Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/rJFmnGxWJA8wDaYcEBF3gpMnzBU.roa
File: rJFmnGxWJA8wDaYcEBF3gpMnzBU.roa (raw, json)
Hash identifier: hOpoy62urihllX/WXQlrs9k5stWamF0sq2yv59R4SEs=
Subject key identifier: AC:91:66:9C:6C:56:24:0F:30:0D:A6:1C:10:11:77:82:93:27:CC:15
Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial: 018CC6B789E9639E54555580EEAC0CBEB3BA
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/rJFmnGxWJA8wDaYcEBF3gpMnzBU.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1881
IP address blocks: 143.118.0.0/16 maxlen: 16
2001:1400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:89:e9:63:9e:54:55:55:80:ee:ac:0c:be:b3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac91669c6c56240f300da61c101177829327cc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:a3:7a:84:8e:c9:6d:5f:9c:11:c7:ce:17:
1e:80:f8:76:70:cb:b3:6e:d9:30:52:1e:9e:ac:e3:
d0:fc:42:c5:f1:4e:e9:8d:b4:c9:a8:ae:ee:fb:26:
e6:b6:d7:02:3a:70:a1:02:b7:df:94:99:37:09:62:
25:69:50:9a:f0:2d:a8:b7:4c:b3:f9:69:cf:90:4e:
ae:a0:2e:06:ed:1c:ae:f9:ea:9e:d2:56:6a:9b:62:
77:d6:37:34:6e:bb:76:0e:a5:9e:77:c5:b9:01:66:
17:50:0d:f3:ca:d5:eb:25:e9:6f:b4:70:b2:7f:7b:
0b:54:46:a8:c3:6e:41:9b:f3:20:a8:d7:3d:81:f4:
e2:ab:e4:34:91:dd:8d:82:97:36:6e:50:cb:9b:e3:
43:64:b6:fc:dc:b7:70:89:fc:0f:76:7f:14:27:eb:
a3:68:f6:91:6c:4d:0f:0f:01:5e:5b:8b:86:de:68:
75:63:80:85:0a:eb:6a:0b:2b:e3:79:16:06:c9:3c:
f5:d4:e6:3f:0c:ed:b3:93:2d:f2:80:dc:20:f1:17:
d7:65:20:d8:9b:e6:25:29:4f:da:15:da:ac:d9:97:
a7:e8:55:74:25:38:37:24:09:13:9c:60:7c:35:84:
85:98:50:c4:86:5b:4d:1c:08:36:c9:10:6c:e3:75:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:66:9C:6C:56:24:0F:30:0D:A6:1C:10:11:77:82:93:27:CC:15
X509v3 Authority Key Identifier:
keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/rJFmnGxWJA8wDaYcEBF3gpMnzBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.118.0.0/16
IPv6:
2001:1400::/48
Signature Algorithm: sha256WithRSAEncryption
58:5d:95:ad:0a:e3:77:d2:04:f5:d7:de:42:0b:08:f6:31:2a:
c1:de:26:0e:99:3b:ba:8e:3d:34:66:55:5e:37:a6:a3:d8:7e:
42:90:59:a5:c8:2f:e9:77:9c:f7:e3:c5:a8:42:a4:a9:c9:a2:
15:7d:40:fb:ae:02:23:73:0f:36:51:b4:13:ad:42:4f:d7:e9:
48:9f:07:78:c5:05:02:d1:aa:62:ad:01:04:bd:e2:94:9f:cf:
f8:f8:69:82:1a:c9:6e:2c:dc:33:ab:d0:c6:22:fc:ab:6b:b8:
04:9f:6a:63:62:81:9e:38:34:5d:ec:12:b2:c8:97:37:82:cc:
88:88:2d:c7:ad:97:e3:ed:37:be:06:27:99:22:7a:4b:67:38:
25:31:54:7f:cc:a6:f1:6a:8d:f0:bc:20:e9:78:c2:8b:95:ec:
3e:50:d0:36:fa:a2:dd:c3:af:a7:37:73:db:02:34:2d:84:6c:
55:2a:47:21:fc:71:cb:81:21:e7:e1:9b:db:f9:6e:cc:ed:27:
21:f9:1e:e0:ab:bf:52:fc:d4:d3:11:a7:e5:d4:81:15:01:f7:
1a:f6:aa:48:94:9c:1c:f4:67:0a:94:0f:6f:58:0c:ce:59:f3:
5d:fa:b9:c8:9e:3f:65:40:11:58:1e:38:e1:ad:d8:b3:03:4d:
4f:b9:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:11:02 2024 by rpki-client on console-fra.rpki-client.org