Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/jlejG3jO_CJz0zanFnKFjCx_xDk.roa
File: jlejG3jO_CJz0zanFnKFjCx_xDk.roa (raw, json)
Hash identifier: Nmj8gDotfzDwKGgYTC+6Nx+zUWTsFgf8qvo24v+paEk=
Subject key identifier: 8E:57:A3:1B:78:CE:FC:22:73:D3:36:A7:16:72:85:8C:2C:7F:C4:39
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 018CC794B5CB1F3CAA263AA1AD62401A8E03
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/jlejG3jO_CJz0zanFnKFjCx_xDk.roa
Signing time: Tue 02 Jan 2024 00:31:01 +0000
ROA not before: Tue 02 Jan 2024 00:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59518
IP address blocks: 185.131.3.0/24 maxlen: 24
2a02:6f00:ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b5:cb:1f:3c:aa:26:3a:a1:ad:62:40:1a:8e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jan 2 00:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e57a31b78cefc2273d336a71672858c2c7fc439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:0e:cd:bd:b8:6d:c2:cd:e8:bc:65:81:e6:
3e:8e:d9:bf:45:2f:ca:32:f3:1d:55:cd:51:f3:9b:
31:eb:d2:e7:74:42:ff:a8:d7:66:2a:03:4d:40:99:
e1:d4:da:51:4a:82:45:6f:28:9d:46:5b:30:3a:7d:
74:ac:0a:8b:84:0b:37:cb:aa:f0:fe:13:bc:81:4f:
27:59:cf:9c:aa:3a:ef:80:c5:0b:25:6f:47:a0:dd:
f5:32:38:e4:38:5d:c2:ba:03:ad:39:35:88:12:a8:
3c:1a:a6:5a:de:60:d7:d8:11:1a:f4:cb:13:04:b4:
34:0d:34:6a:d3:37:a9:79:39:c6:e8:cf:fa:27:39:
ec:90:5f:a9:96:52:1e:31:d8:ad:2a:49:bf:21:8b:
4d:db:29:cf:9c:77:f0:ca:50:de:b2:2b:1e:54:d6:
f9:58:53:a0:ac:82:ad:9f:f9:ff:3f:bb:c7:4f:60:
d5:4f:e1:5b:ba:00:85:32:5b:51:c6:00:91:d9:03:
b0:e5:a8:d7:db:9d:67:8a:81:a4:8e:95:ca:ec:80:
5b:04:a0:9a:e0:07:f8:67:5c:4d:e9:14:7b:e7:9e:
d7:84:51:48:14:81:64:5f:e7:5c:0f:bc:51:c7:2b:
b0:ed:1f:32:5b:86:87:2b:02:bf:1f:5c:8d:91:c8:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:A3:1B:78:CE:FC:22:73:D3:36:A7:16:72:85:8C:2C:7F:C4:39
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/jlejG3jO_CJz0zanFnKFjCx_xDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.3.0/24
IPv6:
2a02:6f00:ec0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:72:d5:4e:72:b6:02:b7:5a:98:03:ad:7e:eb:06:c9:c1:4b:
cb:88:1f:bb:3b:2b:94:bb:4b:46:2b:2b:8a:62:3b:57:0c:a0:
57:21:8c:41:87:23:c7:d3:06:26:78:7e:8e:ab:04:b4:62:3c:
ca:55:05:a8:f4:86:04:cf:2c:83:c2:b8:9f:a6:8b:b9:4c:3a:
30:33:b9:fc:46:20:1e:df:48:b9:1d:0f:17:34:9e:fe:d7:36:
b7:98:3b:ad:b7:57:e9:f6:0d:15:b8:71:8b:67:6b:a5:9e:99:
03:35:ee:ae:17:5f:f9:79:d8:55:89:1f:c2:54:82:e6:10:00:
70:73:05:5b:62:e9:15:0b:d9:87:f5:ea:78:a5:76:68:0a:c6:
8b:23:9d:62:48:8e:22:f4:55:97:26:ae:fa:58:75:23:22:e8:
de:ed:de:03:c5:4c:32:a2:a6:95:68:56:cd:db:36:37:07:9d:
a2:39:4c:7f:ce:2f:8f:03:a9:6a:4b:42:e3:c7:7b:dd:4a:5c:
06:ba:23:d9:f4:0b:a7:43:d6:26:f4:42:86:99:2d:6a:8f:a9:
6a:b9:69:44:64:3e:52:70:f0:92:7f:7e:52:20:99:57:fb:a7:
0c:83:5d:c3:25:7c:fb:b5:3e:2b:5d:d7:ce:e9:2e:8c:58:a1:
c7:ef:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:37 2024 by rpki-client on console-fra.rpki-client.org