef:b9:
06:97:0e:9f:67:79:2a:1f:e1:b2:34:21:67:f6:3c:
d8:de:8b:ec:cb:e9:b0:aa:89:a3:b9:a1:66:4a:71:
df:5b:42:15:64:fa:15:18:b2:59:83:b5:28:56:97:
9a:5f:b6:58:4f:c2:2e:35:34:e3:a8:81:ef:1a:a8:
37:0a:61:2c:80:23:c6:59:0c:a0:92:bc:ca:3f:30:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:C2:2E:95:B3:0D:E4:BB:9B:7B:7E:99:89:01:C2:E8:5D:81:E0
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/J0_CLpWzDeS7m3t-mYkBwuhdgeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.115.0/24
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::-2a04:2dc0:19:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
50:3e:e8:08:1e:22:c8:76:06:8a:a5:12:20:22:2a:f6:61:2b:
a0:b4:64:9d:0d:a3:8e:2d:44:36:48:a4:57:58:31:9c:a0:99:
80:48:f7:de:57:27:0e:ee:41:7c:4c:ca:cb:bd:7d:38:51:5c:
21:f0:73:66:de:53:d4:6b:41:c1:82:7d:3d:08:4d:40:55:6d:
a4:e1:9f:36:b2:ae:0e:37:06:a2:71:75:99:7a:0a:c3:7c:4a:
4b:a9:36:fa:ea:67:b2:0b:22:5e:49:4d:da:ae:f3:ad:2e:e0:
bd:8f:a6:b2:b2:70:40:29:bb:ee:cd:af:31:94:d7:f3:dd:40:
eb:cf:e8:c0:79:07:b3:a1:dc:a1:fb:b5:e4:90:f2:3e:a9:66:
71:8b:d5:65:4b:ee:8e:fa:8a:b0:91:3e:61:78:1a:bc:cf:c2:
93:6e:4a:1c:d3:7a:f2:bd:d6:f3:6c:c5:c1:ed:ef:cc:2f:c4:
30:00:48:7a:c1:2f:c4:ce:46:39:c3:f1:79:21:95:db:8c:4b:
d4:c0:98:1c:92:3d:dd:9d:93:a9:f5:93:55:c3:d0:e3:a3:2a:
93:d1:e5:35:97:81:76:0b:b1:27:c4:98:0d:f7:32:07:6f:ba:
c9:c8:26:6e:e6:59:d4:87:be:03:19:13:40:e4:0b:ae:cc:30:
a5:fc:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:20 2024 by rpki-client on console-fra.rpki-client.org