Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/jFB5EINQvX0FW52z_q-EAHrGOoE.roa
File: jFB5EINQvX0FW52z_q-EAHrGOoE.roa (raw, json)
Hash identifier: qeoTwd0gRAcYq/vTl5kSR53RrtJAYxREdU2E08okkfs=
Subject key identifier: 8C:50:79:10:83:50:BD:7D:05:5B:9D:B3:FE:AF:84:00:7A:C6:3A:81
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 018CC2DB2332E03400EE1D5B724D7B49FD65
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/jFB5EINQvX0FW52z_q-EAHrGOoE.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48851
IP address blocks: 141.226.252.0/22 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:23:32:e0:34:00:ee:1d:5b:72:4d:7b:49:fd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c5079108350bd7d055b9db3feaf84007ac63a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:18:a3:33:e4:a6:d2:d7:e4:a5:a0:db:3d:
3f:b3:ec:93:60:bd:e1:fd:c8:b6:31:eb:4f:e1:4d:
0d:e5:67:b0:5d:e7:c5:60:17:de:bf:32:31:11:d8:
2f:e7:16:19:d7:0b:f3:56:4f:e5:7a:15:8e:27:c1:
95:96:43:30:9f:ea:0f:c3:c5:26:4b:64:05:9d:25:
a1:39:1b:13:f8:24:91:7d:58:92:f3:da:13:c9:77:
c2:b8:b9:87:a2:4c:55:f1:94:19:d9:30:10:ad:1a:
64:af:31:08:0a:64:29:80:49:24:04:74:b8:62:8a:
da:33:eb:9a:de:11:52:6c:0c:40:95:2b:5f:8b:45:
04:a8:75:56:86:83:c2:a5:ca:0e:ec:e4:de:31:49:
63:71:5a:83:7e:3d:f1:02:98:65:c8:cd:ce:05:d6:
47:94:00:08:6a:8a:f5:7e:13:53:c3:e1:3e:cf:6e:
84:57:d0:e3:a4:ef:38:e2:96:d0:38:1d:82:ac:ad:
50:0c:ab:21:6d:58:2b:30:1f:f2:22:91:eb:10:10:
63:f4:1b:26:56:17:9c:40:89:51:2b:77:26:b5:a8:
68:a4:8d:3e:be:cf:53:6f:cc:54:d6:f2:59:4a:79:
26:a4:4c:0f:0a:59:6a:de:6c:ff:ef:34:4a:b3:85:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:79:10:83:50:BD:7D:05:5B:9D:B3:FE:AF:84:00:7A:C6:3A:81
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/jFB5EINQvX0FW52z_q-EAHrGOoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.252.0/22
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
27:f0:9d:ed:42:aa:43:a3:27:60:e7:85:5f:0f:ae:5e:46:ad:
2c:12:e4:a5:3b:e6:40:d5:70:ac:48:ab:b1:2a:a5:e7:2e:ed:
87:3d:89:61:78:18:37:fe:21:4d:5c:42:4c:56:cd:7a:93:d0:
7e:19:c9:f8:a6:9b:dd:44:00:01:74:0d:30:53:db:e1:a5:28:
99:6e:75:98:5b:11:b5:c7:1f:b5:55:e2:46:92:4b:a5:bc:39:
57:df:20:c6:1a:6d:e5:c8:48:1c:e9:8b:ea:b0:cd:33:e0:86:
1f:3c:3e:57:6b:2b:da:ee:0b:c4:8d:6a:19:ff:bf:22:3b:ba:
4b:b6:ba:93:fc:66:4e:ba:c4:3d:53:18:ab:4a:3b:23:a2:b1:
99:1d:55:b9:63:ad:20:ee:9c:5a:3e:62:b1:7c:fa:19:aa:58:
61:a8:68:b5:0f:28:c4:10:25:6a:d8:78:a6:9c:18:38:7c:13:
68:ee:5a:6d:26:92:99:fe:8c:67:af:73:f1:3b:7e:e1:ee:c2:
56:e5:2a:8b:5b:cd:f4:06:07:6c:23:4b:3a:fe:06:34:50:b7:
5f:18:53:7b:f2:8c:b6:9a:27:3b:e0:6f:7e:a5:45:51:61:d7:
75:24:88:b5:c7:7d:b4:8d:58:54:7b:98:47:a8:c2:c2:17:f1:
0e:c9:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:20:53 2024 by rpki-client on console-fra.rpki-client.org