Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JG1pbxLE3w_9Dvj8hO2C8wmct8k.roa
File: JG1pbxLE3w_9Dvj8hO2C8wmct8k.roa (raw, json)
Hash identifier: g358z/bulIBAE+2hvxlUXFxs9GS7g4OWyhgbdaOKRxg=
Subject key identifier: 24:6D:69:6F:12:C4:DF:0F:FD:0E:F8:FC:84:ED:82:F3:09:9C:B7:C9
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01928AD98696D9041F6DCC2C42AF38DA74B8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JG1pbxLE3w_9Dvj8hO2C8wmct8k.roa
Signing time: Mon 14 Oct 2024 11:46:04 +0000
ROA not before: Mon 14 Oct 2024 11:46:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204914
IP address blocks: 2.56.165.0/24 maxlen: 24
77.83.242.0/24 maxlen: 24
89.190.158.0/24 maxlen: 24
185.234.75.0/24 maxlen: 24
194.56.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:d9:86:96:d9:04:1f:6d:cc:2c:42:af:38:da:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Oct 14 11:46:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=246d696f12c4df0ffd0ef8fc84ed82f3099cb7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:71:10:80:77:a0:e0:0c:86:71:09:74:cb:
53:d4:d6:fd:d4:11:53:0c:5e:8c:16:82:08:7c:98:
06:a6:6f:45:99:33:e2:c3:73:80:2f:02:80:ac:bd:
1c:7f:16:4f:a9:42:ac:9a:18:eb:1f:2f:8a:bc:d6:
e8:fb:45:80:d5:6c:b4:74:a5:e1:d2:25:63:a8:75:
84:05:f8:f8:fc:fa:2d:be:ad:db:1b:55:c4:eb:40:
fd:b8:ce:b8:30:62:91:1b:af:0d:9c:34:f4:5d:09:
64:0f:8c:97:5f:e3:6e:a2:f7:96:0b:0a:4c:60:dd:
22:c8:16:a0:e5:37:c4:c5:d6:ac:41:84:4c:86:2b:
d2:1a:4b:39:8c:c1:e3:cc:28:b7:61:73:ae:11:33:
27:92:11:cd:e6:20:cd:98:27:c6:ba:28:a5:84:38:
d1:49:19:0b:ad:60:df:ae:eb:dd:7f:8f:14:cf:de:
8e:e9:db:62:b6:4f:65:a7:31:b2:3a:f3:4a:66:08:
df:db:90:d7:48:91:4f:5f:5d:dc:d9:15:ba:0c:c4:
c3:5d:95:24:9e:5c:a9:9f:ff:fc:bb:37:60:e5:77:
6f:79:82:41:b0:77:cd:e6:3d:16:2b:3d:cb:92:4e:
18:15:66:f2:7d:a2:4f:21:ea:83:68:04:26:36:f3:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6D:69:6F:12:C4:DF:0F:FD:0E:F8:FC:84:ED:82:F3:09:9C:B7:C9
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JG1pbxLE3w_9Dvj8hO2C8wmct8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.165.0/24
77.83.242.0/24
89.190.158.0/24
185.234.75.0/24
194.56.226.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ba:0e:77:75:ab:43:75:17:73:ea:d1:ec:96:5d:68:93:2f:
be:42:e8:32:42:84:a2:32:09:34:67:7e:f1:ff:b8:40:95:ce:
be:1c:9d:92:cd:5c:da:4c:e9:73:0c:5d:de:3f:a2:d6:3e:85:
cf:ed:b4:b6:b9:5f:91:ab:9c:51:7c:5c:95:6d:71:70:e3:b5:
e9:d6:d7:91:be:fa:49:94:33:6d:24:01:03:61:97:b5:9f:7a:
f3:00:94:cb:67:69:06:05:a5:eb:e7:0b:c4:94:65:d1:bb:db:
e6:39:35:7e:4f:8e:02:e4:1d:22:e0:65:6c:a1:24:60:b7:48:
68:7f:f7:97:24:a5:57:3b:3c:a5:17:fb:d6:9d:0d:8c:8c:f4:
63:06:a6:5a:4c:dc:23:3e:58:72:26:a1:d5:5d:11:bb:a5:46:
26:bf:35:1b:81:81:89:2f:16:22:47:f3:2b:96:04:be:e6:48:
38:a5:82:4e:d3:70:16:2c:bf:dc:ad:10:c5:7c:06:d8:c3:8f:
d1:b1:f1:76:8f:c8:02:8d:01:e5:3b:5a:ab:65:3e:c7:8d:1a:
31:52:a2:65:5d:4c:ec:48:5c:5c:18:b3:18:72:34:83:a0:95:
7c:1d:4a:25:61:28:32:64:c2:9f:d1:19:72:dc:0c:2f:73:4a:
95:7e:62:c5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZKK2YaW2QQfbcwsQq842nS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQxMDE0MTE0NjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDZkNjk2ZjEyYzRkZjBmZmQwZWY4ZmM4NGVkODJmMzA5OWNiN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMtxEIB3oOAMhnEJdMtT1Nb91BFT
DF6MFoIIfJgGpm9FmTPiw3OALwKArL0cfxZPqUKsmhjrHy+KvNbo+0WA1Wy0dKXh
0iVjqHWEBfj4/Potvq3bG1XE60D9uM64MGKRG68NnDT0XQlkD4yXX+NuoveWCwpM
YN0iyBag5TfExdasQYRMhivSGks5jMHjzCi3YXOuETMnkhHN5iDNmCfGuiilhDjR
SRkLrWDfruvdf48Uz96O6dtitk9lpzGyOvNKZgjf25DXSJFPX13c2RW6DMTDXZUk
nlypn//8uzdg5XdveYJBsHfN5j0WKz3Lkk4YFWbyfaJPIeqDaAQmNvNL3QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCRtaW8SxN8P/Q74/ITtgvMJnLfJMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvSkcxcGJ4TEUzd185RHZqOGhPMkM4d21jdDhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjilAwQA
TVPyAwQAWb6eAwQAuepLAwQAwjjiMA0GCSqGSIb3DQEBCwUAA4IBAQBJug53datD
dRdz6tHsll1oky++QugyQoSiMgk0Z37x/7hAlc6+HJ2SzVzaTOlzDF3eP6LWPoXP
7bS2uV+Rq5xRfFyVbXFw47Xp1teRvvpJlDNtJAEDYZe1n3rzAJTLZ2kGBaXr5wvE
lGXRu9vmOTV+T44C5B0i4GVsoSRgt0hof/eXJKVXOzylF/vWnQ2MjPRjBqZaTNwj
PlhyJqHVXRG7pUYmvzUbgYGJLxYiR/MrlgS+5kg4pYJO03AWLL/crRDFfAbYw4/R
sfF2j8gCjQHlO1qrZT7HjRoxUqJlXUzsSFxcGLMYcjSDoJV8HUolYSgyZMKf0Rly
3Awvc0qVfmLF
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:47 2024 by rpki-client on console-ams.rpki-client.org