Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/tjYKp35GXFoWAYyAhqIbWawK9KA.roa
File: tjYKp35GXFoWAYyAhqIbWawK9KA.roa (raw, json)
Hash identifier: XrYY8Y6s/lVa6ZbbTPsBNczqKri7hqQ/79tu0p7GscU=
Subject key identifier: B6:36:0A:A7:7E:46:5C:5A:16:01:8C:80:86:A2:1B:59:AC:0A:F4:A0
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018CC726A2EA45F6FB053B97AA84BDC8C3DB
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/tjYKp35GXFoWAYyAhqIbWawK9KA.roa
Signing time: Mon 01 Jan 2024 22:30:47 +0000
ROA not before: Mon 01 Jan 2024 22:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20915
IP address blocks: 87.254.25.0/24 maxlen: 24
87.254.0.0/19 maxlen: 19
217.25.0.0/20 maxlen: 20
2a00:eac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a2:ea:45:f6:fb:05:3b:97:aa:84:bd:c8:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 1 22:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6360aa77e465c5a16018c8086a21b59ac0af4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:a3:10:33:6f:ad:88:72:49:8a:9f:3b:c4:
6e:62:2e:94:57:d1:4e:d6:9f:68:c0:a2:03:c2:0a:
34:e1:fc:94:b5:6c:ae:f7:02:98:f3:a0:4a:c3:24:
2f:e3:58:9b:b0:c8:f5:ce:14:46:0c:29:7e:f2:d2:
3a:70:fa:b2:9b:55:2a:30:96:62:85:39:4c:b3:71:
75:93:89:27:a5:76:76:66:b2:c6:d7:db:61:9d:c2:
84:56:f8:5e:f8:4c:f5:c6:3d:89:e4:59:03:6d:85:
ce:fe:1b:78:ef:21:4b:8d:1b:2f:5f:1c:25:35:dc:
ff:e2:a6:06:4d:f5:54:a2:21:67:e7:8d:4c:9a:42:
56:c0:82:90:ed:3d:02:c0:44:b9:e5:3b:01:f3:15:
8e:a4:dd:a4:43:29:8f:6b:cf:ee:41:d6:f9:63:e5:
61:07:e9:d8:c7:3d:ab:00:f2:01:d6:00:ad:04:94:
6a:78:70:f4:33:27:23:bc:c4:2b:18:71:4b:22:4b:
90:5b:bc:cf:50:05:d6:65:df:78:59:e3:a3:13:87:
21:44:f6:5a:fc:14:f1:3a:46:18:57:86:7d:01:fb:
91:c9:46:01:28:b3:db:a1:33:da:50:31:8d:40:02:
bc:d8:21:d4:b2:5e:9a:3b:08:3b:a7:40:f8:48:c4:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:0A:A7:7E:46:5C:5A:16:01:8C:80:86:A2:1B:59:AC:0A:F4:A0
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/tjYKp35GXFoWAYyAhqIbWawK9KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.0.0/19
217.25.0.0/20
IPv6:
2a00:eac0::/32
Signature Algorithm: sha256WithRSAEncryption
79:c8:4a:a7:c9:f2:06:69:ed:2a:75:e6:e5:6f:22:6b:51:0b:
41:18:a2:13:b8:fd:8f:4a:40:38:ce:45:d1:b0:bb:af:4a:e0:
c2:0e:cb:c5:af:99:b3:ad:d2:34:d3:b3:e1:f4:7b:4a:03:7c:
08:21:8f:28:55:eb:32:c5:6e:d9:7b:e4:8f:17:b8:00:db:b6:
65:91:4d:22:86:20:78:9c:19:f2:5d:f8:f5:c5:17:4b:b4:f0:
1c:a1:77:b1:86:e8:6b:9d:db:59:58:f9:9e:ef:f0:29:aa:fd:
8c:f6:fe:91:d8:5c:56:8a:20:1e:4b:37:36:5c:0e:26:a3:c5:
e2:8e:01:23:5a:c8:99:47:39:75:67:a5:9c:d5:bf:80:d2:9d:
14:1d:96:36:e2:b3:59:71:89:70:e2:31:3b:3e:42:15:63:ab:
e6:da:21:cb:9e:9a:04:66:39:44:7f:59:40:47:cb:77:5c:db:
cc:3f:3a:d7:e4:5b:e6:f6:f7:1d:ae:74:cc:60:c4:9a:9c:a7:
1c:69:00:22:ab:73:dc:3c:a3:2f:6f:02:42:ee:d1:00:3a:22:
cc:d0:65:36:b0:15:19:dd:30:47:d8:95:f1:4f:c2:65:67:0d:
d2:ba:ef:40:2d:a1:0a:4a:17:6d:42:57:c9:0f:b3:34:89:aa:
17:ff:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:25:09 2024 by rpki-client on console-fra.rpki-client.org