Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/JT5nYGykUQ24zAs75PBCm6hvjMI.roa
File: JT5nYGykUQ24zAs75PBCm6hvjMI.roa (raw, json)
Hash identifier: L/SGQx0E6hjlNQpLGW6pGHpx3Y7VaSUiiEgz416DWqE=
Subject key identifier: 25:3E:67:60:6C:A4:51:0D:B8:CC:0B:3B:E4:F0:42:9B:A8:6F:8C:C2
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 018CC49237C4A8A41AB2550DB06D4E4EE362
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/JT5nYGykUQ24zAs75PBCm6hvjMI.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56696
IP address blocks: 77.246.48.0/21 maxlen: 24
217.15.117.0/24 maxlen: 24
217.15.118.0/23 maxlen: 24
217.15.120.0/22 maxlen: 24
217.74.235.0/24 maxlen: 24
217.74.238.0/23 maxlen: 24
217.74.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:37:c4:a8:a4:1a:b2:55:0d:b0:6d:4e:4e:e3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=253e67606ca4510db8cc0b3be4f0429ba86f8cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:8b:f5:a6:3e:10:49:d5:de:96:ee:0b:2b:
f1:b5:34:be:08:72:32:7a:31:4c:31:bb:5f:6e:ec:
88:46:d1:2d:4b:e3:b7:9b:d2:1a:94:05:fc:c9:35:
7b:fd:70:f3:23:01:6f:93:9d:1d:8b:94:68:28:c5:
62:5d:53:60:9b:d2:62:93:65:49:1e:c2:43:26:da:
08:67:a2:e2:0b:21:80:e0:2f:7e:08:13:53:24:4b:
3e:07:ba:81:e2:40:ad:68:44:e1:10:3f:52:1b:c4:
8d:58:ad:9b:36:ad:e6:3e:27:c6:a5:47:f6:ef:f4:
a3:26:6f:70:2c:ee:a6:c8:ec:ed:60:56:36:96:d2:
22:d9:ea:6c:49:75:7f:92:4c:b6:21:57:85:74:c3:
1e:2a:4a:fa:21:30:a1:b2:f3:77:a5:72:d3:5d:ed:
b0:fb:6f:11:0b:c6:9b:6d:d0:48:73:ee:41:68:17:
c0:b5:0d:63:02:6c:2a:0e:ed:60:0d:76:43:c3:d3:
12:fd:2f:b6:93:a1:2c:3a:6a:4b:ae:08:ed:4d:eb:
e2:ec:1f:90:7a:8a:69:d1:77:a8:fa:b1:0c:f1:48:
1e:e8:e3:73:8e:92:b3:f6:37:87:30:c5:06:3d:f5:
6c:7f:5f:8a:a6:b9:18:c7:11:6a:de:a9:c2:ad:01:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:67:60:6C:A4:51:0D:B8:CC:0B:3B:E4:F0:42:9B:A8:6F:8C:C2
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/JT5nYGykUQ24zAs75PBCm6hvjMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.48.0/21
217.15.117.0-217.15.123.255
217.74.235.0/24
217.74.237.0-217.74.239.255
Signature Algorithm: sha256WithRSAEncryption
8e:f1:84:69:7c:69:79:d6:a9:70:b5:93:19:15:e2:97:a4:fa:
27:57:dc:7c:7c:67:c7:cf:1a:78:d2:d2:a7:c9:f2:41:9c:d6:
5b:d2:57:9d:18:a9:a4:6c:ba:bf:b4:ba:e2:60:29:69:5d:ef:
e8:22:17:dc:e8:e1:70:6f:03:b1:fc:b1:03:2f:7a:27:f8:66:
31:94:9e:bf:90:c2:9f:2b:b3:64:41:4c:01:90:13:d3:b1:fc:
75:6e:e0:c2:93:2d:cf:3d:1a:e6:2f:9b:1b:97:4e:89:af:d8:
c3:7d:8b:88:72:e6:d8:31:39:1c:52:08:fd:a4:da:31:92:bc:
bc:10:35:c1:4c:d6:d7:35:c6:0c:5f:06:17:28:1c:e6:b8:33:
33:ec:81:49:1c:c1:dd:f9:3f:8d:a2:80:29:a9:73:01:b5:43:
9f:5f:7d:82:3e:45:16:a4:32:d2:d1:31:00:bc:88:8f:d3:b7:
c1:4b:0e:ee:9f:ac:92:c7:ca:7f:f5:77:a9:a8:5a:c5:c1:91:
af:0f:e6:d3:a0:4f:db:73:45:b1:0c:0c:43:2d:02:62:63:d1:
f7:bf:a8:c1:46:9c:9d:a2:96:2d:9f:01:79:a3:38:5a:78:06:
9c:dd:93:85:7b:56:d3:79:89:3e:26:af:e6:56:12:f0:a1:ab:
03:bd:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:08:49 2024 by rpki-client on console-ams.rpki-client.org