Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jXXIySA5SDlk1APvUPNAsBgU1bc.roa
File: jXXIySA5SDlk1APvUPNAsBgU1bc.roa (raw, json)
Hash identifier: IqfYu5qOv4IBid2JjWYeuOjGReMULnJw+TOuOhJ4oSA=
Subject key identifier: 8D:75:C8:C9:20:39:48:39:64:D4:03:EF:50:F3:40:B0:18:14:D5:B7
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018F334B5E0DCCBB6A712B0964047678310E
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jXXIySA5SDlk1APvUPNAsBgU1bc.roa
Signing time: Wed 01 May 2024 08:35:28 +0000
ROA not before: Wed 01 May 2024 08:35:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 46.38.154.0/24 maxlen: 24
46.38.156.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:4b:5e:0d:cc:bb:6a:71:2b:09:64:04:76:78:31:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 1 08:35:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d75c8c92039483964d403ef50f340b01814d5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1a:78:23:5c:4f:d4:84:26:bc:02:9f:eb:3b:
88:bd:80:81:e7:6c:f6:fe:39:90:fb:05:59:d0:81:
fd:04:bc:79:3f:e0:d1:46:7e:cd:b7:30:d6:40:93:
bd:2d:2d:58:a5:c7:3c:f3:07:1c:c0:35:7f:71:03:
41:c4:a1:e6:2a:ea:9b:a3:78:74:9a:2f:60:14:da:
0d:27:e1:10:36:3c:d6:8d:e8:e4:47:1b:a0:bc:5e:
02:d9:fd:d9:70:37:a1:f9:ca:ed:c7:91:1b:6d:8d:
ab:2b:29:6b:ab:0f:a8:41:11:52:c0:f9:d5:2b:a7:
8d:f1:5a:fe:96:7d:c6:9f:68:75:01:f6:b9:53:fc:
88:bc:2d:5f:1f:63:59:fd:42:35:68:b7:29:38:5f:
86:ec:f4:bc:3a:80:03:b8:6d:cd:3f:e8:4b:f2:9f:
e0:06:3f:97:53:ff:1a:5e:c8:6b:6e:4a:63:b0:ff:
e5:d2:d1:77:0d:6a:51:92:83:f3:91:d6:ca:43:1e:
63:d8:54:44:1a:c1:ac:36:0e:a0:2c:50:5d:df:e1:
85:0c:33:66:20:d6:c3:a9:1d:ac:5b:e6:3a:8d:ab:
ef:ea:d6:dc:70:2d:bd:fb:ff:2a:13:ca:49:77:26:
38:10:47:1f:56:b0:c0:3e:21:17:a8:d5:5d:59:b9:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:75:C8:C9:20:39:48:39:64:D4:03:EF:50:F3:40:B0:18:14:D5:B7
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jXXIySA5SDlk1APvUPNAsBgU1bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
46.38.156.0/24
212.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:76:95:84:5b:a6:5c:60:0e:d0:21:d5:f7:64:41:a5:11:22:
2d:43:7a:95:45:05:d4:ac:d6:ec:fe:35:50:fd:82:08:ab:ab:
f8:28:c5:06:dc:9b:5c:ab:34:ca:83:65:e3:56:6a:ee:ca:41:
8f:9f:0e:bd:b1:f0:ab:15:e1:42:ca:b0:98:5f:b9:07:fa:e3:
3c:9c:57:26:85:87:36:7c:da:1f:4c:49:2b:04:e7:25:24:0d:
1d:20:63:72:ba:bb:e8:4d:c5:fb:3a:ac:02:64:0c:90:c8:3c:
ea:e2:2b:6d:7f:00:10:2f:30:b4:fc:e4:04:a9:1b:ee:4a:2e:
d8:0a:89:6f:19:03:0b:3f:fe:9d:29:f3:83:a6:32:54:cf:84:
f5:22:56:39:eb:ca:6b:c6:77:43:2c:92:02:59:a5:2b:19:c8:
ac:d5:00:d1:8f:06:31:3e:92:96:a0:07:f8:d2:7f:ea:53:bb:
4f:39:83:f3:b9:62:c7:ba:76:a9:c0:95:9d:66:b8:e7:7b:fa:
d6:40:9c:2f:1c:70:52:82:48:76:e7:18:1a:88:90:d2:dd:f7:
09:6e:19:14:e4:7b:53:c0:f2:81:c4:58:18:fc:98:c1:48:5e:
ee:7a:7e:3b:2e:55:22:35:85:af:2b:14:af:94:68:9b:d6:fd:
65:a6:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 19:52:48 2024 by rpki-client on console-fra.rpki-client.org