Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/JdCEohUPvLMpKy7-VSmobkeyfng.roa
File: JdCEohUPvLMpKy7-VSmobkeyfng.roa (raw, json)
Hash identifier: XfR9Y5zAZ9tNVanYn7zWWuAi3U0zAI8KwwTxRwGoUIc=
Subject key identifier: 25:D0:84:A2:15:0F:BC:B3:29:2B:2E:FE:55:29:A8:6E:47:B2:7E:78
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 018CC86F5F1585FCA40C41F78A73A67CA759
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/JdCEohUPvLMpKy7-VSmobkeyfng.roa
Signing time: Tue 02 Jan 2024 04:29:51 +0000
ROA not before: Tue 02 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49588
IP address blocks: 176.101.192.0/19 maxlen: 19
193.169.134.0/24 maxlen: 24
193.169.135.0/24 maxlen: 24
2001:67c:2c44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5f:15:85:fc:a4:0c:41:f7:8a:73:a6:7c:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Jan 2 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d084a2150fbcb3292b2efe5529a86e47b27e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:fa:1c:e0:15:39:75:53:37:08:2e:cc:c9:
5f:6c:96:8e:91:40:e4:24:b5:c0:89:95:a4:35:c5:
91:d8:bd:2a:05:31:db:78:3b:e0:87:ee:32:eb:c9:
cd:3d:b7:5a:17:19:f8:a3:75:63:c6:7b:5a:7a:47:
d6:82:60:f4:90:7b:71:15:90:a0:5c:6b:91:10:78:
19:c1:53:61:8b:0f:82:a2:20:b0:77:06:82:8e:3a:
88:7d:c8:63:db:f3:4a:c5:a7:8b:a5:ae:f1:00:b8:
22:0b:df:69:c2:f0:f4:0f:f7:a3:91:7f:c8:da:fa:
b0:91:56:d1:bb:36:cf:27:97:eb:51:1e:42:ba:ed:
14:b6:70:46:8f:b5:95:fe:7f:a1:b8:a3:4b:51:2f:
f1:97:2e:2b:07:b3:6e:a2:48:c2:02:4f:bc:76:ee:
da:0f:1f:89:0c:91:74:36:5e:1e:9f:a8:ee:2b:61:
b7:78:09:74:cb:0f:8b:b5:2a:5b:f1:88:6d:c6:14:
d2:02:95:35:82:b7:db:b1:c9:2c:2e:b8:3d:68:d0:
b9:79:31:30:25:77:e2:ab:62:50:23:22:d0:61:6c:
a0:02:c1:80:4a:87:bd:72:95:6b:fa:67:a1:ae:0d:
bc:df:eb:cc:c0:e8:74:40:99:66:b3:47:82:7a:08:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:84:A2:15:0F:BC:B3:29:2B:2E:FE:55:29:A8:6E:47:B2:7E:78
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/JdCEohUPvLMpKy7-VSmobkeyfng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.192.0/19
193.169.134.0/23
IPv6:
2001:67c:2c44::/48
Signature Algorithm: sha256WithRSAEncryption
9c:80:dd:6e:d6:89:58:70:36:e0:f6:8a:5a:54:5a:ac:44:1d:
da:88:6e:04:01:31:6e:21:55:1b:3b:c9:23:ca:c4:aa:9a:bf:
81:5a:ed:ff:48:ea:07:a0:37:fb:09:a3:19:b5:81:6c:ad:d1:
44:a1:53:a2:3a:91:74:4a:f3:65:1e:21:7d:33:e9:a1:60:08:
7b:6f:91:21:14:f5:d3:86:04:96:c3:f9:4e:40:24:2f:c3:05:
2d:e3:a8:69:15:be:f5:3e:9b:72:e5:97:cd:c7:bd:8d:a6:2a:
82:4c:48:91:bb:0d:90:6a:68:e8:ce:3e:8c:42:29:69:e5:b8:
0e:aa:30:20:2d:de:37:1e:bb:a4:85:2f:21:56:36:dc:76:39:
f7:14:3a:30:8c:1e:70:a0:a3:80:eb:98:ce:b4:be:a6:3f:0f:
a3:26:2e:fe:d5:0a:e8:3c:4c:37:b7:8c:d1:df:dc:4e:da:27:
0b:00:eb:17:93:7e:84:0e:45:98:fe:ec:00:1e:f5:6e:f5:5b:
10:00:36:bc:06:9d:aa:84:7c:8e:48:93:fb:81:d7:78:bc:35:
e5:d5:e0:fa:42:32:ae:6d:9c:b8:d5:97:9a:ad:43:c3:f6:45:
3b:89:f3:84:74:35:c1:14:f0:dc:a5:fc:53:48:de:7f:c8:8d:
aa:dc:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:42 2024 by rpki-client on console-fra.rpki-client.org