Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/J0X2ia_8WSA97Of1Px5wVP2kWyw.roa
File: J0X2ia_8WSA97Of1Px5wVP2kWyw.roa (raw, json)
Hash identifier: TWm5JWEIZB+mP1wZQ2C04ePrElzGPe8kcfa+vR6Pgu0=
Subject key identifier: 27:45:F6:89:AF:FC:59:20:3D:EC:E7:F5:3F:1E:70:54:FD:A4:5B:2C
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 018CC6B9429540EF79FF9B059968E1C29350
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/J0X2ia_8WSA97Of1Px5wVP2kWyw.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44136
IP address blocks: 185.20.12.0/22 maxlen: 24
91.201.60.0/22 maxlen: 24
46.16.232.0/21 maxlen: 24
2a02:28f0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:42:95:40:ef:79:ff:9b:05:99:68:e1:c2:93:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2745f689affc59203dece7f53f1e7054fda45b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:17:ee:c5:7e:bc:cb:89:7b:e0:27:90:ce:
e0:0f:7b:d0:7c:07:52:97:ed:42:50:51:45:b1:3a:
df:73:fe:f6:8f:ba:84:ff:a7:5d:55:cf:62:fc:7e:
15:e2:65:8c:3f:d1:6e:5c:c5:c4:c9:6d:b1:fa:10:
0d:c4:94:6b:ff:17:0f:f8:ca:c1:a7:22:e3:52:ca:
df:63:bd:c6:17:89:36:a2:f7:0d:65:11:fb:61:f4:
15:a2:d7:c7:f3:71:cf:21:c0:da:e6:6a:f9:14:06:
fd:fd:56:a1:00:2c:d6:1c:e0:e5:3d:58:fa:2b:1d:
bd:ed:b5:85:f4:ea:1e:f6:f3:07:ae:06:46:de:c9:
4a:07:7a:33:0a:25:14:67:70:b3:94:f7:67:dd:01:
58:65:00:b3:4f:a2:7b:bd:48:f2:62:c1:2f:aa:0f:
c8:71:12:2c:31:c9:00:25:e6:38:6f:d8:e7:2f:4a:
a5:ad:d4:d8:bb:13:f9:af:86:97:e8:dc:8a:3d:1d:
47:e0:a0:2b:72:a4:95:c3:ae:8b:fd:2e:f3:f4:33:
5a:a8:31:3b:97:5e:6f:82:6e:1b:e1:8a:4a:95:ce:
b9:10:90:e4:03:ab:48:cf:e7:15:40:3d:41:3f:d4:
51:ab:06:43:06:f9:48:58:db:24:36:71:50:00:97:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:45:F6:89:AF:FC:59:20:3D:EC:E7:F5:3F:1E:70:54:FD:A4:5B:2C
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/J0X2ia_8WSA97Of1Px5wVP2kWyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.232.0/21
91.201.60.0/22
185.20.12.0/22
IPv6:
2a02:28f0::/29
Signature Algorithm: sha256WithRSAEncryption
79:e7:66:0a:35:66:ce:0f:03:96:c8:8f:b1:d6:ee:09:f3:5e:
c3:77:7a:8f:f7:d7:9e:2e:ee:b4:18:37:0e:2d:1e:a1:c5:75:
d7:cd:5d:6a:04:8b:5d:03:aa:f4:30:6b:41:60:19:b3:85:e6:
ca:a5:8a:0f:30:9a:f9:14:cc:d6:90:f0:c1:fa:a2:12:78:df:
aa:16:ad:03:85:a5:1c:60:1e:65:c8:86:80:bb:6e:f7:a4:e5:
76:2b:8c:b0:37:37:6b:10:71:e5:fc:cb:08:94:e4:e5:a1:e9:
b4:6e:8a:06:0e:dd:2a:bd:d7:ae:fd:db:95:c3:67:c5:38:1f:
cd:8a:10:b2:90:a1:ec:66:da:18:a4:74:f2:68:84:85:a4:73:
a9:14:f9:5f:4b:0c:24:7b:6e:5f:e9:4b:71:2b:04:e7:df:c4:
b5:33:7f:b9:3a:40:ac:f5:15:a1:1e:d0:ac:06:19:07:d1:79:
91:67:8e:05:3c:f5:81:d9:94:ee:ba:5a:3f:0d:1b:b5:d6:96:
ba:87:45:7f:e1:69:6c:7b:5e:5e:9a:5d:30:a9:99:97:9d:fd:
c0:39:e9:fe:25:5e:4d:06:6c:9a:22:09:00:a5:65:6f:8c:c8:
f8:2a:f6:d2:47:d1:91:8b:53:81:c3:db:ef:3a:40:2c:6e:ab:
78:f1:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:23 2024 by rpki-client on console-ams.rpki-client.org