Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/J2ZW-p9V39OKok3QnrMxcemcg80.roa
File: J2ZW-p9V39OKok3QnrMxcemcg80.roa (raw, json)
Hash identifier: /k4dQ4DIXkgLN1G3833mUN7ADU8IRnvhxC+NzruuZX0=
Subject key identifier: 27:66:56:FA:9F:55:DF:D3:8A:A2:4D:D0:9E:B3:31:71:E9:9C:83:CD
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA9932A9E2E06DC9313C1FDD5C83207A
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/J2ZW-p9V39OKok3QnrMxcemcg80.roa
Signing time: Tue 02 Jan 2024 14:34:46 +0000
ROA not before: Tue 02 Jan 2024 14:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48944
IP address blocks: 81.12.112.0/22 maxlen: 22
81.12.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:32:a9:e2:e0:6d:c9:31:3c:1f:dd:5c:83:20:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=276656fa9f55dfd38aa24dd09eb33171e99c83cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:d7:16:d3:7b:f0:5c:3a:d1:c2:cb:a1:85:
77:49:fe:5e:da:00:68:21:2d:db:f3:7d:eb:12:cb:
69:ec:76:ad:f9:db:fc:d9:cb:81:90:b3:f4:42:06:
e3:ff:49:a5:12:4b:6c:bd:32:c8:cf:61:20:6a:f4:
be:77:b5:36:f2:6a:6b:20:2d:2c:ef:b9:73:1a:62:
46:e6:29:8f:a8:04:7d:cc:1e:7c:16:4c:74:98:2d:
f0:39:99:65:c9:5e:62:0b:b6:4a:46:bc:8b:6c:e0:
9f:6b:7b:db:5a:31:ff:0c:2a:b3:90:a4:c6:a5:d1:
d8:28:e8:ce:60:cf:59:52:94:69:f0:8c:50:fc:61:
7a:77:f9:1e:98:fa:95:90:b6:00:30:9b:a8:77:17:
64:5e:37:e0:9c:53:63:fb:7e:7d:0b:3d:e5:26:bb:
6f:01:7d:61:a6:c1:c7:5d:93:34:4f:a8:0e:b8:9d:
08:b7:ec:6a:be:df:64:68:af:be:aa:05:3c:f5:3b:
2b:e8:23:d9:8f:37:b4:56:a4:06:c6:d7:1c:f6:7e:
a5:8f:c7:25:7b:1f:89:63:02:b4:06:0a:ad:43:e3:
72:48:19:c4:b6:6d:b1:7a:8d:d1:6c:d5:14:91:07:
6b:0c:ee:62:ac:9f:68:aa:98:81:60:f5:b5:c4:a9:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:66:56:FA:9F:55:DF:D3:8A:A2:4D:D0:9E:B3:31:71:E9:9C:83:CD
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/J2ZW-p9V39OKok3QnrMxcemcg80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.112.0/22
81.12.126.0/23
Signature Algorithm: sha256WithRSAEncryption
43:79:eb:55:1b:33:5d:5b:d1:40:a0:56:07:ec:2c:6c:8b:67:
40:fd:ae:df:f9:31:ed:63:66:01:a3:61:92:1f:c2:0d:c1:fd:
76:17:cb:ad:08:f2:17:8f:6f:ca:54:43:cb:da:6a:64:44:17:
a6:1f:9a:0a:7d:80:23:5a:1e:b5:c8:26:7c:6f:95:1d:d0:26:
3a:61:a6:45:03:66:b8:76:b5:14:f9:68:8c:fb:d1:46:5f:01:
99:f6:0a:0f:3f:61:0b:e3:a6:cc:fc:e7:58:6a:99:8e:a6:5b:
b5:55:4d:57:d1:5b:bc:fe:81:38:25:26:09:c5:17:67:4e:44:
06:3c:17:27:db:bc:c5:e0:06:cd:bd:7c:04:5a:bf:0f:25:76:
1d:71:07:33:2a:ec:89:44:cc:a8:32:84:6c:cf:a5:55:01:81:
20:24:0c:f0:cf:a2:86:be:c2:2a:01:02:75:2b:10:e9:4a:8c:
f8:6e:93:08:bc:56:b5:88:8f:63:47:95:7f:21:aa:5a:69:80:
44:53:a1:bb:32:f2:f2:1c:ee:b5:b9:79:8b:07:f7:16:b0:8e:
ea:7f:97:e5:c7:ca:22:db:9b:e2:e0:a5:2c:5d:fb:58:e0:78:
db:61:20:49:8d:70:60:4f:e2:29:a1:bd:41:cf:cc:b1:85:db:
a0:3d:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:03:40 2024 by rpki-client on console-fra.rpki-client.org