Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/JdmjzqSa6s_LVQmtMiPpiR4HvPA.roa
File: JdmjzqSa6s_LVQmtMiPpiR4HvPA.roa (raw, json)
Hash identifier: f/tEDEx/MRPdglmTAN6lAtoLW+Mrxn2/TDTqZ3gxYFY=
Subject key identifier: 25:D9:A3:CE:A4:9A:EA:CF:CB:55:09:AD:32:23:E9:89:1E:07:BC:F0
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 018CF3B083C913F7DCFD83C378D136D56C4D
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/JdmjzqSa6s_LVQmtMiPpiR4HvPA.roa
Signing time: Wed 10 Jan 2024 14:04:40 +0000
ROA not before: Wed 10 Jan 2024 14:04:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8769
IP address blocks: 185.121.28.0/22 maxlen: 22
185.40.184.0/22 maxlen: 22
185.118.118.0/24 maxlen: 24
185.254.132.0/22 maxlen: 22
2a06:9c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:b0:83:c9:13:f7:dc:fd:83:c3:78:d1:36:d5:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jan 10 14:04:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d9a3cea49aeacfcb5509ad3223e9891e07bcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:b8:d6:01:8e:d4:89:b2:68:0f:5b:e6:9d:
6f:59:c5:9d:18:53:e3:bd:5b:c4:af:2e:a6:78:ec:
b7:89:fa:76:3c:b1:f1:cd:da:3d:b3:49:3d:6a:be:
f9:c6:56:91:71:74:70:a7:ca:50:3d:af:5c:16:ca:
99:a4:64:01:1d:d3:86:24:b1:48:2f:a6:e5:ce:02:
cf:8f:b5:b8:03:ce:b1:22:59:0a:c0:40:2f:ac:84:
9b:d6:41:4a:32:d8:fc:df:b1:87:e5:ef:53:28:02:
8b:16:0e:01:07:89:be:f8:8f:48:b7:0e:06:52:1b:
97:03:cb:f7:2a:0b:f9:91:ae:52:86:e9:3c:5f:9c:
22:04:01:19:74:e2:47:4f:a2:7d:d6:08:a4:23:f6:
99:41:a9:e3:b6:84:3c:81:96:63:3e:b1:b5:91:8b:
ea:e1:41:b9:5b:16:ce:30:62:e3:7e:9a:e2:22:c9:
e7:64:70:ab:14:4a:e9:e5:42:00:03:11:06:9c:fd:
68:cc:db:aa:11:05:3e:bb:e6:c3:3e:18:bf:87:bd:
57:9f:e9:a1:5c:d8:bd:cb:3e:fa:5d:b5:23:24:f0:
46:a4:46:0b:3c:a4:39:d0:5b:85:20:f4:e5:a2:ec:
a4:0e:e4:61:bb:b0:3d:1b:fc:7a:d4:5d:88:8d:ce:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:A3:CE:A4:9A:EA:CF:CB:55:09:AD:32:23:E9:89:1E:07:BC:F0
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/JdmjzqSa6s_LVQmtMiPpiR4HvPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.184.0/22
185.118.118.0/24
185.121.28.0/22
185.254.132.0/22
IPv6:
2a06:9c40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:cb:b1:69:82:1a:ea:ad:d2:7d:4c:b5:32:d8:78:61:8a:fa:
74:b6:8a:88:55:db:71:7b:a8:07:25:ba:c1:95:d5:ad:5c:41:
2d:44:85:53:fd:f1:a1:a0:7c:fe:7a:bd:30:a8:29:ff:7b:db:
34:e0:2a:66:cc:af:54:6e:8f:ef:81:ef:6a:dd:4b:d0:73:3b:
6e:d6:76:ff:ed:3d:47:c1:50:a7:c9:14:3f:83:7b:b7:80:50:
d4:cb:05:4f:9e:cb:b8:c5:7c:19:d3:a8:ea:99:75:9f:52:3b:
79:1e:a9:e4:b1:bb:6d:3e:1c:43:7d:54:a8:fb:1c:1f:2a:74:
78:90:4a:75:74:74:d1:e9:93:68:92:a8:cd:31:45:ea:39:46:
bd:1a:3d:fe:34:58:ec:f9:3c:53:4c:9e:f1:fb:2e:52:e6:aa:
27:ef:bf:22:d7:11:ba:09:0f:15:ec:87:20:c1:3d:c1:26:e6:
21:14:dd:56:14:3a:75:32:32:32:1d:aa:31:d2:0b:d1:23:63:
ff:e5:04:8d:c5:56:7e:81:f3:c9:81:60:f6:59:6f:b3:52:be:
81:53:58:6f:37:7f:2e:1c:b7:f7:08:ed:5c:fb:74:52:61:27:
c1:67:35:72:08:df:42:e1:70:02:0a:23:92:b6:8d:f5:42:09:
8b:d4:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:39:57 2024 by rpki-client on console-ams.rpki-client.org