Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/jHutqeBCZ6lYzkzKlkA6itKuPqU.roa
File: jHutqeBCZ6lYzkzKlkA6itKuPqU.roa (raw, json)
Hash identifier: vUgbxkzzJuNmhXQdGnzqSmrQSas3btoWfD7OTa23Jco=
Subject key identifier: 8C:7B:AD:A9:E0:42:67:A9:58:CE:4C:CA:96:40:3A:8A:D2:AE:3E:A5
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 018CEDABAE990726265370EC37B65E132BB7
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/jHutqeBCZ6lYzkzKlkA6itKuPqU.roa
Signing time: Tue 09 Jan 2024 10:01:40 +0000
ROA not before: Tue 09 Jan 2024 10:01:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12703
IP address blocks: 185.38.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:ab:ae:99:07:26:26:53:70:ec:37:b6:5e:13:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Jan 9 10:01:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c7bada9e04267a958ce4cca96403a8ad2ae3ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8c:9a:e0:69:16:b2:72:21:4e:01:af:9c:60:
25:a8:c8:de:91:66:77:64:d7:71:66:2b:30:cd:1d:
5b:9f:cc:c8:06:a0:2c:2d:ae:25:07:5e:33:7b:d3:
e8:d0:0c:a5:07:f8:23:33:a2:25:09:ff:c7:79:e3:
d7:02:9c:7e:f4:84:24:56:ac:71:0b:2d:d6:b3:88:
e4:1a:cc:13:3b:0d:88:3d:bc:3c:38:d4:f9:4e:01:
f8:a8:8a:b4:ca:44:75:19:4d:13:cf:3a:ca:0f:3c:
ee:1d:d4:be:e9:64:7b:1a:40:ad:d8:00:a2:b9:eb:
50:48:f4:bc:39:84:d8:7b:9e:05:bd:3b:2f:83:7f:
a6:4a:84:20:b0:e0:75:ef:bb:17:39:65:02:de:57:
8e:c9:bf:7d:cb:8e:26:af:13:dd:19:40:8a:8a:a2:
99:27:8a:81:2c:39:80:8a:ec:39:b6:6d:ed:7e:ec:
e4:2e:4b:48:4a:de:18:f5:0e:00:d0:48:0b:f0:11:
ce:f4:c8:02:6a:80:37:83:4c:ea:86:57:c1:6e:61:
19:a5:ac:99:eb:48:36:24:40:97:14:cf:ca:75:7e:
00:46:93:cd:e1:f4:91:d7:73:a6:a6:42:f7:35:d4:
f9:fc:10:eb:c0:48:33:b7:42:7d:f3:93:77:b5:d0:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:AD:A9:E0:42:67:A9:58:CE:4C:CA:96:40:3A:8A:D2:AE:3E:A5
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/jHutqeBCZ6lYzkzKlkA6itKuPqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:22:12:c7:f8:3a:27:78:f2:e7:ab:31:1d:bf:d4:30:8c:0e:
69:8d:0f:de:be:4e:ef:5c:04:cd:39:4b:c3:e4:23:6c:6a:bd:
f0:b5:62:38:b3:92:c1:81:9f:ee:59:ac:3f:8c:a6:e8:73:19:
8e:8f:f9:0b:fa:62:6d:69:1e:7d:fc:c5:a3:27:41:6b:e3:3a:
6f:c0:3f:3f:09:f3:e8:97:a1:33:2e:69:db:71:12:3c:f8:ed:
e1:a8:c4:5b:aa:06:2f:3f:1d:9b:0e:20:73:c0:ce:8b:b1:fc:
2d:0d:bd:89:10:98:21:50:b0:b2:9c:d4:6e:e3:45:f1:cd:2d:
30:95:79:1d:ad:47:35:e5:b7:ef:07:6c:4d:20:10:53:78:63:
71:5d:e7:55:32:25:6d:82:db:1a:64:35:6c:8b:76:99:4e:66:
ee:53:33:7f:fe:de:94:62:05:eb:5f:8d:77:1e:92:09:2d:35:
6a:a2:6a:e7:ac:91:ec:0b:5f:aa:06:af:32:29:e8:d6:85:33:
cb:36:e1:02:d3:b8:cb:48:78:c8:e2:8c:1c:f4:2f:e7:4c:d4:
c3:ee:9b:ab:5b:98:ab:b9:9c:1c:9d:e4:7f:6f:e8:34:fe:2d:
6c:70:88:23:fe:42:e7:a9:09:8d:68:29:c9:52:2e:dd:ab:69:
20:b8:9d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:06:59 2024 by rpki-client on console-fra.rpki-client.org