Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/J-PuOZqbF3VZgRdHv1mggKN7omk.roa
File: J-PuOZqbF3VZgRdHv1mggKN7omk.roa (raw, json)
Hash identifier: CdufoR+hx5k9KKPby+gHqBryUYdLTaozxaupK50lZlk=
Subject key identifier: 27:E3:EE:39:9A:9B:17:75:59:81:17:47:BF:59:A0:80:A3:7B:A2:69
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 01906E1046224BB4EC6A35DA964E11C216E7
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/J-PuOZqbF3VZgRdHv1mggKN7omk.roa
Signing time: Mon 01 Jul 2024 11:31:18 +0000
ROA not before: Mon 01 Jul 2024 11:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34624
IP address blocks: 31.170.192.0/19 maxlen: 24
46.253.16.0/20 maxlen: 24
86.105.240.0/24 maxlen: 24
86.107.191.0/24 maxlen: 24
89.33.16.0/24 maxlen: 24
89.35.2.0/23 maxlen: 24
89.35.2.0/24 maxlen: 24
89.35.174.0/23 maxlen: 24
89.40.134.0/23 maxlen: 24
89.191.64.0/19 maxlen: 24
93.115.33.0/24 maxlen: 24
193.238.60.0/22 maxlen: 24
2a00:1930::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:10:46:22:4b:b4:ec:6a:35:da:96:4e:11:c2:16:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jul 1 11:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27e3ee399a9b177559811747bf59a080a37ba269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0d:d3:44:bf:ae:e1:28:b3:34:1c:7f:68:ca:
95:a1:61:95:17:07:28:fb:53:73:43:a9:93:9e:e6:
45:58:f1:e7:4e:ad:49:47:47:1a:05:59:ab:30:56:
4c:95:46:16:29:85:7b:cd:20:40:e3:d6:7a:cb:df:
06:3f:6b:03:a8:8c:1b:36:65:3c:96:1e:48:4a:81:
9c:19:2e:77:cd:70:93:72:a6:76:03:bd:55:6a:c2:
2b:f7:62:82:2b:cd:8f:de:ea:9a:6d:1c:fb:47:04:
f3:60:55:08:db:7d:3e:de:60:c8:fb:ae:5b:71:5d:
85:be:36:d9:72:67:f0:36:a2:ef:20:84:50:28:01:
cd:fc:f7:4d:88:78:a7:a7:94:dd:22:c7:37:e8:2e:
c7:30:0a:1a:2b:bc:e8:b7:37:32:05:c3:7f:a1:00:
60:a2:1a:e5:9d:c4:73:a3:00:61:2f:1f:ed:91:9c:
6b:21:ef:31:40:2e:5b:bc:ce:75:ae:7e:ff:6a:39:
65:83:6a:d6:5d:f1:5e:f8:9e:f5:78:53:4a:f4:0b:
f0:76:f1:15:52:3d:12:78:d9:53:28:df:e6:1c:74:
b8:0c:70:65:7d:7a:71:8b:d3:54:b9:4f:40:d7:63:
d3:87:b9:6c:9e:e5:32:58:5b:08:75:f2:b6:26:5f:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:EE:39:9A:9B:17:75:59:81:17:47:BF:59:A0:80:A3:7B:A2:69
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/J-PuOZqbF3VZgRdHv1mggKN7omk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.192.0/19
46.253.16.0/20
86.105.240.0/24
86.107.191.0/24
89.33.16.0/24
89.35.2.0/23
89.35.174.0/23
89.40.134.0/23
89.191.64.0/19
93.115.33.0/24
193.238.60.0/22
IPv6:
2a00:1930::/32
Signature Algorithm: sha256WithRSAEncryption
66:80:76:b1:89:f6:41:6f:66:b7:2a:c2:21:4f:06:9c:08:e4:
fb:00:f4:12:eb:2d:c9:5d:2e:d4:ea:a9:20:4b:40:8d:4e:33:
aa:ad:9d:58:1e:1a:4c:7d:0f:e9:a8:3a:1a:1e:84:ad:a8:d6:
a1:9c:f2:48:d3:3a:c5:02:54:da:9f:ca:07:91:bb:a9:59:ee:
e8:c2:45:87:c7:7e:68:6d:25:31:1f:94:39:e7:18:a5:27:22:
41:56:53:0e:8f:33:00:1d:79:67:3c:b3:07:97:f4:8e:f1:4e:
fa:4e:96:bd:a9:7a:3a:5f:f0:35:48:16:bf:0b:1f:27:95:35:
3d:a3:c6:1f:f7:67:98:88:10:ec:a3:59:e3:9f:39:13:59:55:
72:5b:62:11:fb:a5:eb:c9:8d:8b:b0:f1:50:7f:0d:dd:fe:5e:
7e:53:92:67:9b:2b:ab:ec:63:77:13:76:12:65:eb:51:0e:a0:
49:8d:09:2d:a8:58:bf:b3:00:df:7d:f8:6c:c1:a2:b5:58:ca:
02:58:a1:bf:64:3e:f5:ab:44:5b:b6:51:df:97:4f:f3:b9:96:
9d:b2:25:5b:e6:c6:81:da:71:36:e7:16:ed:ad:3d:d8:4e:52:
3c:8d:8e:d5:ee:b2:61:a1:a3:4d:3a:1f:41:70:66:f1:97:04:
dd:ca:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:43:19 2024 by rpki-client on console-ams.rpki-client.org