Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/jEOvpcdFKWI8wf4Ui1r-zXAjfgY.roa
File: jEOvpcdFKWI8wf4Ui1r-zXAjfgY.roa (raw, json)
Hash identifier: dleyQRweaO5HWrXAd7te/yMUxo5v2A1Z0o+PNDuExvE=
Subject key identifier: 8C:43:AF:A5:C7:45:29:62:3C:C1:FE:14:8B:5A:FE:CD:70:23:7E:06
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 018CC726009C95E9AEBBA6CE1EDDBC72AE80
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/jEOvpcdFKWI8wf4Ui1r-zXAjfgY.roa
Signing time: Mon 01 Jan 2024 22:30:05 +0000
ROA not before: Mon 01 Jan 2024 22:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39024
IP address blocks: 194.69.200.0/24 maxlen: 24
151.237.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:00:9c:95:e9:ae:bb:a6:ce:1e:dd:bc:72:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 1 22:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c43afa5c74529623cc1fe148b5afecd70237e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:75:b9:d3:a8:1a:70:8d:b1:10:fa:93:3a:
13:80:36:3e:c1:2f:e5:12:6f:32:3a:d3:ac:c4:88:
7a:59:c9:67:69:73:78:43:f9:d8:c8:5b:9a:d2:b3:
d0:2a:47:12:49:75:7d:95:ba:24:c8:0a:c0:3e:6b:
45:47:ea:7f:2c:f1:75:af:f6:86:a3:bf:88:0d:1f:
05:b8:f5:47:57:bf:8f:3a:d8:b3:5f:f4:9e:50:81:
67:8b:c4:08:5e:0d:ce:6e:ae:ba:e8:24:82:61:d9:
b7:d7:af:e1:6e:f3:65:6c:a3:f5:48:39:0e:55:ff:
c5:5a:25:36:60:20:c8:d1:e7:59:07:13:d7:c9:8b:
b6:b2:cb:ca:c0:0a:a7:88:18:20:f8:97:11:83:20:
40:0e:3a:a0:0b:26:7a:f6:78:08:f4:bc:7d:57:07:
ae:fa:53:b7:32:90:d2:06:b3:45:f7:33:6e:a1:4d:
9a:d5:c5:1b:9a:ce:0a:fa:6b:93:29:ed:3f:69:5c:
62:f8:c1:19:91:09:03:21:93:67:c2:b9:bc:a0:22:
dd:c8:3c:5b:8b:b5:3d:04:8c:8e:a0:da:fe:40:89:
c8:e9:87:7a:5a:76:16:02:d4:73:b5:7c:3b:bd:82:
e6:86:91:a9:0e:04:2e:f7:8b:03:38:c7:b0:63:d4:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:AF:A5:C7:45:29:62:3C:C1:FE:14:8B:5A:FE:CD:70:23:7E:06
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/jEOvpcdFKWI8wf4Ui1r-zXAjfgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.40.0/21
194.69.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4c:80:ee:52:e0:72:e9:77:1e:1c:3f:1a:fb:d8:67:bb:7e:
4a:af:81:ff:37:fd:2a:c2:4e:6b:24:00:75:41:68:2a:d6:a5:
dd:0f:98:b5:9f:4f:f6:17:3d:7d:b1:c2:f8:82:84:15:1e:ba:
d1:64:b0:0b:ae:f1:ba:ff:87:a9:94:b6:b2:9d:69:9e:c1:76:
bb:39:23:7a:41:aa:14:2b:21:07:11:af:d5:ff:f1:cd:7b:9a:
a1:2f:fa:79:01:6c:64:fd:b5:14:18:54:e7:2c:c5:33:76:9f:
49:4c:61:31:82:c0:18:b1:a5:90:df:4b:06:88:ba:73:97:39:
82:cd:51:60:e6:ec:33:74:81:d0:ec:80:97:6d:2f:a5:5e:cf:
0c:66:b8:f4:5d:4a:1c:5c:7b:91:e7:bb:38:83:e8:ae:6d:cc:
7d:e2:02:94:1b:5e:4f:83:40:8d:de:aa:f0:d0:95:c1:fd:9d:
81:a4:46:72:f7:02:63:eb:8e:ca:36:d0:4c:f1:ae:9e:b7:f0:
14:b2:17:7e:4e:bd:c6:01:1e:46:cb:32:02:78:02:de:47:bf:
9e:89:ad:ae:40:9d:c5:f4:ac:16:df:c8:c1:6e:31:a8:3e:80:
30:2d:b6:87:fc:a7:b2:0e:b1:4a:cc:c8:14:e0:26:09:eb:51:
d8:a4:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:19:04 2024 by rpki-client on console-fra.rpki-client.org