Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/jkYYpGbC0CihqCmkn4ADo5F6EZE.roa
File: jkYYpGbC0CihqCmkn4ADo5F6EZE.roa (raw, json)
Hash identifier: jy2MNnLiReO9xIBOvQ2jnWQITVA4H1hMFryzk9VkErg=
Subject key identifier: 8E:46:18:A4:66:C2:D0:28:A1:A8:29:A4:9F:80:03:A3:91:7A:11:91
Certificate issuer: /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial: 018CC3494585C0307B849B0A8B717E8BE04D
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/jkYYpGbC0CihqCmkn4ADo5F6EZE.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198498
IP address blocks: 185.245.192.0/22 maxlen: 22
91.235.192.0/22 maxlen: 22
213.108.84.0/22 maxlen: 22
213.108.80.0/22 maxlen: 22
176.109.164.0/22 maxlen: 22
176.109.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:45:85:c0:30:7b:84:9b:0a:8b:71:7e:8b:e0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e4618a466c2d028a1a829a49f8003a3917a1191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:b5:8d:af:06:15:da:49:cc:b2:d0:1f:e0:
a9:53:14:e8:a3:59:a0:82:14:94:1f:5f:16:65:00:
0a:d3:86:cf:16:85:d6:cd:f2:cb:a4:cf:de:98:90:
d6:16:e1:29:d4:f2:80:bb:f3:91:98:95:db:ca:e1:
2c:e5:9a:6f:f4:54:f6:23:b3:aa:8f:0a:c3:bb:c2:
26:06:7d:94:f0:f2:06:0d:43:ad:28:69:e9:5e:cb:
4e:81:3d:64:6f:b5:05:a1:f2:0f:7d:01:2a:21:a6:
cf:f1:6b:b5:eb:43:4c:61:e1:94:39:44:f5:a4:1b:
d8:c9:7f:43:54:b6:66:1c:4b:e6:0e:f6:d2:61:ba:
81:46:a3:78:d1:74:4f:a6:af:5b:9d:6c:25:95:2d:
d1:f6:03:36:72:5a:e7:3b:60:8b:d6:24:91:03:40:
01:d2:96:3d:a4:6b:25:e1:d8:5f:44:ce:2e:ea:63:
9d:5f:a4:e5:62:dc:f0:ed:71:86:d7:18:8c:19:36:
b8:76:3f:87:14:82:35:79:65:a3:67:6e:f8:72:7d:
5e:d3:3e:70:39:eb:ee:79:56:9b:c3:33:25:6e:9a:
9a:aa:6d:ec:c8:82:2c:ec:48:25:c2:0a:a2:0b:8f:
57:a4:1e:33:cf:02:60:bd:2d:7a:7d:56:e6:84:5f:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:18:A4:66:C2:D0:28:A1:A8:29:A4:9F:80:03:A3:91:7A:11:91
X509v3 Authority Key Identifier:
keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/jkYYpGbC0CihqCmkn4ADo5F6EZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.192.0/22
176.109.160.0/21
185.245.192.0/22
213.108.80.0/21
Signature Algorithm: sha256WithRSAEncryption
68:0d:db:ec:d7:e8:ba:dd:25:06:41:d0:ad:60:90:78:5c:58:
27:50:1f:1d:f3:50:83:88:fc:69:7b:4c:fb:8b:e0:80:0e:74:
22:61:dd:2a:14:1f:1e:ec:d9:df:a7:bc:3e:bd:35:79:0e:bb:
be:21:c5:1e:27:ac:b9:8c:2e:92:cf:a1:a6:65:5b:1e:18:68:
35:e2:da:d4:1f:e4:75:da:34:a3:91:b8:8e:aa:da:75:cc:a3:
49:49:eb:75:8e:f0:47:8d:92:62:c7:fd:08:5b:9a:a8:62:05:
d7:4d:20:e2:f7:d1:dc:03:f1:46:38:42:79:de:a3:c0:f6:2d:
37:24:ae:3c:fa:07:a5:a9:20:24:ca:a5:00:03:23:29:3f:14:
a6:e7:10:bf:76:d4:80:87:a3:40:36:97:61:df:16:72:8f:83:
05:8e:48:da:f7:e9:2e:07:d0:4c:7d:af:f6:13:e5:16:5c:ce:
c7:be:02:ad:10:8e:03:0d:08:b1:52:f9:25:38:c0:c5:69:1b:
a7:84:7c:38:b5:99:84:a5:89:7e:24:b5:ca:0f:74:1e:ed:1f:
e9:f2:2f:7b:12:99:6b:de:71:59:c7:24:81:ba:75:5b:83:53:
55:d1:1d:65:92:f4:8b:6f:84:7a:76:d1:05:cc:1c:99:77:4e:
b6:b7:09:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:56:42 2024 by rpki-client on console-ams.rpki-client.org