Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/Jg-zjGl2wokSK8aqIFgsoTH25W8.roa
File: Jg-zjGl2wokSK8aqIFgsoTH25W8.roa (raw, json)
Hash identifier: jK3piW2tTNLCayDVeq5txur4OuQnEonMvAN5As4QprY=
Subject key identifier: 26:0F:B3:8C:69:76:C2:89:12:2B:C6:AA:20:58:2C:A1:31:F6:E5:6F
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 018CC56DF813CE89967466F95EE6F8A37AC5
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/Jg-zjGl2wokSK8aqIFgsoTH25W8.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55002
IP address blocks: 91.212.110.0/24 maxlen: 24
194.102.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f8:13:ce:89:96:74:66:f9:5e:e6:f8:a3:7a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=260fb38c6976c289122bc6aa20582ca131f6e56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:6f:a7:92:11:35:fc:e2:2e:2d:08:7d:8a:
68:51:00:a8:f8:10:3a:b7:db:6b:21:6b:13:1c:4d:
c6:58:f0:b6:18:ae:00:83:df:5a:69:2b:0b:16:84:
42:77:da:3e:4c:13:bf:8a:91:8b:2f:2a:e7:93:ee:
c3:4c:91:3d:a6:da:64:33:f9:be:90:2c:f4:0d:2f:
c9:36:4f:2d:8b:6b:22:4b:04:6e:fe:92:83:e3:78:
13:f6:97:60:fc:c9:a6:ab:0f:52:33:39:3e:18:06:
97:e3:4f:17:c1:2f:31:fb:66:60:80:f8:b4:4b:e7:
57:e0:0f:a2:31:78:e9:73:99:20:31:8d:f4:cd:34:
31:9b:4c:a1:7d:54:8d:8e:e5:9c:f7:4a:c2:5d:94:
3e:94:4d:08:24:47:df:04:dc:c0:b0:5f:89:2f:e5:
95:9d:bf:46:0b:e3:fa:92:b9:83:bc:29:5d:9a:27:
1b:34:14:31:52:9c:c8:f8:74:1b:dd:4a:32:18:a8:
7e:4f:b5:28:f9:11:48:4a:6e:30:0e:46:0e:a4:ff:
1a:1f:56:06:1b:0c:2b:9a:93:56:39:e0:a6:e5:5e:
46:b0:69:2f:89:e5:de:18:32:e0:9f:71:01:ad:0a:
a9:c2:0a:ba:fa:96:e7:1f:b7:df:1e:77:a8:c1:ec:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:B3:8C:69:76:C2:89:12:2B:C6:AA:20:58:2C:A1:31:F6:E5:6F
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/Jg-zjGl2wokSK8aqIFgsoTH25W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.110.0/24
194.102.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b7:3f:45:34:b6:76:58:18:51:d8:23:c5:2a:b5:ce:4f:f2:
fa:7a:7f:1a:d3:58:f9:a4:53:09:45:20:2c:14:2d:29:c4:6e:
2b:f3:51:bc:65:35:76:6f:a5:dc:1e:cb:db:d8:67:e0:0e:8e:
ab:fd:c7:40:02:73:a4:42:6d:d6:3a:04:09:01:39:14:8d:69:
2d:4b:9f:d7:77:55:86:4d:81:bc:c4:c1:0a:c8:53:b9:77:f8:
73:b7:2f:c9:66:d0:af:f1:a2:f2:3c:b1:67:18:9c:17:ed:70:
24:20:1f:6c:eb:d3:6d:3b:5f:07:90:bc:aa:48:f9:fa:bd:b1:
3e:6f:36:73:ed:da:ba:62:ce:47:12:3a:7e:4c:99:b0:99:fd:
a7:34:e5:90:a0:77:a3:68:79:77:f9:db:5a:46:79:29:7a:b6:
5b:63:f9:ea:2f:91:60:2b:11:5f:3c:f4:85:7c:e8:48:4f:7b:
d4:79:57:6a:ae:47:0e:76:d5:0b:05:5d:25:1a:40:af:63:bc:
ea:7b:4d:57:fd:94:f8:18:1e:63:2f:48:8f:7d:e0:83:f4:21:
ee:66:32:f1:8a:c5:38:1a:ca:5b:6e:97:af:01:06:00:c1:d5:
a0:9f:70:ac:77:bd:a8:a7:5f:48:b1:90:e5:71:aa:c8:a7:3d:
55:34:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:22 2024 by rpki-client on console-fra.rpki-client.org