Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/JAPzKuZTF1YS6jIGsYs691E7zVw.roa
File: JAPzKuZTF1YS6jIGsYs691E7zVw.roa (raw, json)
Hash identifier: /kH5s3/UWngIa1uMWPBakiA/0NwJcaOp8qZJSr9fLnY=
Subject key identifier: 24:03:F3:2A:E6:53:17:56:12:EA:32:06:B1:8B:3A:F7:51:3B:CD:5C
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 018CC6B907B969A3F751B5D62AE30C352646
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/JAPzKuZTF1YS6jIGsYs691E7zVw.roa
Signing time: Mon 01 Jan 2024 20:31:03 +0000
ROA not before: Mon 01 Jan 2024 20:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201188
IP address blocks: 185.63.92.0/24 maxlen: 24
185.63.93.0/24 maxlen: 24
185.63.94.0/24 maxlen: 24
185.16.110.0/24 maxlen: 24
2a03:ba6::/64 maxlen: 64
2a03:ba0::/29 maxlen: 29
2a03:ba2::/64 maxlen: 64
2a03:ba3::/64 maxlen: 64
2a03:ba7::/64 maxlen: 64
2a03:ba4::/64 maxlen: 64
2a03:ba0::/64 maxlen: 64
2a03:ba0::/32 maxlen: 32
2a03:ba5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:07:b9:69:a3:f7:51:b5:d6:2a:e3:0c:35:26:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Jan 1 20:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2403f32ae653175612ea3206b18b3af7513bcd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:c6:ff:40:47:36:a3:b0:d0:97:44:fc:cf:
af:ab:7e:26:60:c5:50:31:b0:ac:89:52:94:65:86:
4e:f8:d2:55:ce:c1:fc:06:a9:0a:34:22:36:bf:32:
60:ac:4b:14:19:a7:6a:53:1e:8a:58:e8:5f:f9:c3:
69:df:20:8d:60:58:6e:45:f3:52:57:4f:5a:b5:f0:
87:86:5a:e6:ee:e1:68:56:2c:ca:34:e9:7b:ef:94:
e7:3d:bc:81:21:89:66:25:48:52:9e:18:65:6e:f1:
f5:81:5a:49:2a:a4:b5:bd:84:e9:dd:27:0c:e1:44:
fa:8e:66:00:2d:9c:d9:43:05:c9:3c:c0:4c:0f:66:
3a:c6:a3:02:bd:bd:ca:a5:3b:6c:74:c7:4d:69:4e:
2a:11:02:af:71:68:e4:41:67:a4:54:15:9b:c9:32:
64:f5:3f:c8:e9:34:ba:82:2a:6a:ad:60:41:ae:da:
d7:4a:34:56:b9:4a:f8:7a:4d:27:df:c0:3b:0d:37:
6a:c0:71:34:c3:fe:fe:e7:57:e3:51:67:be:7a:e6:
31:57:d1:bb:72:38:d6:fa:2d:6e:47:2e:2e:bb:43:
02:fc:29:04:29:cd:d1:45:23:c8:00:2a:32:ae:cd:
8f:8f:8f:9c:19:5b:5b:4a:e0:73:bf:9b:65:72:66:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:03:F3:2A:E6:53:17:56:12:EA:32:06:B1:8B:3A:F7:51:3B:CD:5C
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/JAPzKuZTF1YS6jIGsYs691E7zVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.110.0/24
185.63.92.0-185.63.94.255
IPv6:
2a03:ba0::/29
Signature Algorithm: sha256WithRSAEncryption
43:6e:c5:bf:31:c9:55:ce:98:a3:91:26:40:f4:fd:c9:85:93:
64:22:30:61:6e:8c:5a:3f:16:bd:d1:69:31:6b:86:77:75:4f:
0f:e3:25:25:21:27:fb:9f:94:2e:52:75:63:58:a5:d7:63:cb:
7c:db:12:17:f2:4c:98:93:49:56:7c:30:a0:ab:07:12:a1:ee:
66:5f:c4:cc:d6:fc:ab:e7:2e:7a:25:1a:35:f9:d0:5a:d9:09:
96:43:8e:99:28:14:f8:57:7f:83:cf:8b:f4:7f:45:2d:71:8b:
0a:d2:99:09:a8:2c:aa:a5:45:ab:4d:fb:fd:f0:aa:23:ce:ae:
31:82:05:3e:1a:23:a8:3f:55:7a:d9:a0:b2:d3:db:7f:a8:19:
5d:4f:71:9c:7b:6b:d4:48:5d:80:1b:cf:5c:fa:73:14:c4:87:
35:d0:64:cc:97:b2:92:01:60:a0:dc:9e:fd:7f:87:16:ec:d5:
65:e4:c7:57:90:3a:ce:2a:99:9a:03:0a:a9:ef:65:7d:8c:b2:
27:b9:07:fb:59:d0:d6:8e:47:13:e7:ec:c6:25:3c:71:42:2e:
a5:4f:38:4a:0a:b6:67:8d:36:8b:65:2b:bd:73:8d:6f:33:48:
e4:bd:46:fb:89:a8:9e:51:6e:8a:90:e2:a3:68:6a:29:7b:f6:
d3:31:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:52:48 2024 by rpki-client on console-fra.rpki-client.org