Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/_JmvSj858oi2QB679B-jPk1FSQQ.roa
File: _JmvSj858oi2QB679B-jPk1FSQQ.roa (raw, json)
Hash identifier: YB6LAwDidqmHXxqcenifzlZM3fTsEmBWpyJo/DE7mvA=
Subject key identifier: FC:99:AF:4A:3F:39:F2:88:B6:40:1E:BB:F4:1F:A3:3E:4D:45:49:04
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 018CC26D3BB381BFCBED43C1EDD2440CE821
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/_JmvSj858oi2QB679B-jPk1FSQQ.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60351
IP address blocks: 37.77.201.0/24 maxlen: 24
37.77.200.0/24 maxlen: 24
37.77.206.0/24 maxlen: 24
37.77.205.0/24 maxlen: 24
37.77.204.0/24 maxlen: 24
37.77.203.0/24 maxlen: 24
37.77.202.0/24 maxlen: 24
37.77.207.0/24 maxlen: 24
185.21.164.0/22 maxlen: 22
2a00:8140:f000::/36 maxlen: 36
2a00:8140::/36 maxlen: 36
2a00:8140:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3b:b3:81:bf:cb:ed:43:c1:ed:d2:44:0c:e8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc99af4a3f39f288b6401ebbf41fa33e4d454904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:c7:24:24:67:e3:f3:df:28:0f:dc:68:4a:
99:c0:d4:cb:cb:f1:e8:25:90:54:c4:0c:9b:fb:4b:
11:74:66:a0:0a:4a:a8:a6:01:e4:f7:f8:ee:56:85:
5f:36:1c:be:1d:f0:d9:fa:24:09:bc:c5:7a:f3:fa:
5b:2d:1f:bb:5a:a7:5c:64:fc:93:6c:ee:f6:37:a5:
94:91:77:7a:e1:8b:61:c9:5f:6f:ae:c3:5a:7a:50:
60:45:ad:3e:ed:49:13:20:5d:f9:3b:8e:cb:1a:f8:
73:03:90:90:b8:e0:8e:9c:74:cc:7a:3b:f3:24:94:
a7:ac:d8:26:b7:34:e8:a1:38:bf:74:c6:18:58:7a:
b1:35:c7:c4:a4:f4:8e:b6:63:03:e8:59:0b:c1:60:
d6:4a:7f:b8:83:e7:1f:4d:f0:ee:48:23:10:8b:8e:
3e:b7:c9:c0:c9:2e:87:e8:fe:a5:e7:d0:1a:af:df:
6f:2e:85:b4:7c:87:ef:a5:84:a1:fe:e2:2f:27:a0:
f4:f5:18:b5:d9:ab:39:f1:e4:bd:48:c4:19:85:c6:
46:d2:20:6e:7e:62:8e:e2:83:25:a4:ed:1c:81:c0:
04:ff:91:16:ff:10:9d:20:f7:32:f0:9d:02:dd:66:
8b:ff:f5:1f:8f:25:8b:6d:7c:e7:b7:7f:a4:70:a6:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:AF:4A:3F:39:F2:88:B6:40:1E:BB:F4:1F:A3:3E:4D:45:49:04
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/_JmvSj858oi2QB679B-jPk1FSQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.200.0/21
185.21.164.0/22
IPv6:
2a00:8140::/35
2a00:8140:f000::/36
Signature Algorithm: sha256WithRSAEncryption
98:df:d3:c3:cd:30:98:e4:69:6a:70:31:f1:fb:ef:e5:b0:37:
d3:4b:59:46:45:3b:5d:5d:ba:06:b1:c4:7d:8d:4a:8a:8e:c5:
26:cd:d6:55:51:18:b2:eb:23:1b:17:79:9e:b7:3f:64:cc:b4:
57:28:1f:ad:ea:8f:50:5d:46:c4:60:2c:71:78:f3:f5:65:aa:
e7:6f:56:e5:fd:fe:50:2d:66:b6:14:65:5d:96:82:e3:75:b0:
1f:44:26:52:0a:07:a2:be:0a:f0:5e:32:e2:aa:4c:24:51:21:
f8:7a:c1:9b:53:97:41:b0:85:5e:2f:01:96:97:8e:09:d8:ae:
9b:9f:3c:76:40:8e:80:21:c8:d1:30:11:d9:5b:44:a5:5a:11:
25:04:c4:8e:34:82:ff:80:d3:69:c1:e3:aa:85:08:18:16:29:
bf:28:9a:db:54:ed:7c:de:ba:cf:92:e0:60:42:31:47:80:48:
3c:a5:92:f3:5a:17:4f:78:81:47:a6:25:c0:15:53:66:5d:c8:
d8:a2:31:f6:9e:cc:91:e4:a2:2e:b4:00:da:5a:4b:c7:b1:7f:
f2:0e:78:c3:20:c8:2c:1f:64:c5:ef:8b:f9:48:43:bb:25:96:
b6:71:f3:cc:8f:46:80:b0:e8:5e:d8:20:ef:8d:42:d7:d6:09:
c5:b8:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:25 2024 by rpki-client on console-ams.rpki-client.org