Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jPcDbXkoXSCs9zmwkdTnM8__5YE.roa
File: jPcDbXkoXSCs9zmwkdTnM8__5YE.roa (raw, json)
Hash identifier: 26P5PA+FUZxm3MNhCsNLM++jZsI0SyyrMLLDgSkWkh4=
Subject key identifier: 8C:F7:03:6D:79:28:5D:20:AC:F7:39:B0:91:D4:E7:33:CF:FF:E5:81
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F30412CE88BF6625A3B03161C08CCC372
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jPcDbXkoXSCs9zmwkdTnM8__5YE.roa
Signing time: Tue 30 Apr 2024 18:25:28 +0000
ROA not before: Tue 30 Apr 2024 18:25:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138195
IP address blocks: 213.218.208.0/24 maxlen: 24
213.218.212.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
213.218.232.0/24 maxlen: 24
213.218.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:41:2c:e8:8b:f6:62:5a:3b:03:16:1c:08:cc:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 18:25:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cf7036d79285d20acf739b091d4e733cfffe581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:98:47:ee:bb:c6:fc:37:df:3d:eb:90:77:
c2:d9:cf:fb:62:50:57:1c:7c:44:cc:04:81:86:c0:
47:24:77:3c:5e:bb:cc:b6:29:6f:f2:af:b7:3d:ce:
1e:75:58:90:c4:bc:63:34:63:a5:0c:05:0c:a0:b8:
a0:a1:19:ef:6f:bb:33:05:cf:db:e7:17:10:66:b6:
10:51:bc:8a:ef:a2:92:e3:91:0f:95:61:1f:bf:dd:
9d:4a:7c:d1:68:21:2f:4c:77:96:29:f4:56:05:d5:
c8:d0:d5:59:fa:8f:4c:c9:81:48:a9:41:59:90:ab:
da:a1:87:c6:7a:67:81:0f:17:e0:01:32:5e:ee:61:
e5:17:8f:40:fa:cf:1d:ab:02:71:16:e5:d9:bd:b9:
af:fe:36:1e:02:8f:91:fa:90:c0:b7:93:73:b4:54:
86:6e:35:e8:b2:2b:a2:b1:a3:c6:e9:22:cd:45:21:
97:f7:d5:79:d3:78:23:f7:f9:83:a9:51:1b:ff:2c:
85:9a:c5:59:9e:25:b2:ec:bc:7b:8b:ba:b3:9c:6e:
6a:1c:e3:1e:e9:9c:2d:30:71:09:a5:5d:22:86:c5:
94:8d:3c:3c:2b:2c:2d:bc:61:0b:1d:a3:5d:a2:b9:
9d:4e:fb:df:2c:cd:2f:38:bd:70:00:4b:d2:03:5e:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F7:03:6D:79:28:5D:20:AC:F7:39:B0:91:D4:E7:33:CF:FF:E5:81
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jPcDbXkoXSCs9zmwkdTnM8__5YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.208.0/24
213.218.212.0/24
213.218.215.0/24
213.218.232.0/24
213.218.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e3:d7:c9:d5:b9:7c:78:45:bd:84:82:21:4b:67:f2:8d:3f:
b3:29:ad:ac:ad:b3:33:bb:7d:69:18:2b:ba:52:cc:ba:b9:7a:
67:e3:3b:79:8f:d7:20:ab:99:2e:da:0f:56:e9:b2:bb:26:db:
29:25:96:05:32:65:4b:20:43:54:1e:ed:cf:53:4a:24:7d:9f:
e3:19:4d:c8:af:64:9e:bd:54:d1:2a:58:cf:b3:1c:33:61:f1:
28:db:95:50:22:1b:ac:23:06:81:d2:4d:25:cb:cf:07:d2:2d:
40:92:71:05:44:aa:0d:98:77:fa:6d:cf:14:cf:8f:f8:73:a7:
25:67:bc:e0:84:7f:e0:81:0c:fd:e6:b8:ff:32:cc:c4:73:71:
d7:e0:3a:71:c1:19:bf:74:84:59:22:b3:0c:76:1d:39:93:c5:
b7:b3:ac:40:fe:3b:bf:ac:c0:30:73:c5:d1:1b:91:b8:ed:27:
7f:d8:ae:43:b8:dd:f9:da:9d:54:db:b5:88:5d:e3:45:9c:68:
09:4a:45:2c:b1:41:82:97:39:d1:9c:ff:e5:0f:e4:21:80:25:
34:93:94:4e:d5:ee:fb:62:de:ff:14:12:0b:e1:0e:de:3e:9c:
21:11:bb:df:28:2f:5d:30:3c:fd:ee:86:31:0f:a7:99:31:5e:
9c:51:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 19:44:40 2024 by rpki-client on console-fra.rpki-client.org