Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jCPn0w6D9GwXnZ14NJZ_ydujHK0.roa
File: jCPn0w6D9GwXnZ14NJZ_ydujHK0.roa (raw, json)
Hash identifier: DD71CTXWIPUmX2FwlMK+8o7x+q3k/nG2anqRVIDz8F0=
Subject key identifier: 8C:23:E7:D3:0E:83:F4:6C:17:9D:9D:78:34:96:7F:C9:DB:A3:1C:AD
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE5EF3B91667D55FE508D6C18E9FE
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jCPn0w6D9GwXnZ14NJZ_ydujHK0.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206781
IP address blocks: 195.136.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e5:ef:3b:91:66:7d:55:fe:50:8d:6c:18:e9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c23e7d30e83f46c179d9d7834967fc9dba31cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:9b:9b:d3:b6:e4:bf:c1:b3:4c:ad:4c:31:
8e:5b:1a:ea:a8:10:b1:d9:f8:9a:ad:61:28:1f:71:
8e:5b:92:e8:ca:03:cd:df:46:b2:b0:d4:a6:81:9d:
48:bf:d0:08:a4:70:a5:7a:1d:c0:5d:9a:e5:11:e5:
f7:13:b1:e5:74:3b:40:2c:89:70:b8:57:72:3e:ec:
d7:96:50:86:98:71:3d:46:21:ce:dc:88:d7:b8:80:
bc:80:4a:1a:1a:ea:3b:3a:70:9d:05:f4:b3:6c:32:
46:c7:88:5b:27:81:2f:cf:43:27:5d:8b:25:ec:45:
93:77:20:40:fe:2f:5a:a3:06:87:50:af:d9:c1:2e:
25:da:1f:a9:1a:9a:9e:a0:2d:b6:3f:95:d3:fa:3f:
64:71:e1:57:64:b5:68:42:d1:5b:09:49:8e:22:89:
a0:f3:cd:b8:0b:48:57:32:5e:5e:3e:82:2c:8d:f9:
f6:5e:1b:17:e2:4b:13:4e:dc:8d:44:b0:2f:45:fb:
1f:12:22:b7:94:f7:e5:92:0d:a3:6a:68:1b:7d:75:
e9:6a:0a:c6:80:12:81:23:d3:3a:8c:2c:b5:d6:aa:
33:5f:0e:d1:21:17:db:fc:95:69:02:dc:31:b9:d8:
1c:e3:cf:57:46:f4:e3:e0:ad:5b:0d:78:bc:f5:07:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:23:E7:D3:0E:83:F4:6C:17:9D:9D:78:34:96:7F:C9:DB:A3:1C:AD
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jCPn0w6D9GwXnZ14NJZ_ydujHK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:54:fe:fb:4a:82:a6:db:0e:8f:cb:23:aa:9d:12:62:8d:80:
fa:06:dc:72:a5:c5:77:d8:a1:79:48:30:47:99:f5:bc:ba:1d:
ea:24:ca:c9:22:57:3e:e0:d7:e4:81:0a:82:18:dc:d9:fc:ec:
d4:db:e0:b3:c9:3a:80:5f:f7:ae:fe:be:06:be:5f:28:48:45:
57:7d:73:33:6e:87:36:28:f3:df:7d:64:92:0f:3b:66:5b:c2:
4d:54:8d:2b:a8:04:a8:1c:e0:ba:82:b5:b3:ee:8b:bb:b8:46:
17:22:06:af:6a:9f:df:57:84:85:a9:ef:b4:9d:19:b9:12:7f:
0a:72:31:d8:ef:95:35:9d:1c:dd:9e:7b:ed:30:ab:9b:99:b6:
36:b1:4d:7c:45:9b:10:e0:c6:14:bb:07:8c:f0:fe:85:f1:ad:
9f:32:a6:11:de:db:5a:01:3b:5e:0b:da:f7:e4:85:cb:c9:2e:
79:2f:45:06:c1:9a:cf:7b:2d:3f:f7:3e:fe:b3:86:da:71:49:
89:24:61:24:49:b0:84:a3:38:c4:73:3c:00:3f:d9:83:de:ff:
70:c8:6a:24:0b:e9:07:d3:b7:d4:dd:61:36:9f:91:5d:b2:76:
46:a2:7b:57:9e:a3:c6:45:88:94:db:f6:6a:bf:53:d2:f6:f3:
8c:8d:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:44 2024 by rpki-client on console-fra.rpki-client.org