Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/jdOQZbUxmZnqEKEObfC-bupTb24.roa
File: jdOQZbUxmZnqEKEObfC-bupTb24.roa (raw, json)
Hash identifier: cnITjFgH4wgXMCIv38CvbYKdYrB+gHqk8SqDB9MTdb8=
Subject key identifier: 8D:D3:90:65:B5:31:99:99:EA:10:A1:0E:6D:F0:BE:6E:EA:53:6F:6E
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 018CC56E13A1802F116EAD14220144E3F6B9
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/jdOQZbUxmZnqEKEObfC-bupTb24.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44439
IP address blocks: 91.231.184.0/24 maxlen: 24
185.70.228.0/22 maxlen: 22
2a05:2cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:13:a1:80:2f:11:6e:ad:14:22:01:44:e3:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dd39065b5319999ea10a10e6df0be6eea536f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:35:80:bb:db:bb:3c:92:d2:19:18:e7:6b:8e:
b8:95:7e:d5:91:9e:b3:47:a7:f7:72:6a:db:d0:5f:
b4:f8:7d:d3:be:92:e5:4b:1e:a3:5f:a9:9a:32:27:
49:2f:f9:29:0f:bb:8b:7b:98:bd:db:c1:79:97:5a:
de:fb:23:4e:c9:7a:5f:88:3c:6e:44:d7:6f:e0:12:
6a:ce:ae:2b:8c:c3:ee:1c:5d:ee:9d:3d:03:35:46:
48:a2:9a:05:5a:9c:3e:84:51:61:8b:bd:0c:13:c1:
10:77:84:58:e5:d2:78:89:5e:3d:53:d3:48:14:93:
4d:a4:1f:17:7b:18:9f:80:e7:ca:c1:21:b0:79:1c:
87:15:f9:0c:ec:6b:e4:25:24:32:ff:d6:ab:b3:22:
d2:1a:ba:aa:c7:73:48:a9:ed:05:8b:4e:6a:36:fc:
f9:a8:65:76:ab:b7:4e:4b:8d:33:87:91:06:c0:a9:
2c:ed:8c:ca:a4:4e:29:71:ad:71:2e:1e:22:a1:03:
33:6f:bf:8a:08:d9:04:cd:5c:51:a9:7a:52:04:9f:
95:b6:c5:06:ad:0e:a4:e1:8c:93:53:7a:46:e9:37:
4f:68:fa:18:c5:a5:c7:2a:34:a7:70:df:10:7a:53:
1f:5d:a7:d4:7e:26:f1:40:57:48:fd:34:1b:28:bc:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:90:65:B5:31:99:99:EA:10:A1:0E:6D:F0:BE:6E:EA:53:6F:6E
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/jdOQZbUxmZnqEKEObfC-bupTb24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.184.0/24
185.70.228.0/22
IPv6:
2a05:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
12:8c:db:dd:da:1a:79:08:42:24:5a:1c:bc:f3:a3:40:33:ba:
27:8f:bf:99:0f:7d:0d:8b:06:79:2e:e3:b0:f0:ed:07:19:5c:
ac:1b:c4:ea:6e:de:37:0f:dc:ed:cf:75:fa:d4:a7:a2:ef:3a:
2b:eb:d0:ba:24:31:40:e6:aa:15:52:df:59:a5:92:f6:a2:6d:
6f:f2:27:cd:b6:1a:46:1d:dd:2b:17:28:e6:8b:a9:d0:be:06:
e2:61:94:8e:57:ec:92:ac:ef:da:e6:0e:6f:1a:1d:5d:94:25:
a5:4f:dc:ec:f5:35:23:01:81:47:f5:3d:d8:7d:f6:de:53:13:
71:34:49:44:b4:d6:88:be:fa:34:11:b5:19:bf:5d:ca:a3:1e:
0c:40:19:98:18:16:3d:b0:90:ae:4f:e7:49:f9:0f:c0:e3:89:
40:7d:ec:f9:85:d8:c5:ae:35:29:46:24:27:0c:dc:eb:fa:dc:
a1:4f:12:d9:90:1e:67:7e:58:04:03:36:33:09:cc:e1:5c:11:
cf:ea:65:66:5b:a9:3a:c5:43:75:4a:be:4e:b5:fd:6b:fa:03:
26:00:19:ab:3d:f7:59:f5:77:e3:d4:d6:e4:a2:f7:eb:a8:b3:
bf:4f:35:f3:a4:1d:fd:cb:86:68:bd:2a:d5:69:94:c7:9a:9d:
18:17:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:09:54 2024 by rpki-client on console-ams.rpki-client.org