Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/JTgHtqLEHT9Y8exXU_YJHp7XmaU.roa
File: JTgHtqLEHT9Y8exXU_YJHp7XmaU.roa (raw, json)
Hash identifier: PhbWloo1KxWU7Wuoy5N8SoW5TDQw2qlQVDRsoWcKPoA=
Subject key identifier: 25:38:07:B6:A2:C4:1D:3F:58:F1:EC:57:53:F6:09:1E:9E:D7:99:A5
Certificate issuer: /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial: 018CC4254FF73B4CC2F0762143D611FF88E1
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/JTgHtqLEHT9Y8exXU_YJHp7XmaU.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9051
IP address blocks: 77.246.64.0/20 maxlen: 24
92.242.168.0/22 maxlen: 24
2a0d:b340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4f:f7:3b:4c:c2:f0:76:21:43:d6:11:ff:88:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=253807b6a2c41d3f58f1ec5753f6091e9ed799a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:6c:e4:81:10:85:bc:f3:5c:84:ed:fa:c3:
5c:a3:df:9f:45:bd:09:3e:81:e5:81:39:36:80:5f:
d7:f3:51:58:ed:ab:96:11:d3:97:d1:5d:7d:0d:1d:
02:ef:50:3c:4b:c8:36:a0:ea:e7:cd:a7:61:96:60:
11:d6:6a:7d:54:27:11:56:08:15:62:0a:14:96:22:
d5:2d:fd:aa:ec:c9:95:c3:03:0d:10:1e:b4:2c:ab:
f8:fb:e3:c0:ce:13:b5:92:85:b3:38:51:26:d8:22:
a0:fc:44:7a:96:4a:d3:58:af:06:93:6b:fe:40:25:
ed:53:f1:c7:74:c5:35:c8:e6:72:ec:62:3e:ff:6a:
67:1f:97:72:df:2a:77:b3:89:6a:07:fc:80:b6:b4:
42:16:26:f8:18:53:ec:65:7d:00:d5:a1:23:9f:16:
2f:51:76:6d:78:f9:c6:fe:51:11:72:76:41:8a:42:
3b:9a:21:20:29:da:10:18:e1:39:70:77:d4:2a:09:
a3:04:97:d7:1c:1a:b5:c7:30:be:d6:b4:d3:88:eb:
71:ef:4d:0d:fc:44:34:24:41:d0:b1:4f:ac:8f:24:
61:a6:d1:0d:0f:42:f8:2f:78:79:e9:53:83:a0:90:
ce:1a:de:3f:37:f1:8a:d6:32:6f:ef:5c:e4:af:52:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:07:B6:A2:C4:1D:3F:58:F1:EC:57:53:F6:09:1E:9E:D7:99:A5
X509v3 Authority Key Identifier:
keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/JTgHtqLEHT9Y8exXU_YJHp7XmaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.64.0/20
92.242.168.0/22
IPv6:
2a0d:b340::/29
Signature Algorithm: sha256WithRSAEncryption
15:bd:68:9d:c3:c5:90:8b:ee:0c:85:d5:de:99:49:7b:85:3e:
41:cd:79:33:93:ab:a2:ca:73:3a:c5:fd:04:10:60:4d:d5:c4:
45:89:c7:88:f1:95:ec:78:52:25:7f:bd:7b:85:9e:72:a0:2a:
d0:02:4b:5b:5b:45:ce:5f:e6:8c:dc:ac:d3:9c:8d:d7:04:e6:
ad:62:ec:60:db:fd:f0:15:c3:f4:9e:99:ea:f5:8f:c4:2b:d0:
eb:be:89:1a:ed:9c:aa:99:a0:c6:d9:01:ae:12:09:a9:17:02:
10:c0:93:b1:77:2e:1d:98:fc:e3:dd:e8:08:62:29:83:08:67:
0e:8f:c5:0f:ca:55:31:ed:44:4b:06:58:de:37:3a:79:c9:91:
48:e3:31:57:71:e1:e5:df:78:06:f7:c7:a1:34:4f:4d:82:18:
e5:54:31:3c:bb:fb:3c:16:36:96:67:07:a7:05:60:ff:a7:cb:
c4:8c:26:d5:b8:04:6d:16:4b:e3:74:9c:9f:13:f1:15:65:f5:
ff:63:29:f7:b5:18:c8:9f:56:3b:33:67:68:26:42:dd:f1:9a:
40:2d:62:e0:b3:c9:42:8f:80:39:14:9c:1a:97:33:7e:75:6c:
6d:07:01:06:02:3b:ce:ce:71:87:c3:57:c1:cd:e5:7e:8b:a8:
6f:d0:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:02:41 2024 by rpki-client on console-fra.rpki-client.org