Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/Jm4aMjLfhBNT4s5TzDzNVMu3VDs.roa
File: Jm4aMjLfhBNT4s5TzDzNVMu3VDs.roa (raw, json)
Hash identifier: 459NI5gtBdNj/nQkMWu3Zi163iy7X76KvXhL8h55Cyo=
Subject key identifier: 26:6E:1A:32:32:DF:84:13:53:E2:CE:53:CC:3C:CD:54:CB:B7:54:3B
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 019039A776175249FE8EC41E46CD3A62AC76
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/Jm4aMjLfhBNT4s5TzDzNVMu3VDs.roa
Signing time: Fri 21 Jun 2024 07:16:34 +0000
ROA not before: Fri 21 Jun 2024 07:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35332
IP address blocks: 37.235.112.0/21 maxlen: 24
45.89.144.0/22 maxlen: 24
45.116.184.0/22 maxlen: 24
77.242.112.0/20 maxlen: 24
87.236.0.0/21 maxlen: 24
139.28.200.0/22 maxlen: 24
185.113.212.0/22 maxlen: 24
185.151.96.0/22 maxlen: 24
188.92.56.0/21 maxlen: 24
194.5.181.0/24 maxlen: 24
194.156.2.0/24 maxlen: 24
208.88.128.0/22 maxlen: 24
2a00:a000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:a7:76:17:52:49:fe:8e:c4:1e:46:cd:3a:62:ac:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Jun 21 07:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=266e1a3232df841353e2ce53cc3ccd54cbb7543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:36:17:9f:58:81:09:45:f6:80:ee:ad:94:
61:dc:84:0c:6b:1c:b1:a0:fe:5b:68:de:16:41:49:
5c:cb:f3:bf:41:92:c2:d3:d3:b7:1b:10:46:96:4f:
7a:3c:ea:7d:a1:d6:4a:cc:ea:65:9f:54:33:fe:f4:
46:4d:3d:ab:a3:b4:a2:e2:c5:a5:43:dd:10:ef:32:
4c:80:67:2b:76:eb:57:6c:64:8d:42:4c:72:96:3b:
03:ee:da:41:90:76:14:80:e9:71:09:57:aa:fa:81:
7f:5c:15:b1:73:77:90:26:a9:ad:fa:d6:e4:07:11:
14:3c:12:f5:25:3e:6b:08:53:83:ef:88:5f:81:56:
a1:42:74:d2:46:d2:08:9a:df:f1:d3:c4:56:42:be:
6b:4a:0e:8e:09:16:09:b8:94:46:fc:9d:a4:26:89:
1a:46:36:fa:fa:cd:41:17:bb:4b:88:3a:fe:53:7d:
37:ba:37:cc:0b:08:18:a8:4b:31:60:35:c6:67:7b:
dd:7c:79:5a:93:b0:43:4b:2d:0c:af:f4:17:16:d2:
65:bc:8e:75:6e:0c:e2:0b:26:37:96:4a:37:c8:4e:
2e:6e:db:b3:d9:aa:63:3d:76:63:7a:8e:84:5c:21:
45:15:12:0a:db:40:38:a5:0f:ad:18:0c:74:80:16:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6E:1A:32:32:DF:84:13:53:E2:CE:53:CC:3C:CD:54:CB:B7:54:3B
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/Jm4aMjLfhBNT4s5TzDzNVMu3VDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.112.0/21
45.89.144.0/22
45.116.184.0/22
77.242.112.0/20
87.236.0.0/21
139.28.200.0/22
185.113.212.0/22
185.151.96.0/22
188.92.56.0/21
194.5.181.0/24
194.156.2.0/24
208.88.128.0/22
IPv6:
2a00:a000::/32
Signature Algorithm: sha256WithRSAEncryption
55:75:7d:85:14:3b:68:12:8f:eb:19:0d:98:a0:3b:4e:2f:19:
ef:d3:e1:34:0e:bd:85:19:56:61:aa:fe:ed:5c:44:9b:f7:c1:
07:c0:f5:f3:65:52:b6:7e:c8:4f:7c:5e:c0:49:74:12:24:cd:
e0:d5:2d:26:fe:46:cf:17:01:4e:f6:fd:1f:41:8a:ed:09:1a:
2c:4a:bd:ca:f8:45:0e:fa:f3:bb:30:74:6b:a0:4f:20:07:3d:
5f:01:b1:5c:27:12:18:49:f4:04:19:68:ad:08:c4:6a:4b:62:
a5:ea:5b:e9:ff:01:71:9d:d6:19:f6:86:35:3c:67:c5:68:0c:
6d:eb:07:5d:3d:e3:64:9d:f0:8f:4f:2e:cd:83:3f:c6:86:f4:
1d:eb:84:41:d9:89:de:f4:d5:0d:b1:1c:c1:3d:95:65:fd:98:
50:9f:d6:3a:23:a3:47:bf:5b:ab:2a:e0:42:0a:d2:c2:0f:17:
f0:97:50:85:92:63:39:1e:87:d2:9c:9d:4f:20:91:f7:6c:d2:
30:71:1a:91:c8:55:7f:93:42:5b:e2:ee:20:53:f8:e7:b6:80:
63:50:4e:be:88:63:0d:ba:9f:6a:e0:1d:f8:9b:54:20:68:3a:
25:e0:db:95:cb:ae:0a:1e:97:f5:9e:12:2d:e2:52:e9:86:79:
46:5d:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:38:27 2024 by rpki-client on console-ams.rpki-client.org