Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/JkBuuwuZebi9sIkm47Se-yv2GYQ.roa
File: JkBuuwuZebi9sIkm47Se-yv2GYQ.roa (raw, json)
Hash identifier: NGybg51dqrrC6oz0JgeoyEITpl9TtiyH6Ov7zC8hNW8=
Subject key identifier: 26:40:6E:BB:0B:99:79:B8:BD:B0:89:26:E3:B4:9E:FB:2B:F6:19:84
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 018CCA2A2E06F7334A0072B3F9160D3AABB3
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/JkBuuwuZebi9sIkm47Se-yv2GYQ.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62113
IP address blocks: 185.38.27.0/24 maxlen: 24
194.31.164.0/22 maxlen: 24
45.136.36.0/22 maxlen: 24
185.38.24.0/22 maxlen: 24
2a00:fbe0::/32 maxlen: 48
2a00:fbe0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2e:06:f7:33:4a:00:72:b3:f9:16:0d:3a:ab:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26406ebb0b9979b8bdb08926e3b49efb2bf61984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:6c:94:d9:f9:a7:64:58:f9:e6:52:f4:49:
80:59:e6:1c:a1:9a:41:23:e1:a0:57:5d:6a:b5:06:
ce:61:c9:06:24:9e:84:b3:ab:0a:26:8f:54:25:f7:
17:bb:c6:ec:6a:9a:d7:54:41:bd:9a:04:c2:3a:8a:
d0:bb:9e:41:47:da:54:f0:2a:52:7d:aa:75:fc:f4:
bd:ca:2a:6d:d7:2f:2a:93:35:70:b2:53:12:76:3f:
26:fb:7a:19:e2:79:36:e7:5b:04:d6:ec:17:58:80:
1a:22:54:01:3d:17:0c:25:92:56:0a:ea:aa:5a:36:
49:6f:db:5d:19:10:87:9a:52:34:0f:5c:00:45:11:
cd:e2:2b:59:9f:3f:82:fe:ba:69:77:e2:ef:8c:1a:
a7:c0:9d:7c:86:45:2a:52:77:c9:af:11:59:f1:64:
21:f0:ee:d0:8a:c8:97:c9:91:d2:ec:b5:4d:49:31:
38:a2:a6:dc:22:02:fd:d1:b5:32:c4:c8:b0:4c:42:
7d:67:e4:13:aa:55:c3:24:3b:fe:de:1b:0b:84:dc:
d4:1e:56:68:de:65:e4:e9:3a:b3:b9:78:ef:6f:f7:
f7:6c:41:23:81:02:1f:41:de:ab:ee:98:95:e8:3c:
76:e1:7c:dc:00:e2:a1:63:cf:cb:c6:fb:bf:d6:f7:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:6E:BB:0B:99:79:B8:BD:B0:89:26:E3:B4:9E:FB:2B:F6:19:84
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/JkBuuwuZebi9sIkm47Se-yv2GYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.36.0/22
185.38.24.0/22
194.31.164.0/22
IPv6:
2a00:fbe0::/32
Signature Algorithm: sha256WithRSAEncryption
77:48:94:95:2b:ae:74:40:dd:cf:2b:94:31:2a:12:ee:28:fb:
21:1d:87:99:e4:94:6a:95:c9:bf:f9:53:5f:1d:aa:25:75:04:
8f:98:fb:94:dc:ab:72:50:b1:f3:91:b6:dd:70:77:c3:3a:35:
a2:8c:17:bf:fa:db:1f:03:14:c6:46:a1:d2:fb:93:b9:bf:6b:
a2:50:3e:57:88:d5:3a:52:ca:41:86:3e:fe:58:b0:97:c6:26:
9f:08:0c:ad:d2:00:78:64:d0:6d:0e:fd:2b:b8:26:2f:7b:09:
ea:87:7f:e0:e2:4a:74:70:5e:e0:5f:0e:bd:8d:38:3b:06:b8:
78:a2:b5:c6:93:88:d6:ec:0a:84:37:e8:80:19:34:e2:74:b6:
4e:16:26:01:b5:28:34:d5:8e:a9:eb:c9:ae:a2:ec:24:cd:c1:
b1:78:d4:da:a8:df:ab:15:38:83:fe:7a:c2:94:7e:c3:b8:20:
57:02:1c:16:99:44:96:15:c2:c2:47:f3:41:32:44:8c:33:04:
b3:b3:e9:71:64:13:3e:6a:f9:94:48:8e:1a:d2:68:93:8e:bb:
06:14:7a:51:99:7d:a3:ec:66:1d:d8:ca:8a:c6:d9:29:c1:52:
a6:84:e5:20:80:ee:91:3d:be:dc:17:02:d3:d9:31:62:41:9f:
06:e9:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 11:39:26 2024 by rpki-client on console-ams.rpki-client.org