Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa
File: jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa (raw, json)
Hash identifier: 2oF7N7yTOxtyVqWqVHVYMJ2Ef9T/1aes9oCTIwVHYWc=
Subject key identifier: 8D:EA:B7:9A:2F:26:20:74:65:10:C6:92:09:08:6C:AE:65:CA:3B:C8
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 018CC6B7797103B729124E19BDFA9667DBF9
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202283
IP address blocks: 193.109.238.0/24 maxlen: 24
185.232.220.0/22 maxlen: 22
2a0c:d100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:79:71:03:b7:29:12:4e:19:bd:fa:96:67:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8deab79a2f2620746510c69209086cae65ca3bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:90:cf:57:de:14:9a:d3:e7:2c:a0:80:0b:
19:af:03:78:19:5f:5b:3b:22:e3:27:bd:57:f9:b9:
9e:d2:ea:cb:67:12:bb:04:69:7b:6c:06:0a:5a:1d:
1f:6c:5d:ed:24:65:ae:f0:63:12:7d:67:f4:b4:58:
32:ea:52:27:c3:2e:c7:79:ce:0b:8e:8b:38:d8:d5:
85:22:fd:d1:c5:d4:5b:b3:e0:26:7d:6a:05:97:b8:
65:a9:5b:f5:24:b1:a7:dd:d4:f0:b7:73:88:86:94:
d4:9d:dd:cd:eb:9c:e6:7b:8c:16:46:08:60:7f:c4:
f5:5e:f4:c0:58:ce:ed:ae:0e:1d:5c:ec:ca:e6:47:
cc:8b:82:3d:f5:22:08:08:25:d2:eb:4b:69:e8:c0:
a3:fa:6f:ee:da:59:50:7e:3b:f7:e0:3f:71:be:01:
db:ea:04:15:89:ad:88:e5:75:07:ac:dd:b3:e7:53:
08:4c:9b:57:ec:19:49:4e:46:d5:a0:fd:dd:e3:4d:
82:93:0a:ce:a5:de:fb:19:4a:5a:9a:a2:44:40:c5:
3b:60:fd:0b:dc:62:50:14:2c:40:6e:1e:c6:d5:39:
c4:a6:28:b0:aa:6d:b0:7b:4b:9f:3f:e4:7e:82:8b:
6a:e9:a0:df:76:91:56:a4:83:8b:7e:a2:29:50:5a:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:B7:9A:2F:26:20:74:65:10:C6:92:09:08:6C:AE:65:CA:3B:C8
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.220.0/22
193.109.238.0/24
IPv6:
2a0c:d100::/29
Signature Algorithm: sha256WithRSAEncryption
1f:dd:77:2f:1e:fb:4c:28:9b:6a:57:04:ef:62:92:7c:fa:22:
f2:41:cc:28:89:dd:cb:73:d5:50:b5:a7:eb:68:1a:04:fe:96:
2f:56:a2:15:37:e6:e6:09:15:59:6e:3f:b5:ab:50:97:dd:44:
5b:12:a5:3f:9e:b2:7f:53:84:e6:a2:7b:78:90:ee:3c:79:92:
77:0a:82:d3:1a:50:2b:93:0c:88:69:3e:8a:ca:4e:03:97:f3:
23:9e:f6:09:db:f9:9c:52:f2:19:43:bf:f6:ba:1f:64:a6:16:
a0:54:c5:9f:49:1b:3c:24:b6:5c:b1:03:17:9e:2e:39:2f:7f:
ae:88:62:01:56:05:de:d0:45:00:e0:f9:22:de:68:fb:82:ec:
ab:2c:e0:bf:0d:5f:55:c2:d9:fe:2b:56:fc:38:ef:15:87:f3:
47:00:71:c9:72:68:e2:ac:1e:da:eb:99:a6:e9:f4:4d:cb:ca:
a7:27:ba:3b:99:57:27:db:48:7e:11:f7:53:34:ce:d2:e9:a8:
be:49:03:d3:3a:3b:21:eb:83:1f:17:29:4c:20:4d:ba:8e:25:
b7:4c:74:4a:70:9e:78:fd:d8:cf:07:c8:9c:d9:90:84:13:d7:
13:a9:38:ad:3e:e7:10:ec:0c:19:83:a9:6e:22:ea:e5:12:19:
c2:1b:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:57:05 2024 by rpki-client on console-fra.rpki-client.org