Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/JcPrcT4tqTyAPynZbpIVWr8ZKNk.roa
File: JcPrcT4tqTyAPynZbpIVWr8ZKNk.roa (raw, json)
Hash identifier: HR9uUUH+ZsDQZwJ/hrsjZnZRZxi0iQYKtabFfu0hgMI=
Subject key identifier: 25:C3:EB:71:3E:2D:A9:3C:80:3F:29:D9:6E:92:15:5A:BF:19:28:D9
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 018CC348FDE56EF226235C5BE23CD6AA014F
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/JcPrcT4tqTyAPynZbpIVWr8ZKNk.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62033
IP address blocks: 185.127.129.0/24 maxlen: 24
45.132.34.0/24 maxlen: 24
2a10:5d80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fd:e5:6e:f2:26:23:5c:5b:e2:3c:d6:aa:01:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c3eb713e2da93c803f29d96e92155abf1928d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:54:c6:72:f8:dc:18:e4:77:2a:5a:35:16:21:
5a:fa:47:f8:4c:0e:3b:22:5d:02:e1:c5:6a:58:96:
ec:bb:0f:c1:f0:2e:66:17:72:97:a5:c9:f4:cf:37:
d0:32:30:81:15:9d:c3:b3:de:0a:11:db:ab:b9:9d:
ed:c7:f3:11:19:27:0b:aa:4e:53:2b:17:a3:fb:fe:
af:03:c4:ff:fb:40:7e:b7:f3:89:85:20:43:d6:cd:
cc:99:81:3a:db:63:1d:04:7f:02:8c:25:2a:4d:b3:
99:cd:8e:68:5c:23:95:af:24:47:a6:44:ea:5a:d2:
87:79:f2:41:ce:7c:10:c4:5a:27:4f:19:2d:3b:f9:
ab:72:a8:3d:d0:5d:12:d5:b8:77:9f:e9:af:01:61:
df:dc:9b:ae:e6:02:28:c8:67:0b:79:1e:1c:1b:2d:
e1:46:23:37:23:35:fa:8d:e1:0b:38:6d:ef:51:e2:
a0:ed:b2:13:bd:02:b6:09:94:27:aa:bc:e4:4d:b0:
25:ba:4f:2d:eb:a6:1e:8c:11:72:7c:28:34:c0:fe:
f5:66:0a:98:91:23:e0:e5:ec:d0:d6:3d:53:f7:d1:
2f:b7:b0:3e:56:04:55:83:99:f3:73:65:bc:bc:0a:
53:db:aa:c6:fd:73:a8:1f:0b:05:aa:6b:5f:27:13:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:EB:71:3E:2D:A9:3C:80:3F:29:D9:6E:92:15:5A:BF:19:28:D9
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/JcPrcT4tqTyAPynZbpIVWr8ZKNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.34.0/24
185.127.129.0/24
IPv6:
2a10:5d80:1::/48
Signature Algorithm: sha256WithRSAEncryption
37:e6:e8:e6:59:5c:e8:fd:10:7b:f6:7f:b8:f7:79:3e:2a:3a:
fd:c1:16:18:5d:6d:11:26:58:2d:5f:d1:39:bd:36:c8:1b:6b:
11:b6:ca:56:29:96:9e:af:4e:8b:12:e3:b5:2b:13:9b:66:99:
7e:64:b0:2e:28:bb:8d:db:22:ce:87:b9:f9:6d:c1:90:41:6f:
cc:5b:07:c6:1f:4c:cd:d3:1a:5e:0f:57:97:53:62:e8:6a:5f:
b9:f4:2f:c5:98:18:f7:ff:b0:c7:6b:25:e2:83:da:68:48:fa:
18:b5:86:ad:6a:c8:ce:eb:70:68:7a:63:6e:01:f8:16:fa:38:
0a:d3:8f:2f:ea:24:2a:59:af:02:8a:60:9e:31:0f:cd:33:67:
f2:78:6f:01:ba:e9:f2:82:af:e2:b0:60:e2:54:81:29:18:d0:
b2:9b:6c:c5:fd:43:43:30:8a:f3:fb:dd:27:62:20:5f:8c:0e:
99:1c:6d:11:c3:00:ab:59:fd:34:07:0c:e9:fd:b8:63:18:46:
61:34:1a:a4:f7:1b:9c:e7:69:ea:55:8a:7f:24:02:81:65:c8:
32:80:90:f7:6e:96:ba:1b:f6:35:40:19:98:69:65:bb:90:a8:
2f:66:b0:c1:e4:4a:4a:47:36:e0:19:1e:87:ff:ce:5c:f9:4d:
d7:b1:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:12:09 2024 by rpki-client on console-ams.rpki-client.org