Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/_jUVQXsoUneom7r2ZsR7nhlahGw.roa
File: _jUVQXsoUneom7r2ZsR7nhlahGw.roa (raw, json)
Hash identifier: Qj+Crtdho9RWr+bixWlG8GXoh6HJlFC3ozwTQD/i8x4=
Subject key identifier: FE:35:15:41:7B:28:52:77:A8:9B:BA:F6:66:C4:7B:9E:19:5A:84:6C
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 01919C978AB8132AAA28D17821FA060F8A5D
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/_jUVQXsoUneom7r2ZsR7nhlahGw.roa
Signing time: Thu 29 Aug 2024 05:24:22 +0000
ROA not before: Thu 29 Aug 2024 05:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9103
IP address blocks: 212.109.128.0/20 maxlen: 20
2a00:6c40::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:97:8a:b8:13:2a:aa:28:d1:78:21:fa:06:0f:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Aug 29 05:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe3515417b285277a89bbaf666c47b9e195a846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:ee:f1:d0:f5:f3:4e:8c:d8:28:3b:c9:b3:
e4:12:01:11:23:4d:dc:ff:9b:b9:35:9e:5e:9e:3b:
61:da:58:2c:64:8d:3c:db:b9:6b:fc:30:b0:df:bd:
a1:d4:2b:5a:e6:d9:95:1c:3e:5c:0b:8b:2e:75:c2:
2d:d2:b2:17:06:ae:2a:b6:4c:53:33:83:ad:d4:8c:
2f:8b:5d:a8:6d:0a:77:af:7c:a2:35:37:30:cb:8b:
ff:b0:09:8b:9f:77:6b:1c:de:dc:94:3f:13:73:74:
07:01:1b:fe:a7:bc:89:e1:00:26:15:6f:e7:8b:bb:
6d:7b:5a:b2:32:cb:54:84:8d:d5:b1:81:84:07:6c:
85:9b:e1:37:53:b6:4d:75:e8:8b:67:06:b0:3a:ef:
aa:61:9b:67:35:ea:cd:95:b4:97:b8:77:71:c6:0a:
6a:ed:d2:e1:b7:56:71:dd:95:3c:12:c7:f3:bb:73:
80:d5:e4:3d:17:13:1c:83:9d:e0:9c:c4:e6:f5:bf:
32:84:32:1b:7e:a3:21:8a:e4:52:cf:be:f4:53:42:
2d:06:77:ae:82:f8:3a:6c:6f:72:af:2f:f2:5b:24:
92:89:76:b6:a2:c5:26:b5:c5:11:7a:1a:9b:96:b6:
1c:27:15:34:75:06:3e:51:9a:83:8b:c9:e1:74:a2:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:15:41:7B:28:52:77:A8:9B:BA:F6:66:C4:7B:9E:19:5A:84:6C
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/_jUVQXsoUneom7r2ZsR7nhlahGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.128.0/20
IPv6:
2a00:6c40::/33
Signature Algorithm: sha256WithRSAEncryption
03:cb:99:a4:d0:63:14:13:85:81:d5:fe:5b:97:0f:e1:9b:10:
8a:d9:d8:e4:c0:af:ad:15:e5:e2:86:68:3d:85:34:9a:7f:37:
8d:90:88:25:c7:bc:57:94:14:a6:32:44:27:fd:c5:2f:35:7b:
08:7e:e1:ee:1a:61:19:27:58:9d:53:d9:85:47:35:12:7e:96:
4c:4c:a3:fd:c6:3c:69:53:86:89:a4:b4:85:3f:f0:99:93:24:
f2:a2:00:af:ad:e6:3b:e0:f9:68:5e:94:2c:85:7c:8a:ff:b6:
26:66:0b:6f:32:27:90:21:f7:8c:7d:63:8d:f2:3e:44:37:c7:
e7:ee:f9:10:09:c1:45:18:6f:16:e8:f6:e3:57:39:2e:d8:52:
66:6c:c2:6f:66:ee:a1:20:ec:ef:2a:93:77:41:44:9d:e7:7c:
e3:1e:99:98:a6:0f:72:10:42:61:fe:49:db:a3:65:3a:e0:99:
f3:f9:75:46:c4:f6:c0:55:7b:d0:2f:37:0c:c2:8e:a6:36:1e:
07:b8:21:63:8a:81:79:63:be:5b:f3:4c:0b:af:7a:5a:02:54:
4c:dd:cc:0c:3c:aa:cd:93:93:80:b4:5f:6f:8c:88:16:ab:70:
f5:c3:e7:7f:0c:fc:7e:43:89:2c:4f:85:45:ad:3c:a2:0f:a5:
0e:bd:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:01:04 2024 by rpki-client on console-fra.rpki-client.org