Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/J9xo5S8sis1GUq8l3od9IiAYLxU.roa
File: J9xo5S8sis1GUq8l3od9IiAYLxU.roa (raw, json)
Hash identifier: ZLTWdtz6flZYONkSuYBnZCYa16DxclNvkKkM+WekRuc=
Subject key identifier: 27:DC:68:E5:2F:2C:8A:CD:46:52:AF:25:DE:87:7D:22:20:18:2F:15
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 0191EBE12D69FB088A812DD5569970DADC75
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/J9xo5S8sis1GUq8l3od9IiAYLxU.roa
Signing time: Fri 13 Sep 2024 14:54:48 +0000
ROA not before: Fri 13 Sep 2024 14:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210656
IP address blocks: 89.223.20.0/24 maxlen: 24
94.126.204.0/22 maxlen: 24
94.139.248.0/22 maxlen: 24
2a0d:d6c2::/48 maxlen: 48
2a0d:d6c7:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:e1:2d:69:fb:08:8a:81:2d:d5:56:99:70:da:dc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Sep 13 14:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27dc68e52f2c8acd4652af25de877d2220182f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:b6:fb:ca:09:49:d1:e4:6b:18:d3:05:c0:
60:cb:eb:49:3a:05:de:78:17:45:2d:1d:c3:40:4f:
a7:21:f5:a0:b7:f3:6d:87:0d:ed:16:13:a3:51:d2:
cc:b4:1e:c7:ca:0e:17:43:df:2e:b1:cf:98:38:ac:
cf:db:bb:43:16:0d:20:35:f2:d5:02:a0:3c:dc:44:
16:fb:b7:27:47:8f:69:31:0e:8b:be:80:6f:84:5e:
11:f9:b3:98:80:50:6e:cc:b6:c6:c9:8e:fb:0e:22:
33:55:08:6f:c1:63:73:ad:32:2e:1f:d6:99:3c:9d:
4a:d4:0c:5c:55:6f:19:b9:e8:27:d8:8b:0a:13:cd:
95:e2:19:ff:bf:53:c5:40:d4:34:71:5c:4c:86:88:
8b:45:d6:6b:74:78:f3:d3:6d:4b:84:d6:c1:a7:5b:
27:48:f1:3b:4e:d8:6c:91:15:1f:56:1e:11:3f:2f:
65:f1:6a:86:00:84:6d:43:d3:37:8c:63:22:76:19:
8f:80:08:75:d6:f9:c3:b9:6d:74:b1:16:ad:e5:bb:
23:0b:58:19:71:ab:42:ec:b8:bf:bf:3c:ee:d3:f4:
b4:37:ee:91:dc:60:2c:fe:b3:d6:15:89:1b:6a:b8:
f3:36:2a:77:77:ce:2c:9c:6d:23:ab:25:75:58:fc:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DC:68:E5:2F:2C:8A:CD:46:52:AF:25:DE:87:7D:22:20:18:2F:15
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/J9xo5S8sis1GUq8l3od9IiAYLxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.20.0/24
94.126.204.0/22
94.139.248.0/22
IPv6:
2a0d:d6c2::/48
2a0d:d6c7:3::/48
Signature Algorithm: sha256WithRSAEncryption
9e:35:76:f0:cd:bd:ce:a2:db:54:24:3b:b4:6e:46:17:49:53:
a7:2f:2f:67:e1:fc:fe:44:97:9c:c8:04:ea:68:25:18:39:33:
7e:63:0f:ea:05:7e:6a:0c:1c:68:74:60:e0:02:88:b1:38:29:
3a:cf:71:55:3c:19:48:ba:3d:bb:d8:e6:a7:0f:8e:90:87:66:
a7:a8:a9:33:b6:40:22:dd:98:02:4d:97:4f:4c:42:24:48:5d:
c3:0c:fe:78:9a:01:6a:eb:e2:4f:ce:82:b5:b8:0f:da:0f:6e:
b0:44:5b:aa:9e:9b:a1:df:6a:36:2f:11:fa:9b:e5:27:13:c3:
c8:86:f7:ae:15:5e:57:76:3b:de:3d:b6:8e:2c:0f:ac:54:aa:
65:69:70:63:19:c3:85:f8:8d:cf:e4:c8:3f:15:bc:71:5d:1c:
bc:45:d7:b8:92:d0:5d:68:1c:46:05:f7:77:5c:b3:52:6a:d6:
fd:77:97:7f:22:16:64:77:4f:fa:2a:6b:df:02:9a:c7:58:ff:
62:d4:7b:22:49:a4:08:f7:94:3f:e5:5c:0e:d7:10:fd:74:34:
22:b8:33:72:84:52:eb:36:05:3a:ef:ca:10:7e:50:fd:39:3a:
29:eb:0a:e2:d7:c7:17:f8:c5:3c:7f:cf:34:ad:fe:1a:bd:2d:
92:d9:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:06:25 2024 by rpki-client on console-ams.rpki-client.org