Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JeDDSNjqj1WefQTX5TgZq5lmcDw.roa
File: JeDDSNjqj1WefQTX5TgZq5lmcDw.roa (raw, json)
Hash identifier: TfXqm1f0e43lVwoRS4r1FBNLXMJgy+iGtoTeg5MWyzc=
Subject key identifier: 25:E0:C3:48:D8:EA:8F:55:9E:7D:04:D7:E5:38:19:AB:99:66:70:3C
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018CC6B8C876049EA9C702B68DDEEB6439D0
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JeDDSNjqj1WefQTX5TgZq5lmcDw.roa
Signing time: Mon 01 Jan 2024 20:30:47 +0000
ROA not before: Mon 01 Jan 2024 20:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47952
IP address blocks: 194.56.186.0/24 maxlen: 24
194.56.185.0/24 maxlen: 24
194.56.184.0/24 maxlen: 24
194.56.187.0/24 maxlen: 24
212.103.38.0/24 maxlen: 24
212.103.37.0/24 maxlen: 24
212.103.36.0/24 maxlen: 24
212.103.39.0/24 maxlen: 24
193.138.172.0/24 maxlen: 24
193.138.175.0/24 maxlen: 24
193.138.174.0/24 maxlen: 24
193.138.173.0/24 maxlen: 24
81.90.177.0/24 maxlen: 24
81.90.176.0/24 maxlen: 24
81.90.179.0/24 maxlen: 24
81.90.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c8:76:04:9e:a9:c7:02:b6:8d:de:eb:64:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 20:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25e0c348d8ea8f559e7d04d7e53819ab9966703c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:b5:d3:98:a5:0c:38:f1:87:45:23:4a:c5:
06:66:5a:cd:4e:56:47:61:63:74:bd:a9:41:a7:35:
d5:99:2e:fc:8f:29:bd:cc:0e:e4:c8:43:8a:87:cb:
fa:7f:44:bc:58:cd:8d:09:f4:fe:2a:87:8e:7e:62:
e5:7a:09:6a:c6:11:cc:68:c5:ec:ec:4a:1c:07:0e:
39:a3:0f:05:72:c5:80:8c:4b:c4:f3:f9:c2:6c:c9:
6f:1d:5e:e0:b0:b8:e6:78:fd:cd:e7:96:73:80:73:
ed:32:07:d0:53:01:d2:7b:d5:9d:b3:e4:d5:4e:d6:
40:73:b0:f4:37:60:7e:aa:a3:27:55:d3:e7:81:a1:
34:76:c5:90:72:9a:5d:ea:34:4e:3a:48:a9:cb:50:
73:81:05:ce:28:f8:d1:0b:52:c7:bd:70:9d:f1:3f:
c3:c5:84:41:39:fb:ca:63:c3:4b:7a:a3:f3:96:10:
da:59:e2:d1:6a:7d:99:5b:bf:28:4a:d4:10:12:30:
78:cd:56:31:9d:4b:00:49:bc:2a:e3:dd:9f:f2:bb:
30:fc:e0:52:99:ef:35:0b:ea:40:ed:df:00:b7:ae:
4b:c0:ee:0d:c9:8c:80:b6:2c:ff:04:9a:9b:d8:73:
45:4b:0d:6c:16:14:7a:90:4f:d0:2c:43:0a:6e:98:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E0:C3:48:D8:EA:8F:55:9E:7D:04:D7:E5:38:19:AB:99:66:70:3C
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JeDDSNjqj1WefQTX5TgZq5lmcDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.176.0/22
193.138.172.0/22
194.56.184.0/22
212.103.36.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:47:a5:f5:ad:5c:b0:07:49:ba:0f:ea:0d:ae:5d:4c:a0:1a:
7e:0d:e8:7c:2a:3f:49:2b:c3:40:a2:6a:0e:87:35:31:fd:f0:
f5:93:56:f2:e2:4d:61:2f:ca:f3:2e:ea:55:7d:57:64:b6:8c:
d6:e1:2a:31:88:41:ed:fd:1f:04:c3:cb:06:ba:8a:b1:e4:fb:
fb:85:8f:72:c3:eb:d9:59:9d:2a:3f:c7:02:69:a7:7a:b8:bd:
68:80:52:c6:c9:7e:ac:79:b9:51:b3:c9:5b:35:a8:9d:24:bc:
0c:56:92:f7:41:e9:51:05:08:b5:07:c3:59:b2:75:d2:40:57:
23:14:a0:a2:22:e2:f0:71:e5:71:2d:a4:8d:cf:0d:1c:6e:8c:
e5:47:31:b4:42:05:11:0d:c0:da:73:12:b9:61:86:ca:1c:72:
ae:49:d6:89:8b:35:22:af:2d:7e:9e:89:90:23:d6:e4:21:4a:
4a:5c:49:1a:87:29:64:a6:5f:fb:81:48:fe:8e:4e:31:b3:0e:
ca:c4:76:74:3d:4f:1c:e0:d1:8c:58:3f:43:5d:3d:91:ee:d4:
08:bc:83:fb:99:8b:e3:d4:08:25:ad:de:5e:a6:bc:99:84:8e:
f1:c3:34:68:e7:85:19:b1:78:22:db:28:a4:95:53:50:9f:8a:
86:d4:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:45:17 2024 by rpki-client on console-fra.rpki-client.org