Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/J2Vg7W797JEzbUaA-6FXcPLvnuA.roa
File: J2Vg7W797JEzbUaA-6FXcPLvnuA.roa (raw, json)
Hash identifier: 5TYvS1Q+j2G6yrp5hRTPPQZumYgERHqGXl7a/4sCwLM=
Subject key identifier: 27:65:60:ED:6E:FD:EC:91:33:6D:46:80:FB:A1:57:70:F2:EF:9E:E0
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 018D3F3BABA2F91182F803F41C210B601EF1
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/J2Vg7W797JEzbUaA-6FXcPLvnuA.roa
Signing time: Thu 25 Jan 2024 06:08:11 +0000
ROA not before: Thu 25 Jan 2024 06:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60764
IP address blocks: 86.62.12.0/24 maxlen: 32
86.62.13.0/24 maxlen: 32
86.62.14.0/24 maxlen: 32
86.62.15.0/24 maxlen: 32
185.174.192.0/24 maxlen: 32
185.174.193.0/24 maxlen: 32
185.174.194.0/24 maxlen: 32
185.174.195.0/24 maxlen: 32
2a09:3300::/32 maxlen: 32
2a0b:b500::/30 maxlen: 30
2a0b:b500::/31 maxlen: 31
2a0b:b500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:3b:ab:a2:f9:11:82:f8:03:f4:1c:21:0b:60:1e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Jan 25 06:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=276560ed6efdec91336d4680fba15770f2ef9ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e5:91:16:70:4e:b9:41:24:c5:2a:6d:1e:f9:
6d:05:c3:bc:ce:52:c5:1d:da:44:36:2f:3a:ef:19:
cf:46:c3:a0:02:88:4d:86:f4:a6:69:c1:a7:04:ff:
03:5f:25:69:d2:f9:01:4d:6e:67:a4:40:ec:8e:0c:
0f:5d:9d:5e:4a:4c:26:14:04:90:ae:09:e9:72:bb:
b4:ab:9d:f0:90:c8:db:3b:bb:16:c0:c4:21:d7:fd:
e8:f9:12:41:87:5c:71:fe:36:01:a8:31:13:85:54:
3b:eb:52:71:5d:b4:95:9f:ca:ec:32:58:48:6f:db:
db:98:5e:95:09:26:bc:99:49:28:73:78:e5:22:ef:
d1:80:76:ea:38:9c:7d:b7:c1:92:b0:d6:a1:d4:f7:
4d:90:fb:1b:c8:8e:b8:66:f5:de:62:3d:dd:03:d9:
69:bf:c8:cd:e4:42:ef:88:0e:96:34:1e:ae:b3:e1:
51:fc:e6:4b:98:ea:3c:e7:ce:26:70:2e:a5:6d:bc:
b0:0a:5e:bc:e3:b9:f8:68:0e:41:b9:c2:59:d8:23:
49:7b:8c:6f:0b:e0:d1:02:1d:c3:e8:93:b5:c0:87:
1c:1a:e6:d0:ba:cd:59:69:7d:48:7d:15:1f:bd:d0:
1f:2d:65:f2:1b:c4:69:f8:a2:a0:89:df:4f:f4:94:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:65:60:ED:6E:FD:EC:91:33:6D:46:80:FB:A1:57:70:F2:EF:9E:E0
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/J2Vg7W797JEzbUaA-6FXcPLvnuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.12.0/22
185.174.192.0/22
IPv6:
2a09:3300::/32
2a0b:b500::/30
Signature Algorithm: sha256WithRSAEncryption
52:38:e7:54:a6:14:7f:f4:e4:c4:6c:57:1d:b5:90:71:7c:4d:
b6:aa:13:38:09:3d:ed:74:64:a2:7a:e2:a6:ac:1f:f7:ca:06:
88:0e:11:1c:52:0d:37:bf:76:bf:8e:98:f7:9c:82:f0:9e:56:
2b:5d:51:fc:d1:92:96:7a:78:2b:a4:c0:52:3c:8b:64:c8:8b:
21:f7:00:c4:f2:07:88:9d:09:87:cb:4c:3b:e0:76:e4:72:d2:
db:bc:9d:42:8a:93:9a:d2:13:9c:b0:c9:bd:ae:3e:d9:21:5a:
42:d1:66:0c:4f:44:92:1d:0b:4f:73:24:eb:ef:57:18:27:ce:
b6:8b:72:6c:e4:d6:0b:f3:e9:1f:44:21:dd:d2:db:12:d6:fb:
69:c3:e3:bb:8d:33:0a:fa:79:49:12:2f:33:a9:f8:53:29:24:
86:e8:89:39:6d:9c:2a:74:90:d0:43:ea:bf:81:42:f5:9e:32:
67:c1:6c:c4:19:e9:71:47:e4:08:1c:64:5f:c8:6e:b8:22:5b:
e0:38:b1:9c:0e:6b:b3:2f:23:08:8e:f5:45:49:d7:c5:40:36:
c3:5b:d2:32:11:93:8f:eb:37:b7:fa:84:0c:87:de:e2:10:45:
c1:d8:01:a7:77:db:2e:33:3e:1b:4f:5b:d3:33:29:d1:eb:46:
33:e2:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:14:45 2024 by rpki-client on console-ams.rpki-client.org