Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/jySQ_bWr3INrbhjt0FE9wLDjhsk.roa
File: jySQ_bWr3INrbhjt0FE9wLDjhsk.roa (raw, json)
Hash identifier: EfVviczkSgwWeguzPrSNlXmUxzfeQaVKRgr5SYoggWk=
Subject key identifier: 8F:24:90:FD:B5:AB:DC:83:6B:6E:18:ED:D0:51:3D:C0:B0:E3:86:C9
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 018CC725776C5F5C6501E7829E74DA2A6A4F
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/jySQ_bWr3INrbhjt0FE9wLDjhsk.roa
Signing time: Mon 01 Jan 2024 22:29:30 +0000
ROA not before: Mon 01 Jan 2024 22:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12732
IP address blocks: 212.21.71.0/24 maxlen: 24
212.21.92.0/22 maxlen: 24
212.42.236.0/23 maxlen: 24
212.42.242.0/23 maxlen: 24
2001:bf1::/32 maxlen: 32
2001:bf0::/29 maxlen: 32
2001:bf0::/32 maxlen: 32
2001:bf0:40::/48 maxlen: 48
2001:bf0:69::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:77:6c:5f:5c:65:01:e7:82:9e:74:da:2a:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 1 22:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f2490fdb5abdc836b6e18edd0513dc0b0e386c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:b5:1a:e2:db:bb:56:cd:80:a7:58:b3:f2:
33:46:dd:c8:1e:e7:57:d0:2d:22:39:54:49:aa:36:
02:da:60:b2:93:88:7f:f6:49:0a:91:78:54:b8:25:
7c:3c:5b:95:25:6e:ff:41:ee:42:f0:f7:5f:02:10:
25:71:fb:12:87:7d:11:da:28:76:9e:a7:91:e9:3a:
13:68:cc:d9:0a:84:18:93:90:64:a0:be:c3:aa:ae:
0f:ec:28:ee:21:3e:c0:ac:17:f7:5f:11:39:f5:04:
24:4f:a0:cf:06:6c:f3:dc:51:a2:f5:9c:54:75:2a:
34:22:a8:f5:40:83:8b:4f:51:1b:c0:32:99:b6:cd:
f2:06:0d:94:27:c9:73:56:24:3f:bb:de:f4:a1:5d:
e3:85:45:d0:ad:67:72:b7:c6:70:34:4e:c4:e8:67:
a9:f3:27:fc:c9:57:c2:b7:68:7f:81:ff:e4:f7:21:
53:5c:4c:bd:f4:a8:51:52:f6:d4:23:79:79:22:99:
6c:21:a6:3b:66:50:1d:98:2a:2a:0e:4a:fa:b8:ca:
4d:1b:62:34:4b:7c:67:d3:07:6a:72:1d:69:98:c5:
bc:0f:b0:3f:fa:62:c1:46:2a:d4:be:39:5e:00:17:
0a:93:ee:30:89:da:5f:eb:c8:be:63:c4:6a:42:a0:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:90:FD:B5:AB:DC:83:6B:6E:18:ED:D0:51:3D:C0:B0:E3:86:C9
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/jySQ_bWr3INrbhjt0FE9wLDjhsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.71.0/24
212.21.92.0/22
212.42.236.0/23
212.42.242.0/23
IPv6:
2001:bf0::/29
Signature Algorithm: sha256WithRSAEncryption
47:e2:f8:23:91:c4:6a:ba:60:e3:e8:68:a2:61:0b:1f:66:ca:
56:95:c2:3b:89:b8:3d:de:a4:6e:07:ad:6b:06:72:44:14:08:
9a:75:18:cc:9b:47:43:94:43:2d:89:a8:7b:52:6d:12:59:3d:
52:34:22:cc:14:86:a6:51:7d:6a:83:a3:73:b5:9d:0e:ea:b5:
3c:e3:3c:d9:1e:ed:e1:eb:d4:52:12:e0:73:24:5d:81:70:a1:
8f:85:f8:2a:f4:21:b8:1b:7a:62:97:0e:b7:9b:16:c9:e4:15:
ab:e5:eb:6b:c1:86:2a:c8:22:d8:8e:09:dd:70:de:70:ca:1d:
70:ff:37:57:ed:33:3f:80:39:e2:93:cc:7e:a3:fc:1a:ed:e9:
1e:2d:3d:72:40:19:ee:8d:4a:dc:c4:2e:9e:13:4f:81:fd:cd:
01:1c:8d:b9:06:07:5f:71:f4:a2:d2:88:5d:4b:ce:b1:b4:b1:
fe:a2:80:fb:74:c8:f2:39:a0:72:22:82:7e:42:47:bc:de:85:
8b:d4:e6:e5:40:42:f3:d7:c6:27:2d:33:ab:94:78:38:0c:28:
ae:a1:83:c1:1f:f2:d5:5d:24:bc:ae:3e:7f:7a:89:72:0f:a3:
4d:dc:40:ad:75:3a:9d:01:7e:89:76:7c:84:a1:66:3d:1c:41:
33:18:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:44:25 2024 by rpki-client on console-fra.rpki-client.org