Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/J2gh3fq6KkUW1XOANP1agn_8UxE.roa
File: J2gh3fq6KkUW1XOANP1agn_8UxE.roa (raw, json)
Hash identifier: wD4P+2Fv6mBJPMN3iV9vcLDBeeQtftBwaUlmc35548s=
Subject key identifier: 27:68:21:DD:FA:BA:2A:45:16:D5:73:80:34:FD:5A:82:7F:FC:53:11
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 018CC7956D02E98A812744CB6DE6745B7F1B
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/J2gh3fq6KkUW1XOANP1agn_8UxE.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198551
IP address blocks: 130.93.184.0/22 maxlen: 22
130.93.180.0/22 maxlen: 22
130.93.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6d:02:e9:8a:81:27:44:cb:6d:e6:74:5b:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=276821ddfaba2a4516d5738034fd5a827ffc5311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:cf:36:cc:3b:4e:6e:dc:b2:7f:e4:a0:2e:
f6:f9:26:cc:34:fd:e5:f1:57:ae:79:56:73:09:5d:
fe:09:50:ed:12:40:08:1b:1b:50:93:4a:26:0c:8a:
04:80:18:f5:ff:d0:f3:4a:bb:5b:28:6c:08:bc:5c:
fe:d1:9c:7f:51:6a:f2:b5:e9:8b:49:b0:8f:09:a9:
51:7b:83:f6:50:7a:94:31:b4:48:df:fe:9e:11:e0:
37:4e:c2:4a:b5:6d:e3:4d:37:e9:f2:9f:22:32:ae:
b5:e5:38:8e:2f:4f:b1:fc:6f:d7:80:42:ad:6d:b0:
4a:67:d2:1f:a2:7d:ca:02:06:bc:aa:2e:06:6b:5b:
56:7e:cd:5a:14:c3:4e:51:dd:36:76:49:f7:5f:61:
62:4c:9e:70:28:75:8b:47:70:b4:b5:71:c2:37:92:
e7:eb:53:94:1f:0c:67:4d:c0:3c:b3:7a:b5:da:34:
c2:dc:4c:e9:c9:73:af:a7:31:86:d0:22:7c:02:d7:
bb:c1:89:d9:2c:cc:b1:94:60:49:c8:c3:aa:44:4e:
05:27:da:6e:66:20:ad:b7:37:5c:6e:7b:0e:14:29:
83:c3:b1:ad:07:89:63:2b:8e:37:9f:f5:31:88:b0:
d2:52:ec:c9:1a:41:e7:1f:8c:b3:05:5f:7c:c2:f0:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:21:DD:FA:BA:2A:45:16:D5:73:80:34:FD:5A:82:7F:FC:53:11
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/J2gh3fq6KkUW1XOANP1agn_8UxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.93.180.0-130.93.191.255
Signature Algorithm: sha256WithRSAEncryption
0e:20:31:b4:ad:c5:a6:8b:42:42:f9:fe:11:7a:9d:0c:f4:6f:
71:03:61:db:9c:56:0f:0f:10:82:14:e3:11:78:dd:17:31:53:
29:7c:0d:56:4a:75:e4:e8:03:d7:9a:d9:69:60:4e:ac:54:cb:
1e:4b:30:93:e5:32:e3:18:86:20:0a:5c:10:cc:b4:d5:2d:73:
f0:66:1b:70:5f:31:a7:7f:10:5d:e0:89:40:5f:c5:23:59:20:
7a:42:0e:ed:90:1d:1f:a0:7b:16:22:2b:0f:81:76:53:d1:1c:
22:fa:78:4d:c1:05:c6:98:75:ce:6b:d2:1c:c4:f2:3c:34:24:
40:92:cf:d1:f5:12:2d:14:b7:39:db:08:e7:39:fc:83:15:73:
ef:a9:8a:68:1d:bb:40:0a:8a:9b:f8:57:30:1a:07:38:79:a2:
cc:cf:99:17:a5:48:ff:c0:5d:1f:e0:14:8d:38:8b:d5:89:18:
cb:c6:a4:34:e2:84:1d:b5:59:42:90:2f:7b:c2:01:21:dc:1d:
f6:0c:31:19:f1:c5:78:c0:33:a6:56:3b:5c:d2:c1:12:1c:0c:
50:5d:9a:60:9b:1d:b7:7a:f6:17:d2:df:86:73:97:95:48:a7:
4a:c5:c6:d8:81:04:76:56:bd:fe:d6:5a:b9:cf:ed:59:d1:64:
8e:09:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:09:59 2024 by rpki-client on console-ams.rpki-client.org