Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/0JqGVSPNFCBghujcNTJZh9ovtx8.roa
File: 0JqGVSPNFCBghujcNTJZh9ovtx8.roa (raw, json)
Hash identifier: T2BlZ2jgK73b++Vm8fXbtklQtcRuXXz+f+tzuKd0bx8=
Subject key identifier: D0:9A:86:55:23:CD:14:20:60:86:E8:DC:35:32:59:87:DA:2F:B7:1F
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 018CC56E23F16F4112175F6C54497DE23835
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/0JqGVSPNFCBghujcNTJZh9ovtx8.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204896
IP address blocks: 185.143.148.0/22 maxlen: 22
91.142.112.0/20 maxlen: 20
2a00:17b0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 23:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:23:f1:6f:41:12:17:5f:6c:54:49:7d:e2:38:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d09a865523cd14206086e8dc35325987da2fb71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:79:07:59:5d:75:8d:03:c9:f1:2e:9a:11:82:
75:42:d3:7f:c5:e9:1b:51:f1:92:1b:56:33:a2:0c:
dc:3d:fd:22:05:06:dd:22:75:04:04:1f:ee:24:9c:
e9:dc:c9:24:a5:f1:32:ce:f4:5b:3f:f0:24:4d:3b:
c9:d0:f9:91:f5:2e:32:71:ad:bd:a2:c1:50:c9:c4:
e7:c7:a6:bb:cc:14:0a:5a:a1:b0:a5:32:73:46:12:
69:47:4e:8d:58:be:bb:8b:2e:cf:42:e9:43:4c:67:
8e:14:ed:8f:d8:20:bf:91:f7:a6:ca:88:84:5d:c1:
5c:70:8c:8a:32:c3:b4:3e:53:7f:5b:41:b5:2c:a3:
e2:ad:7d:44:35:89:0e:41:f7:7d:b9:ef:d4:90:05:
60:3d:ea:44:b3:5c:d8:86:24:8b:ca:9b:cd:d7:7b:
d8:45:54:5b:89:c0:96:2c:72:b2:cf:6f:40:74:20:
0a:75:47:53:3e:7b:bd:e2:b2:11:17:9e:3d:f4:df:
4b:d3:f2:96:c6:55:4d:cb:c0:7d:db:36:9a:ca:1e:
d5:1c:2c:b8:e8:ca:78:1d:23:87:c3:fb:40:57:1e:
fe:28:0a:db:91:24:8f:f2:09:d7:97:e9:ab:4b:81:
02:2d:a0:77:42:9a:47:ec:65:b3:17:54:91:6f:2e:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:86:55:23:CD:14:20:60:86:E8:DC:35:32:59:87:DA:2F:B7:1F
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/0JqGVSPNFCBghujcNTJZh9ovtx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.112.0/20
185.143.148.0/22
IPv6:
2a00:17b0::/32
Signature Algorithm: sha256WithRSAEncryption
57:7c:d6:f8:b3:27:40:e5:3e:e4:e6:03:f2:b9:a1:70:2a:54:
7c:4a:07:72:d9:50:56:20:5e:a1:e9:5c:7b:e2:e3:be:f8:34:
c3:90:7f:3d:b8:33:02:c8:1c:b9:33:33:00:f1:45:57:f5:93:
74:d0:50:47:65:e0:7b:a1:6e:91:a3:51:4c:be:10:13:84:f2:
d2:24:7b:7b:5a:99:5a:9f:f4:07:18:23:6f:c8:09:d6:c2:9c:
29:5e:4b:9a:ca:7a:b6:fc:20:de:fd:67:68:1e:f1:f0:5f:89:
ab:62:30:c3:aa:90:fb:69:31:3f:53:69:bf:58:3b:95:41:a3:
84:7a:d1:66:38:19:8b:b4:47:ad:a5:7a:c5:79:fe:ea:f1:fe:
5c:40:e8:1e:b5:2a:7d:66:7c:d1:da:21:90:ab:af:28:e4:f0:
76:96:f7:0d:cc:4a:9d:dc:ff:72:c6:a8:b6:53:d4:6c:50:33:
d0:02:9c:94:50:21:43:9d:1b:b5:f4:b7:88:8f:87:0a:91:50:
77:bf:51:ef:fc:48:bc:c3:22:b0:0f:20:b0:a6:16:e4:c6:7b:
cd:25:6d:b5:11:99:f4:07:20:2e:83:2c:72:6a:da:28:72:dc:
42:0a:2b:79:a9:c8:6c:51:73:e7:b1:ac:24:0b:25:e8:3c:97:
b7:73:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 06:39:22 2024 by rpki-client on console-ams.rpki-client.org