Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JUZJrWy2AkRK4oJDuQPkJkUWFnk.roa
File: JUZJrWy2AkRK4oJDuQPkJkUWFnk.roa (raw, json)
Hash identifier: 8wIoCwNDoAJQkEItW/nQo6HUeVzY5tGopo3hvbfx8hY=
Subject key identifier: 25:46:49:AD:6C:B6:02:44:4A:E2:82:43:B9:03:E4:26:45:16:16:79
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AE42338812B3A242726D50AF5740E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JUZJrWy2AkRK4oJDuQPkJkUWFnk.roa
Signing time: Mon 01 Jan 2024 18:30:45 +0000
ROA not before: Mon 01 Jan 2024 18:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39668
IP address blocks: 217.156.4.0/22 maxlen: 22
85.120.24.0/22 maxlen: 22
193.230.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e4:23:38:81:2b:3a:24:27:26:d5:0a:f5:74:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=254649ad6cb602444ae28243b903e42645161679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:6b:39:4a:2c:8b:ca:b1:a9:c3:b1:bf:d3:
8c:1c:bc:a4:76:3f:4c:f7:3a:c8:0b:73:c4:70:4d:
e8:41:37:46:f5:31:cb:92:7b:95:a7:31:5f:64:4c:
f7:8f:6a:14:ba:70:f3:e6:5b:4b:46:29:ce:0b:7f:
6c:be:d6:ab:6c:b2:56:04:6b:24:49:d0:c8:1d:5e:
87:83:5b:74:8c:d2:8e:4e:7b:ba:3b:6e:11:4c:bf:
2f:b3:83:0a:17:f0:05:e1:5c:b8:c1:12:f8:c2:ea:
9e:50:5d:ca:3b:a1:86:8d:9b:f6:4d:07:78:5c:46:
c3:4c:06:4c:43:41:4d:0f:a3:b7:54:a2:aa:43:a1:
87:49:af:86:93:8c:18:1d:f8:ee:95:cd:45:74:7b:
02:2b:60:40:ff:69:94:77:8f:6f:56:b2:89:e4:a4:
db:07:8d:7e:50:70:b5:7d:56:8f:1c:da:69:16:ea:
1c:98:65:61:3b:81:9f:0c:c2:aa:97:53:15:fa:65:
ea:6e:77:16:9b:1c:56:45:bb:11:5b:68:58:1d:01:
22:05:75:0d:b4:9f:d0:fc:78:9e:f3:1e:1f:63:24:
cc:ed:54:b0:b7:0e:45:0d:2b:d9:42:30:e7:b3:86:
03:24:69:08:89:c2:3a:e5:5e:b5:6e:3d:a6:ec:95:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:46:49:AD:6C:B6:02:44:4A:E2:82:43:B9:03:E4:26:45:16:16:79
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JUZJrWy2AkRK4oJDuQPkJkUWFnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.24.0/22
193.230.215.0/24
217.156.4.0/22
Signature Algorithm: sha256WithRSAEncryption
73:0d:69:7c:e6:10:f0:e8:b5:ad:e6:80:0f:6d:97:ee:c1:0f:
94:62:98:cf:a7:25:77:3e:a3:b9:9a:50:7b:b4:37:d0:56:19:
7e:89:04:38:0e:8e:ee:af:a2:3c:38:70:b6:d1:f4:69:81:37:
24:8c:4f:05:e7:2c:14:8a:ed:d9:9f:79:75:ae:69:9c:b9:39:
82:9e:20:f9:86:8e:f2:1e:b6:ef:e6:2f:da:a5:df:6e:f3:25:
ee:09:6f:08:36:9c:64:e7:55:85:01:da:aa:90:5e:f9:67:d9:
ba:b4:06:5e:a4:25:e4:ec:5e:00:32:ed:bc:a5:5a:4a:ec:26:
e3:23:cd:0c:02:b7:1a:14:6d:79:9f:e8:08:99:65:1c:86:d4:
ce:c6:c8:2b:68:e1:42:f0:4b:72:4a:17:5d:c5:3b:33:21:72:
61:58:46:a8:f3:d0:95:90:99:29:c0:0f:bc:09:ae:fb:ed:59:
fe:b5:b9:68:51:25:6b:a8:d5:82:81:c6:f3:c1:30:07:74:06:
20:33:77:ac:a8:b4:f8:73:4e:b0:62:0f:c4:3b:28:a6:76:7f:
d0:e5:a7:16:d5:9e:fd:86:d3:b2:2e:dc:be:52:6f:01:47:3f:
f9:5c:4f:b3:07:8e:6e:f5:58:59:29:57:fc:7f:1d:f8:c6:c7:
54:33:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:01:21 2024 by rpki-client on console-fra.rpki-client.org