Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/9yaDrumRHAsVJk1Pjvb04f3IXS4.roa
File: 9yaDrumRHAsVJk1Pjvb04f3IXS4.roa (raw, json)
Hash identifier: yGlfZb1uwToZMXnBp/CeqZUBr5VEN/Mfep0L0bIS+OM=
Subject key identifier: F7:26:83:AE:E9:91:1C:0B:15:26:4D:4F:8E:F6:F4:E1:FD:C8:5D:2E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 018CC4935EFD7858DC26340BB0ACDB040300
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/9yaDrumRHAsVJk1Pjvb04f3IXS4.roa
Signing time: Mon 01 Jan 2024 10:30:41 +0000
ROA not before: Mon 01 Jan 2024 10:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202038
IP address blocks: 94.199.232.0/21 maxlen: 24
109.234.224.0/21 maxlen: 24
185.78.216.0/22 maxlen: 24
185.108.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:5e:fd:78:58:dc:26:34:0b:b0:ac:db:04:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Jan 1 10:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f72683aee9911c0b15264d4f8ef6f4e1fdc85d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:2f:4d:f0:81:36:98:8d:f8:47:9a:2e:97:
e0:c8:9f:94:c1:69:51:7b:61:27:ef:0a:30:ae:58:
72:14:36:6f:f4:31:50:20:d6:5a:2b:3d:a1:33:a3:
e8:ae:53:7d:9b:2d:e7:07:ba:92:5e:24:8d:f5:b0:
55:38:c8:f4:d2:8f:1d:0b:32:63:03:af:88:e5:5e:
51:d7:e0:c7:9e:f2:20:b7:27:5f:72:ab:de:d5:2e:
45:e9:52:1f:df:1f:8a:04:1b:42:fa:5a:22:bf:1a:
7f:06:a9:80:6c:ab:fc:f7:df:43:1b:24:ed:9f:fd:
28:2c:fb:03:89:74:3f:18:7c:d9:22:5f:2a:90:55:
bc:1c:41:4d:0f:41:f1:94:14:3c:72:30:df:0b:68:
3e:7a:e4:73:32:87:c1:6c:08:5b:b9:f2:8c:63:ab:
4b:3d:69:2f:c6:43:4e:04:1a:4d:47:81:83:6e:82:
1b:b1:1a:35:ed:a8:6d:b4:8d:ae:66:07:ce:33:11:
c6:b0:cd:22:97:8d:08:38:e3:f5:8c:6a:20:f5:3e:
6c:de:58:cb:52:61:80:c9:fb:de:c7:e5:8a:5b:65:
0f:f3:b0:dd:99:75:7d:a6:9b:2a:8d:af:ea:ef:80:
49:8a:13:b9:1f:fa:ce:17:bf:4b:9b:27:e5:d2:6a:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:83:AE:E9:91:1C:0B:15:26:4D:4F:8E:F6:F4:E1:FD:C8:5D:2E
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/9yaDrumRHAsVJk1Pjvb04f3IXS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.232.0/21
109.234.224.0/21
185.78.216.0/22
185.108.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:a2:07:71:2a:c9:1e:b9:f2:91:ae:bc:ab:3f:20:ef:d9:86:
60:4d:e4:af:80:b8:eb:50:79:b8:ca:f9:8c:3c:a2:3f:dd:c5:
3e:55:db:0b:12:88:d5:ff:2d:5f:52:81:34:20:e9:0b:f6:88:
c4:2c:f2:63:8b:1c:fc:ea:ab:82:cd:8f:58:4b:a9:78:87:43:
99:3d:20:7f:88:14:99:7b:ee:0b:d6:1e:b4:75:30:a1:c8:f9:
ba:22:a3:dc:18:21:68:94:3b:71:2b:fd:a2:6b:78:3f:74:92:
7a:a6:1a:e7:45:2f:53:fb:07:e0:26:62:e6:b9:ad:6e:4e:5b:
2b:47:c8:63:cb:c9:cf:dc:54:85:29:71:1b:36:01:c8:f1:88:
09:8b:1d:2e:91:d8:45:95:57:74:d5:5d:1f:a3:8a:5f:a3:b3:
9b:15:3e:f1:24:ab:aa:f0:ad:85:9a:e0:63:14:75:d0:44:29:
95:9c:cb:d1:00:16:87:e5:73:b3:b4:bb:4a:4b:0d:70:95:7e:
9f:03:de:7e:82:a8:80:72:bd:a3:93:22:a0:23:d2:8d:f5:64:
d4:ae:56:6e:5f:96:3f:2b:9e:d9:e1:45:15:36:f4:d8:19:1a:
e0:90:54:73:17:9e:a0:e6:92:14:66:a6:1e:0f:20:dd:7a:20:
fc:b4:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:39:39 2024 by rpki-client on console-fra.rpki-client.org