Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/Jnk1gvpNMeGCGkzYJyRL79dotBc.roa
File: Jnk1gvpNMeGCGkzYJyRL79dotBc.roa (raw, json)
Hash identifier: 02aJ6mgsGXaqqmsNdECtRtifHCo5VqyAByO3HVqsKzg=
Subject key identifier: 26:79:35:82:FA:4D:31:E1:82:1A:4C:D8:27:24:4B:EF:D7:68:B4:17
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 018CC425585BF2F3598A9B73AFB718B9F871
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/Jnk1gvpNMeGCGkzYJyRL79dotBc.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200820
IP address blocks: 185.94.13.0/24 maxlen: 24
185.94.14.0/24 maxlen: 24
185.94.12.0/24 maxlen: 24
185.94.12.0/23 maxlen: 23
185.94.15.0/24 maxlen: 24
2a03:9fc0:2::/48 maxlen: 48
2a03:9fc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:58:5b:f2:f3:59:8a:9b:73:af:b7:18:b9:f8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26793582fa4d31e1821a4cd827244befd768b417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:90:17:22:21:22:a9:2d:c0:47:68:9a:e8:
63:88:55:56:84:ec:82:ef:76:55:22:56:21:8c:5e:
5a:fc:42:7b:69:2c:8e:cf:69:c1:45:61:8b:d2:16:
6f:f5:70:7d:86:20:62:e9:35:61:94:03:4d:5b:0c:
0f:ba:45:64:3a:61:4b:38:f5:8a:ad:2d:ce:7f:ac:
7b:a9:86:3f:2f:d3:e4:58:76:35:b0:73:9c:ad:e8:
c4:b7:ee:b3:b0:93:37:59:b7:95:0c:f9:4d:64:be:
74:f4:f7:fe:7c:81:53:8b:8b:07:cc:47:60:49:2f:
62:3a:ad:7a:ab:5d:2c:2e:98:86:ab:38:83:56:f5:
37:3d:6b:af:f3:66:97:b3:8a:37:89:79:59:f8:e3:
e4:39:d8:6f:14:34:6e:0f:77:a0:ff:b6:7e:a1:d2:
89:de:f3:e4:b1:c1:0c:4e:df:1b:56:26:4e:7e:f6:
59:c0:4f:cf:71:bb:fa:d5:f0:f9:0a:ac:26:41:96:
c8:bb:2d:3a:72:35:1f:b8:b6:9d:d3:fd:92:eb:85:
ad:4e:b6:ff:b1:40:5f:20:02:a2:8e:52:9e:66:7b:
70:0f:e6:08:99:12:2b:00:b8:fc:32:46:1d:b0:70:
0c:55:2d:e0:e2:62:a3:af:0f:3f:20:c8:75:d2:5e:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:35:82:FA:4D:31:E1:82:1A:4C:D8:27:24:4B:EF:D7:68:B4:17
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/Jnk1gvpNMeGCGkzYJyRL79dotBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.12.0/22
IPv6:
2a03:9fc0:1::-2a03:9fc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8c:4f:b9:73:a6:4d:ec:e9:18:f7:82:a9:40:ab:39:a2:18:4c:
82:a3:3a:fb:03:62:ee:72:60:b9:ff:be:56:49:2e:11:75:94:
6b:06:04:73:0b:da:ef:16:8b:8b:fd:56:6f:64:c9:63:fb:f6:
98:d7:b6:8f:9b:3b:13:2a:09:bf:dc:77:53:a4:50:38:c5:3b:
f0:2a:c0:ad:95:a4:f2:90:d1:46:75:77:56:60:7c:76:19:74:
d6:ce:5b:c1:d2:c0:50:50:42:67:8a:e7:82:3c:2e:72:e9:7b:
1d:be:8a:8d:b7:32:c5:52:ab:c4:1e:39:23:5f:61:d5:c0:5f:
6c:3a:4c:49:13:b7:16:2d:73:e0:6c:c0:a4:b7:bc:5f:a7:7d:
6c:0f:d3:32:04:25:d0:7f:2a:93:7e:bf:ee:75:98:b6:86:d1:
85:fd:ec:78:77:ac:55:50:b3:ff:39:78:39:e8:75:0c:dd:da:
2f:87:fb:86:47:8c:51:7a:9c:4e:55:34:87:c7:5c:82:b0:cc:
03:f8:b6:27:87:88:02:b5:01:38:ff:7e:4c:f2:24:67:bf:9b:
90:5d:39:42:77:be:32:c8:ac:0d:7e:bb:4d:c9:7d:b5:16:90:
c5:77:79:78:a3:c6:11:1b:9e:9c:5e:ff:b0:19:14:74:ce:e3:
ca:67:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:57:14 2024 by rpki-client on console-fra.rpki-client.org