Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JKG11z5t0E7wyxga7z42hwHKl2o.roa
File: JKG11z5t0E7wyxga7z42hwHKl2o.roa (raw, json)
Hash identifier: gR5sXnoQgujprvgCYatA3zAK3kavYfbSlppuQsT9bnQ=
Subject key identifier: 24:A1:B5:D7:3E:6D:D0:4E:F0:CB:18:1A:EF:3E:36:87:01:CA:97:6A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D4ED863E70EC52E647E17D85C7C4B
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JKG11z5t0E7wyxga7z42hwHKl2o.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12756
IP address blocks: 212.72.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4e:d8:63:e7:0e:c5:2e:64:7e:17:d8:5c:7c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24a1b5d73e6dd04ef0cb181aef3e368701ca976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:93:b5:36:2a:3b:26:1e:b8:bc:73:d2:b2:
bc:a5:e4:60:3a:6e:e0:54:da:48:98:66:e8:63:52:
7a:8f:55:54:f3:a0:6e:ab:16:40:f3:44:a6:2f:d4:
33:f1:4e:46:13:eb:74:f9:6d:25:ca:e9:9d:ab:01:
82:48:64:f7:39:d8:8f:c1:28:aa:af:25:3f:93:c5:
75:29:ac:51:dc:c4:a4:9c:0f:36:b6:22:67:f5:76:
5a:f1:91:49:c0:b3:f2:58:e7:a7:d9:28:41:6d:4a:
cc:4a:e8:43:e9:ea:c1:e2:46:59:76:41:dd:10:b3:
a1:4d:8d:ce:95:6e:00:c4:8e:f8:34:8c:89:c4:59:
04:a2:88:77:e4:bf:50:9e:85:82:c7:a6:6f:1d:14:
5c:68:05:d3:96:95:1d:16:cb:ad:88:d0:a8:82:ba:
ab:a6:5c:7e:89:c3:a0:7b:40:fe:9b:98:0a:05:45:
4e:29:6f:b2:71:15:49:cb:4f:5d:36:6a:ac:1f:4b:
3a:61:16:9c:72:0a:c5:c0:1a:84:86:85:91:05:28:
d0:49:98:7e:3b:44:3a:70:3b:60:87:15:38:87:bc:
ab:34:4b:ae:88:e5:3b:27:8a:a3:c8:2c:5a:05:7a:
be:a8:55:fc:94:48:de:bc:43:c6:34:71:1a:8b:6d:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:B5:D7:3E:6D:D0:4E:F0:CB:18:1A:EF:3E:36:87:01:CA:97:6A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/JKG11z5t0E7wyxga7z42hwHKl2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.205.0/24
Signature Algorithm: sha256WithRSAEncryption
28:41:38:73:ac:29:e4:dc:69:95:aa:e1:58:7d:e7:10:2f:04:
fd:53:79:30:eb:8c:dc:08:af:6e:33:0a:42:a8:e5:35:c7:db:
70:a9:1d:3e:82:6b:87:a7:42:b0:45:e2:ad:2e:ce:c8:63:9e:
8e:95:a8:c9:2e:0e:c5:15:36:ef:3e:d0:f5:65:e4:f3:70:1b:
99:ac:0c:0a:ba:33:8d:aa:1a:f2:b3:b7:e5:c1:f7:57:03:67:
dc:d1:9e:31:25:6b:5c:07:ef:d0:2f:19:62:ca:e2:ae:b2:13:
c8:fa:ad:9c:66:2b:c4:78:6f:b9:c5:12:0f:5c:84:38:c1:e3:
fc:c1:9f:1a:04:2c:0a:45:0f:36:ae:f4:5e:2e:65:f0:3d:97:
f0:a0:54:07:e2:b8:11:57:1c:de:75:4d:46:6a:7b:07:99:01:
58:83:11:e5:06:d7:b8:44:26:a7:0a:52:bb:55:7f:0d:d3:b3:
49:35:2f:2d:06:62:62:a8:90:84:fd:7b:c1:5d:1b:03:79:da:
b7:56:09:a6:c0:af:bb:b9:6e:07:5d:a7:70:aa:d3:f1:85:04:
4d:56:8a:80:02:60:b5:a7:2c:60:f2:e4:50:87:1d:b3:af:28:
a9:7c:fd:aa:5d:51:23:5e:3d:2b:00:15:c6:de:83:d8:af:a2:
c1:a7:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:09 2024 by rpki-client on console-fra.rpki-client.org