Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/JPADrC7Y6Jxr3EOms000peLIR70.roa
File: JPADrC7Y6Jxr3EOms000peLIR70.roa (raw, json)
Hash identifier: QqxDv0v13YU3Dy+Xuq6GmUB48lTvlEldUefBAEIfQDw=
Subject key identifier: 24:F0:03:AC:2E:D8:E8:9C:6B:DC:43:A6:B3:4D:34:A5:E2:C8:47:BD
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 018F1A37AAC7E162D2A6C71FBB528C6695F3
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/JPADrC7Y6Jxr3EOms000peLIR70.roa
Signing time: Fri 26 Apr 2024 11:43:26 +0000
ROA not before: Fri 26 Apr 2024 11:43:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59869
IP address blocks: 45.84.132.0/22 maxlen: 22
81.22.176.0/20 maxlen: 20
178.22.224.0/21 maxlen: 21
2a07:ed80::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:37:aa:c7:e1:62:d2:a6:c7:1f:bb:52:8c:66:95:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Apr 26 11:43:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24f003ac2ed8e89c6bdc43a6b34d34a5e2c847bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:9d:e9:7f:18:75:8c:78:4a:1a:f5:86:f8:
cc:41:83:6e:b8:45:b0:6a:bc:e0:83:ed:df:f4:88:
0d:34:47:32:14:fd:02:99:e1:a4:b6:b1:36:9f:bb:
ed:bb:79:a5:13:28:b9:3b:7a:66:32:cb:ce:b2:1a:
0b:f9:a5:4d:98:17:a5:6a:f1:b2:94:c2:07:5b:53:
55:b8:84:e7:36:7a:82:0b:cb:3b:3a:e0:5e:cb:24:
26:e7:e4:3c:a6:b3:a7:71:4f:bb:2a:43:2c:55:53:
e8:c8:0f:80:e9:e7:06:95:5d:83:a5:1f:6f:72:03:
ea:5b:5e:7b:9c:68:2c:7f:38:c5:ed:b3:f1:68:36:
c5:84:94:bf:15:8d:65:4c:d8:25:fc:3b:b5:cd:5c:
28:5a:9f:ff:98:ac:bd:29:f7:65:7b:74:94:88:1f:
53:ee:e7:00:ed:31:56:e6:74:83:1f:9c:f1:5c:ea:
89:fa:1b:ea:a8:d4:14:78:6b:e9:6a:1d:1d:44:03:
50:21:31:25:42:95:a6:a4:e6:7d:a4:14:8d:d1:e2:
9b:bc:54:81:f4:db:36:ea:7d:d8:c1:8b:be:a4:5a:
ad:09:26:15:47:3a:31:08:66:a9:b2:8e:f5:dd:12:
26:23:d5:cf:15:a9:f2:09:f4:b6:92:7f:e7:e6:77:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:03:AC:2E:D8:E8:9C:6B:DC:43:A6:B3:4D:34:A5:E2:C8:47:BD
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/JPADrC7Y6Jxr3EOms000peLIR70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.132.0/22
81.22.176.0/20
178.22.224.0/21
IPv6:
2a07:ed80::/32
Signature Algorithm: sha256WithRSAEncryption
42:c3:83:76:d3:1b:8b:31:5e:20:09:28:bf:2e:64:d9:09:8f:
34:a8:c8:97:a4:ab:86:03:28:e6:65:b3:69:6f:4e:33:38:a6:
77:1e:75:f6:61:7d:ca:19:f9:2c:06:f6:21:40:83:84:6b:03:
23:c1:0b:35:3b:8e:1d:00:b3:04:d6:c0:b2:ba:57:74:a6:5f:
30:57:e0:0a:ee:c8:4c:fe:8b:6d:96:09:ce:c8:27:e4:42:a7:
9b:16:35:72:10:ca:f1:95:a9:7e:d9:ac:b5:17:bf:91:0a:67:
6e:7c:f3:0c:a0:e9:e3:02:2f:f6:54:13:c6:95:97:8a:9f:71:
62:59:f1:22:c2:ba:4c:81:ed:d7:9e:fc:c4:de:77:0b:0b:26:
40:27:9a:25:99:23:63:67:7e:df:0c:57:32:de:cb:8f:a5:46:
7a:6b:a5:bd:a1:42:c4:08:27:7c:74:47:14:c7:68:e8:1e:4a:
88:7e:6f:4c:a9:9f:4c:98:7c:bb:cf:c1:27:db:2a:ba:29:ca:
0e:19:9c:21:59:12:e0:a2:3f:2e:db:41:67:8b:47:df:63:22:
3d:28:ee:1f:1a:1c:f5:f5:b9:b9:b6:b2:dc:7d:e8:b7:07:b9:
b6:56:e8:ec:45:81:bc:26:b2:38:61:76:08:61:92:be:08:70:
d6:11:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:21:08 2024 by rpki-client on console-ams.rpki-client.org