Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gj-fmEScLy1XBQ4_k4Oarn6jVLM.roa
File: gj-fmEScLy1XBQ4_k4Oarn6jVLM.roa (raw, json)
Hash identifier: uHdzQ4sq74C6hYy4oPv+8mJ2m97S558GSnf6F8ERTEY=
Subject key identifier: 82:3F:9F:98:44:9C:2F:2D:57:05:0E:3F:93:83:9A:AE:7E:A3:54:B3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018FED944324AEC5D7841DA2F17F52C7F7D3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gj-fmEScLy1XBQ4_k4Oarn6jVLM.roa
Signing time: Thu 06 Jun 2024 12:44:27 +0000
ROA not before: Thu 06 Jun 2024 12:44:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a0f:5ec0::/29 maxlen: 32
2a0f:7fc0::/29 maxlen: 32
2a0f:edc0::/29 maxlen: 32
2a0f:fb40::/29 maxlen: 32
2a11:6600::/29 maxlen: 32
2a11:6c00::/29 maxlen: 32
2a11:d400::/29 maxlen: 32
2a11:f080::/29 maxlen: 32
2a12:3c80::/29 maxlen: 32
2a12:e4c0::/29 maxlen: 32
2a13:3a80::/29 maxlen: 32
2a13:3e80::/29 maxlen: 32
2a13:4680::/29 maxlen: 32
2a13:64c0::/29 maxlen: 32
2a13:6540::/29 maxlen: 32
2a13:6840::/29 maxlen: 32
2a13:68c0::/29 maxlen: 32
2a13:69c0::/29 maxlen: 32
2a13:6a40::/29 maxlen: 32
2a13:6ac0::/29 maxlen: 32
2a13:6bc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:94:43:24:ae:c5:d7:84:1d:a2:f1:7f:52:c7:f7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 6 12:44:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=823f9f98449c2f2d57050e3f93839aae7ea354b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:8d:6e:4e:d6:fd:93:8f:60:5d:b2:64:e9:
e1:4e:73:8b:67:8c:68:fa:f9:a9:2c:95:e8:6a:95:
ac:99:b2:fe:fa:75:e5:5a:f8:3a:d6:e3:ed:70:df:
b3:4f:08:45:11:76:3e:58:43:d3:a6:8d:f1:6c:2f:
76:fb:d1:6b:34:6c:d6:61:3c:63:dd:ba:be:43:50:
18:81:16:a3:39:dd:b9:48:22:35:0a:96:80:6f:35:
28:8a:ee:2d:75:b8:bc:9d:c4:ea:00:48:d3:c0:ac:
18:8d:bb:ed:79:4c:44:8f:bb:21:6e:89:e6:5c:1a:
50:a0:00:d9:6a:d3:d2:a9:e8:ac:0f:1e:5d:79:d2:
a0:77:1c:c5:11:97:a2:ce:7f:70:72:a2:51:5f:9a:
6c:12:6c:26:45:59:23:8d:77:7a:ee:26:a3:77:51:
7e:08:01:31:c0:5f:06:d2:e2:0a:f9:29:fe:77:75:
25:4e:f5:cf:42:37:86:5c:cf:e8:40:a2:15:14:20:
fb:66:00:0c:b5:ce:c4:e5:c0:17:03:b8:3e:d0:94:
00:9c:c5:54:e9:0c:d9:f8:44:af:80:3b:d5:65:03:
c8:e6:a1:4d:ab:c1:1e:6b:81:da:e8:b1:40:3f:98:
cd:ed:ff:69:c2:2a:70:3d:7f:fe:ac:eb:10:8c:38:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3F:9F:98:44:9C:2F:2D:57:05:0E:3F:93:83:9A:AE:7E:A3:54:B3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gj-fmEScLy1XBQ4_k4Oarn6jVLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5ec0::/29
2a0f:7fc0::/29
2a0f:edc0::/29
2a0f:fb40::/29
2a11:6600::/29
2a11:6c00::/29
2a11:d400::/29
2a11:f080::/29
2a12:3c80::/29
2a12:e4c0::/29
2a13:3a80::/29
2a13:3e80::/29
2a13:4680::/29
2a13:64c0::/29
2a13:6540::/29
2a13:6840::/29
2a13:68c0::/29
2a13:69c0::/29
2a13:6a40::/29
2a13:6ac0::/29
2a13:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
68:19:12:61:28:55:5e:3e:fe:ab:99:e0:91:e1:42:b6:c5:a7:
3c:7c:5d:96:d3:5d:a6:37:fa:b4:3d:db:a1:09:05:2f:c4:da:
55:10:d5:3b:cd:1a:07:09:3b:e4:f2:6f:a1:11:3c:43:1a:6d:
c6:ba:e0:ec:2d:97:b9:fb:4f:bb:8a:80:eb:13:1c:1a:06:a9:
69:28:6a:fb:ab:9d:5f:ab:8e:7a:35:a3:24:2f:cd:59:cc:14:
7e:6c:ea:9a:d2:4d:eb:6a:38:a2:c0:f3:6e:9f:15:0f:7a:ef:
06:cc:ae:a4:89:77:f6:05:e4:e2:45:65:99:42:ee:a1:43:37:
c4:7c:3f:8b:65:75:2c:76:60:cb:68:ad:3a:c0:b1:3b:e5:3d:
d9:78:4c:c4:9f:c7:d4:c2:d1:fe:14:6d:2b:49:dc:0e:83:20:
7e:d6:e5:4e:d6:04:aa:30:73:a5:c2:f0:ba:57:b1:d9:26:a0:
4e:49:71:5c:a7:92:ba:2d:3e:56:4d:df:68:d8:6f:53:ec:8c:
cf:0c:2d:6b:6c:d6:4e:34:51:7d:b9:05:89:13:26:6f:1c:fa:
91:6c:60:54:32:ff:8b:7c:ad:d6:74:83:8b:b0:8b:9f:c2:57:
17:59:81:11:52:bb:68:31:70:88:c8:7e:a0:d2:ea:2c:83:9d:
db:0f:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:28:39 2024 by rpki-client on console-fra.rpki-client.org