Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JvlQDFILk-4d-GmRrVF6nvoLsmo.roa
File: JvlQDFILk-4d-GmRrVF6nvoLsmo.roa (raw, json)
Hash identifier: t9qHXPAY1ZJWfZbRTdMHKfMNZslRNMHpBrXGXIP9rBI=
Subject key identifier: 26:F9:50:0C:52:0B:93:EE:1D:F8:69:91:AD:51:7A:9E:FA:0B:B2:6A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500C05776DCF95B9A0E8F79DA119E73
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JvlQDFILk-4d-GmRrVF6nvoLsmo.roa
Signing time: Mon 01 Jan 2024 12:30:09 +0000
ROA not before: Mon 01 Jan 2024 12:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197549
IP address blocks: 217.69.175.0/24 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 32
89.144.0.0/18 maxlen: 32
89.106.64.0/19 maxlen: 32
94.249.218.0/23 maxlen: 32
94.249.222.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c0:57:76:dc:f9:5b:9a:0e:8f:79:da:11:9e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26f9500c520b93ee1df86991ad517a9efa0bb26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:f5:c6:04:21:eb:d1:4f:96:3b:3b:b1:66:
14:df:81:9a:15:fc:47:49:52:85:e1:66:11:d5:56:
43:f7:29:45:5b:45:43:6a:76:03:70:41:79:87:07:
90:c9:96:7c:6e:32:59:02:1a:33:ce:06:1e:36:d8:
9b:8c:a0:50:e4:b2:d2:5d:cd:c9:3a:d0:89:c0:66:
77:38:1b:38:31:42:8e:84:7b:17:24:f2:c4:28:d2:
de:8e:1b:05:6e:4f:e3:3e:f9:b7:c0:1f:5e:84:0f:
5b:aa:72:4e:8e:05:36:62:aa:00:4d:34:bc:1a:f3:
f2:82:27:ba:30:98:15:f0:ae:91:8f:55:6b:a9:c8:
e4:fa:7a:7b:9e:1f:66:f1:32:22:ae:77:5a:78:15:
fa:6a:b6:7e:4b:8c:b6:82:09:05:9e:f9:ab:9d:bc:
86:94:f0:b2:8d:e8:1b:58:7e:0e:31:69:70:83:5d:
fe:aa:41:ba:bb:ed:6d:a8:aa:61:17:f1:9f:0e:93:
6d:11:55:95:23:03:f2:6f:5b:c9:6d:f7:2f:82:82:
51:a4:d1:17:3c:f4:ca:f0:22:79:38:69:d3:38:9a:
9e:a4:7b:e7:b8:45:c8:a1:82:36:75:5d:11:14:a3:
42:98:8b:29:f2:5f:f1:50:33:51:ac:9b:ab:d2:7b:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:50:0C:52:0B:93:EE:1D:F8:69:91:AD:51:7A:9E:FA:0B:B2:6A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JvlQDFILk-4d-GmRrVF6nvoLsmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.0.0/19
89.106.64.0/19
89.144.0.0/18
94.249.218.0/23
94.249.222.0/23
217.69.175.0/24
Signature Algorithm: sha256WithRSAEncryption
23:15:54:ec:9f:f1:61:59:07:e0:15:5d:3d:9f:2f:24:49:97:
f4:a7:1d:2f:69:6d:7b:02:10:4c:d8:47:e0:56:8b:8d:db:d3:
47:74:9c:09:12:8f:8a:79:fa:29:35:61:40:4b:a2:1e:6b:f4:
dc:44:e2:a2:d3:9b:91:6c:7f:23:9c:2f:c3:87:18:04:4b:7c:
f9:72:85:37:58:86:81:63:1d:3d:18:9e:9f:4a:93:90:64:05:
73:f0:55:d8:75:29:ef:6f:dd:b7:86:64:34:00:45:86:8b:64:
da:a3:df:6f:d7:e9:cc:21:81:1e:ce:85:54:d7:4e:a5:5b:42:
7a:a9:3b:b2:16:0b:21:2d:86:59:c4:9b:57:8a:95:1b:d5:89:
a8:1e:52:2c:9c:9b:d1:2d:a8:79:f6:7c:ed:41:79:a1:66:e9:
0b:f9:95:60:5b:a0:47:56:b8:e0:60:34:cf:67:d8:c8:c0:b3:
42:d6:d6:10:7b:c1:48:fb:6a:40:fb:e7:98:b6:12:49:ad:07:
64:2c:49:82:f3:4e:f9:5a:41:7f:82:29:dc:a1:44:c3:02:28:
5f:0d:b5:0d:b4:34:e7:09:8a:0d:e8:4a:d2:30:1c:5d:bb:36:
32:cd:66:d0:d3:f8:a4:2e:e1:28:7c:8a:a7:46:6a:3b:2d:73:
31:d8:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 12:10:57 2024 by rpki-client on console-ams.rpki-client.org