Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/jmjTSzl-e7Xb3CuSN1FHCKU9pkI.roa
File: jmjTSzl-e7Xb3CuSN1FHCKU9pkI.roa (raw, json)
Hash identifier: y6WcG/y2iu5DGpt9mZnYtfuka82pWFl4gPsyaq3sXMk=
Subject key identifier: 8E:68:D3:4B:39:7E:7B:B5:DB:DC:2B:92:37:51:47:08:A5:3D:A6:42
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 018CC7275A6A6EB3B91A66EE75B8CA4D0627
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/jmjTSzl-e7Xb3CuSN1FHCKU9pkI.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197113
IP address blocks: 185.242.152.0/23 maxlen: 24
185.242.154.0/23 maxlen: 24
46.174.224.0/21 maxlen: 21
2a0c:ce80::/44 maxlen: 64
2a0c:ce80:10::/44 maxlen: 44
2a0c:ce80:20::/44 maxlen: 44
2a0c:ce80:30::/44 maxlen: 44
2a0c:ce80:40::/44 maxlen: 44
2a0c:ce80:50::/44 maxlen: 44
2a0c:ce80:60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5a:6a:6e:b3:b9:1a:66:ee:75:b8:ca:4d:06:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e68d34b397e7bb5dbdc2b9237514708a53da642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:60:55:87:5b:72:82:40:e9:7c:da:ac:7d:
db:15:c4:90:a6:52:44:f1:4f:e5:61:17:da:e1:f9:
0a:19:64:23:b5:52:dc:0a:ed:e5:d8:15:ed:df:b3:
97:05:4f:73:03:f5:16:c3:a8:17:f9:4b:5e:f2:85:
db:1d:2d:f6:cc:a2:7e:9a:a5:67:04:b7:f4:99:c3:
77:bf:b6:76:42:53:41:94:e4:7e:1e:35:34:56:92:
0f:a5:fd:63:d5:01:33:79:5d:77:72:94:47:0d:6b:
e8:b5:c9:e2:b8:f0:53:2b:24:d7:9f:2b:c5:0f:15:
e1:8f:9a:c9:e2:5f:90:5b:34:88:b3:f1:78:7f:43:
8b:78:2f:92:c8:e8:f5:c1:33:e0:da:37:e1:2b:00:
40:e0:43:29:0c:14:ab:23:de:0a:5e:c1:9f:37:4d:
0d:bc:e1:0f:7c:7f:02:35:fc:4c:25:58:be:c7:cc:
e0:69:e8:37:c4:7b:92:7c:3f:35:15:56:3b:7f:d3:
1b:50:00:c2:94:2c:2e:dc:42:9b:4e:16:3f:15:7f:
b6:95:17:fe:44:cc:43:d9:da:81:05:ed:d4:59:e1:
e1:6e:42:57:57:46:15:54:27:f2:e0:79:a7:f5:b4:
d8:32:f3:e3:9e:38:de:bd:4a:ab:6b:90:63:d8:67:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:D3:4B:39:7E:7B:B5:DB:DC:2B:92:37:51:47:08:A5:3D:A6:42
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/jmjTSzl-e7Xb3CuSN1FHCKU9pkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.224.0/21
185.242.152.0/22
IPv6:
2a0c:ce80::-2a0c:ce80:6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:01:84:ab:32:58:61:2c:81:e2:98:25:c3:e6:98:3e:6f:80:
6b:70:b2:fc:9b:93:13:35:bc:10:bc:3c:da:e3:6c:5a:bf:88:
e8:5b:ef:c5:5e:aa:62:39:3f:ad:25:1c:fb:b2:db:60:8a:95:
3c:5b:5a:5b:93:92:ba:93:a1:63:09:75:42:3b:51:22:32:26:
31:87:e0:fc:2f:9c:10:0d:a9:84:6d:8e:b1:87:3a:5d:ff:d4:
0a:c4:d1:60:2f:30:25:52:76:ba:0a:fa:eb:24:33:29:b0:28:
59:7a:b4:f5:73:db:8d:d4:24:f4:5e:d4:88:ee:8f:be:ab:66:
95:6e:67:24:67:46:05:ba:b9:3c:7c:13:83:27:6b:91:67:07:
d0:69:3b:99:36:d5:f0:1f:dc:78:47:78:08:41:dd:36:3c:e8:
6a:b6:f5:f2:a7:90:40:e6:d7:a0:02:0b:92:5d:e9:48:1f:fb:
6a:16:84:39:92:69:83:7e:09:4b:c6:0e:8e:df:db:2f:44:88:
ac:70:3d:55:74:1b:43:f4:f4:4d:14:6b:b6:66:78:26:bd:a8:
dd:02:66:4a:68:51:42:e4:56:1e:40:ad:45:d8:91:08:c5:21:
fe:c9:5c:ec:be:a4:d9:64:c7:a7:6d:e6:58:fa:91:16:d3:24:
ba:7e:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:21:47 2024 by rpki-client on console-fra.rpki-client.org