Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/jik0t1c_-sdaE45PKQ3ds2YCheA.roa
File: jik0t1c_-sdaE45PKQ3ds2YCheA.roa (raw, json)
Hash identifier: /ga48SoHEdEhXyu02riTSNQ+aD2VmIoj46jPuPzBkJU=
Subject key identifier: 8E:29:34:B7:57:3F:FA:C7:5A:13:8E:4F:29:0D:DD:B3:66:02:85:E0
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 018CC4939FA8B8E353B5F410AAB07DFE5A84
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/jik0t1c_-sdaE45PKQ3ds2YCheA.roa
Signing time: Mon 01 Jan 2024 10:30:58 +0000
ROA not before: Mon 01 Jan 2024 10:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 84.241.64.0/18 maxlen: 18
185.92.64.0/22 maxlen: 22
2a01:b540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9f:a8:b8:e3:53:b5:f4:10:aa:b0:7d:fe:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Jan 1 10:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e2934b7573ffac75a138e4f290dddb3660285e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:2d:f2:88:a0:48:f7:ad:72:63:bf:97:a7:
f7:56:99:8a:bf:8d:4d:8e:73:e4:3d:f4:52:1e:c0:
2e:2f:c7:6a:ce:c5:70:be:05:58:3e:fa:e9:21:36:
21:f7:d1:1c:45:c3:4d:28:aa:13:5f:ac:b1:55:8f:
4b:3c:5a:5d:fe:97:9d:37:0b:11:61:a4:a2:7b:50:
08:c9:35:a8:8f:d4:bf:9a:0d:18:6f:17:9c:69:78:
5d:b4:ed:03:c9:11:2c:b2:82:01:3d:50:23:34:cc:
1b:82:97:a2:cb:70:47:48:95:89:db:df:8d:79:3a:
3d:8d:71:ee:ac:6e:dc:a6:e5:dc:d1:6a:a1:f2:9e:
85:9a:55:58:57:18:4a:9e:c1:13:57:45:2f:8b:db:
f9:6e:53:d4:20:7a:d6:6c:e5:66:e3:c3:83:14:14:
5d:2b:41:05:28:68:a8:65:70:e3:06:a9:96:c1:2b:
02:33:20:ea:65:45:14:18:d8:d0:16:d0:3b:6d:96:
96:73:7d:3c:07:15:56:a7:e4:f2:76:79:5c:87:85:
81:f6:92:58:86:72:9f:19:4e:3f:af:bb:07:bd:2e:
1f:57:d6:01:70:0e:aa:4b:55:14:44:7b:ab:68:f6:
7c:db:03:20:58:80:20:7a:a2:1b:00:78:1c:81:b3:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:34:B7:57:3F:FA:C7:5A:13:8E:4F:29:0D:DD:B3:66:02:85:E0
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/jik0t1c_-sdaE45PKQ3ds2YCheA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.64.0/18
185.92.64.0/22
IPv6:
2a01:b540::/29
Signature Algorithm: sha256WithRSAEncryption
0a:26:9a:4b:f1:40:3e:34:d0:27:3f:d5:d6:b8:e1:da:57:b7:
b9:a9:fc:10:79:88:bf:44:c0:99:b1:87:63:b5:86:cf:d0:0a:
33:10:eb:f8:78:73:fd:e1:68:da:80:ff:e3:80:97:fa:4e:90:
d9:20:df:4c:07:d9:ee:1c:ac:69:f7:3e:45:0d:fe:b0:6e:5e:
bb:28:8a:3b:92:94:05:5e:4c:1d:6c:6e:31:47:ae:a8:c1:be:
60:a0:1f:2b:27:23:cb:83:5a:2e:a9:22:73:1f:03:ef:50:83:
67:8a:16:cb:dc:92:65:f4:95:de:ee:84:ce:e7:e3:a9:fd:c7:
ee:73:24:6a:c4:a2:04:42:05:76:a4:ea:45:1c:95:28:39:a4:
98:41:10:4a:cc:ad:d2:ce:22:32:0a:19:85:28:18:6d:51:8a:
4a:8d:99:f9:6f:ad:62:fa:ca:85:6d:12:3e:db:ff:fb:2a:0c:
46:a9:c1:ce:ab:f2:19:95:5a:e1:11:24:8e:44:9c:30:dd:60:
06:15:f9:dc:d5:1f:a4:4f:13:2a:7d:13:58:59:2b:3f:31:43:
e3:f1:57:7b:2c:3b:66:e0:04:bb:83:e9:c3:b8:d1:0b:d9:71:
2d:05:68:34:1f:35:1e:26:49:95:26:e9:39:97:82:66:be:df:
7e:fa:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 08:09:51 2024 by rpki-client on console-fra.rpki-client.org