Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/jUa6AmXACCtW6JBpF0cNZ1Kk8Ys.roa
File: jUa6AmXACCtW6JBpF0cNZ1Kk8Ys.roa (raw, json)
Hash identifier: F5x3wSiPiID308qMtGM1SjLI4ZDaxornrTMSuVVN5cQ=
Subject key identifier: 8D:46:BA:02:65:C0:08:2B:56:E8:90:69:17:47:0D:67:52:A4:F1:8B
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 018CC26D0F76AA221FA2547EAFCD403ADAA6
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/jUa6AmXACCtW6JBpF0cNZ1Kk8Ys.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42673
IP address blocks: 91.150.160.0/19 maxlen: 32
91.246.64.0/21 maxlen: 32
91.189.216.0/21 maxlen: 32
91.246.72.0/22 maxlen: 32
195.248.246.0/23 maxlen: 32
185.80.32.0/22 maxlen: 32
2a05:7100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0f:76:aa:22:1f:a2:54:7e:af:cd:40:3a:da:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d46ba0265c0082b56e8906917470d6752a4f18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:ae:92:22:9a:2d:79:a1:9e:98:3d:b0:73:
cd:6f:18:72:fc:63:aa:f7:59:f7:56:53:08:3f:21:
e8:4d:fd:ca:0d:6c:99:22:3f:a0:8b:99:20:e7:54:
ec:76:07:41:73:31:bc:99:c6:da:c0:dc:5e:c3:e7:
82:35:6a:ec:47:dd:52:dc:e5:70:2e:57:7d:d1:c3:
b1:4d:3d:80:85:ae:4c:6b:0b:16:1d:06:c7:c8:5d:
ea:e2:84:f1:a8:1c:11:c5:19:70:d3:73:ea:a2:04:
a3:e3:bb:d6:8c:8c:0e:8f:7c:3c:bd:93:7c:34:2e:
02:de:d7:b9:2f:88:be:64:0e:a7:72:a5:19:c8:9f:
36:8c:44:6a:dd:4f:f6:c5:60:3d:58:6d:bf:13:8d:
02:d8:00:1c:41:1d:f5:8e:da:7a:cd:7e:e8:2d:1c:
2c:55:fb:6d:d2:c5:a8:0e:68:98:de:aa:26:2e:be:
3d:1b:a0:d5:67:67:e4:cd:08:36:a3:9a:f3:83:5e:
72:3a:6e:ad:06:66:54:54:33:ce:a9:be:f9:64:c6:
84:5d:d9:41:76:b0:d4:5f:3a:ff:d6:7b:14:2f:59:
80:77:8c:39:61:3b:12:9d:d6:96:81:18:2e:d5:f8:
8c:75:84:2b:6a:21:07:00:63:1a:d5:f3:23:18:43:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:BA:02:65:C0:08:2B:56:E8:90:69:17:47:0D:67:52:A4:F1:8B
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/jUa6AmXACCtW6JBpF0cNZ1Kk8Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.150.160.0/19
91.189.216.0/21
91.246.64.0-91.246.75.255
185.80.32.0/22
195.248.246.0/23
IPv6:
2a05:7100::/29
Signature Algorithm: sha256WithRSAEncryption
44:f8:6e:87:3c:6b:5c:70:69:dc:35:8f:f7:93:e2:70:87:ee:
33:3d:38:58:34:98:b1:b7:9a:a4:60:dc:f9:1b:cd:c5:48:4f:
33:d2:cf:16:a4:aa:f7:c0:02:71:0e:ba:80:b8:53:38:68:75:
16:ad:26:7f:d1:f9:be:59:73:a1:23:b3:a4:3b:b1:2f:76:7c:
01:a6:12:a9:4c:cc:0a:06:cb:e4:b6:45:48:5a:6d:db:45:fc:
71:46:91:76:34:cc:46:84:25:a0:2f:f3:f9:35:f0:5c:fc:25:
11:bf:1b:85:bd:a3:28:02:a3:cd:24:b3:c7:e4:79:b0:53:c5:
da:95:2a:07:c3:89:54:b1:03:11:a9:46:5c:48:25:a1:f5:fc:
19:15:79:17:4a:49:7e:b6:05:d7:9d:3e:e5:a8:2a:35:ac:07:
2c:f1:84:3f:02:99:b8:bb:5e:35:40:92:d4:fb:29:96:8c:d2:
b5:2f:4f:24:9a:17:42:ce:27:2d:52:02:84:26:c1:50:cc:94:
78:84:4e:88:9b:33:d8:ad:86:f2:1d:dc:33:3e:d6:85:df:9a:
3b:b7:b5:68:c2:5c:8d:6f:f0:0d:eb:42:6d:98:9f:2f:dd:ed:
ea:b4:7f:5e:29:4f:e0:1d:de:aa:65:e6:1d:e6:81:95:33:30:
50:4b:5d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:25:26 2024 by rpki-client on console-ams.rpki-client.org