Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JbVXBUnLG64zA1S7UqpTYHBRPN0.roa
File: JbVXBUnLG64zA1S7UqpTYHBRPN0.roa (raw, json)
Hash identifier: YjKFq8tPE+FguPruEfAcYBaECSyWDEX2YNepmsW3Mbc=
Subject key identifier: 25:B5:57:05:49:CB:1B:AE:33:03:54:BB:52:AA:53:60:70:51:3C:DD
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018EA42E0D2B3DF48BA605F88ED80A3541A5
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JbVXBUnLG64zA1S7UqpTYHBRPN0.roa
Signing time: Wed 03 Apr 2024 13:37:45 +0000
ROA not before: Wed 03 Apr 2024 13:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6282
IP address blocks: 31.131.8.0/23 maxlen: 23
31.131.10.0/23 maxlen: 23
64.43.100.0/22 maxlen: 22
64.43.108.0/22 maxlen: 22
64.43.116.0/22 maxlen: 22
77.36.24.0/22 maxlen: 22
77.36.120.0/22 maxlen: 22
81.161.0.0/23 maxlen: 23
81.161.2.0/23 maxlen: 23
91.246.176.0/22 maxlen: 22
91.246.180.0/22 maxlen: 22
93.120.16.0/22 maxlen: 22
93.120.20.0/22 maxlen: 22
176.96.52.0/22 maxlen: 22
176.111.160.0/23 maxlen: 23
176.111.162.0/23 maxlen: 23
176.113.184.0/22 maxlen: 22
176.113.188.0/22 maxlen: 22
176.116.32.0/22 maxlen: 22
176.116.36.0/22 maxlen: 22
178.159.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:2e:0d:2b:3d:f4:8b:a6:05:f8:8e:d8:0a:35:41:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 3 13:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25b5570549cb1bae330354bb52aa536070513cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:c2:04:d9:38:61:00:ed:9e:0d:3f:6a:d5:
3e:c8:f3:67:e9:5a:23:19:22:df:7d:ab:fa:1f:ee:
d0:83:2f:43:0e:c1:2c:8d:6a:78:e3:97:c6:03:a6:
aa:e2:64:bd:cd:83:a8:4e:1a:d6:79:dc:29:11:26:
9d:61:76:f8:78:cc:fd:a3:5d:8c:97:58:0c:34:c0:
60:52:6f:6e:0c:fb:e4:25:3b:ab:cb:5e:e3:e6:d7:
c1:22:0d:b9:8e:4a:31:8e:ac:8d:0a:fc:ac:72:f9:
99:87:16:4c:14:4f:3b:64:58:3e:92:13:71:c3:b7:
8b:e0:58:25:ab:59:1a:04:39:41:b4:9f:57:f1:78:
24:64:2b:43:31:f8:83:6a:e4:04:1c:ae:d7:bf:cb:
b0:3e:72:c0:31:a0:15:06:f8:5f:fb:c0:7e:40:75:
4d:62:fe:52:d4:05:bd:2d:22:28:00:c8:be:0b:de:
1c:1d:72:bc:d0:50:6d:59:ee:27:06:47:38:7d:a9:
e3:6e:07:f8:53:27:4c:de:40:07:eb:24:78:59:fb:
60:5c:37:bc:a0:a6:4f:e1:f6:59:fe:02:cc:5d:76:
9c:87:af:67:17:0f:a7:5b:bd:7d:82:8d:27:80:10:
a6:27:15:ef:8b:ab:10:13:22:a5:9a:df:0d:5d:ea:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B5:57:05:49:CB:1B:AE:33:03:54:BB:52:AA:53:60:70:51:3C:DD
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JbVXBUnLG64zA1S7UqpTYHBRPN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.8.0/22
64.43.100.0/22
64.43.108.0/22
64.43.116.0/22
77.36.24.0/22
77.36.120.0/22
81.161.0.0/22
91.246.176.0/21
93.120.16.0/21
176.96.52.0/22
176.111.160.0/22
176.113.184.0/21
176.116.32.0/21
178.159.144.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:c7:98:37:13:55:e9:e9:3e:5e:e2:0a:16:05:99:21:24:20:
c1:a0:2a:ce:e1:0a:0a:0b:fb:0e:1c:69:1c:47:c1:07:c4:b0:
fd:d4:2f:a0:b5:c5:dd:95:c9:47:f4:fb:31:df:55:82:85:03:
c8:bb:e9:4e:f1:6b:d8:fa:5c:b1:bf:5d:26:b6:7f:18:b9:9a:
a2:db:61:d4:b1:6c:cb:23:d3:73:18:df:18:3d:95:40:7a:bc:
ce:d5:07:3a:8a:85:36:fc:97:de:b0:c5:65:57:03:84:d4:27:
ba:d7:6e:04:11:a5:63:50:e5:ca:66:fa:ce:1e:3f:5d:50:ee:
ac:b1:40:f2:2b:12:e0:67:bf:7c:da:df:bb:f8:67:10:95:8b:
3c:ff:74:a3:b1:c6:31:5f:47:15:33:b8:0d:53:79:dd:9d:05:
2d:2b:32:49:27:b6:58:e8:16:df:e0:e0:89:52:21:f8:cc:1c:
bc:7f:9c:81:ff:c2:21:06:7e:23:33:40:23:37:88:cf:92:45:
3a:1a:90:fa:76:8d:87:5b:7d:f7:81:91:d0:d6:82:35:c0:aa:
ec:c5:e9:2d:26:25:2f:c4:37:e1:92:fe:b1:4c:8c:de:a1:bc:
2c:00:9f:69:ec:42:71:08:ab:b9:50:b0:ff:fd:d4:2d:63:5a:
d1:d4:e5:92
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAY6kLg0rPfSLpgX4jtgKNUGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwNDAzMTMzNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWI1NTcwNTQ5Y2IxYmFlMzMwMzU0YmI1MmFhNTM2MDcwNTEzY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguDCBNk4YQDtng0/atU+yPNn6Voj
GSLffav6H+7Qgy9DDsEsjWp445fGA6aq4mS9zYOoThrWedwpESadYXb4eMz9o12M
l1gMNMBgUm9uDPvkJTury17j5tfBIg25jkoxjqyNCvyscvmZhxZMFE87ZFg+khNx
w7eL4Fglq1kaBDlBtJ9X8XgkZCtDMfiDauQEHK7Xv8uwPnLAMaAVBvhf+8B+QHVN
Yv5S1AW9LSIoAMi+C94cHXK80FBtWe4nBkc4fanjbgf4UydM3kAH6yR4WftgXDe8
oKZP4fZZ/gLMXXach69nFw+nW719go0ngBCmJxXvi6sQEyKlmt8NXeoYeQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFCW1VwVJyxuuMwNUu1KqU2BwUTzdMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvSmJWWEJVbkxHNjR6QTFTN1VxcFRZSEJSUE4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCH4MIAwQC
QCtkAwQCQCtsAwQCQCt0AwQCTSQYAwQCTSR4AwQCUaEAAwQDW/awAwQDXXgQAwQC
sGA0AwQCsG+gAwQDsHG4AwQDsHQgAwQBsp+QMA0GCSqGSIb3DQEBCwUAA4IBAQBt
x5g3E1Xp6T5e4goWBZkhJCDBoCrO4QoKC/sOHGkcR8EHxLD91C+gtcXdlclH9Psx
31WChQPIu+lO8WvY+lyxv10mtn8YuZqi22HUsWzLI9NzGN8YPZVAerzO1Qc6ioU2
/JfesMVlVwOE1Ce6124EEaVjUOXKZvrOHj9dUO6ssUDyKxLgZ7982t+7+GcQlYs8
/3SjscYxX0cVM7gNU3ndnQUtKzJJJ7ZY6Bbf4OCJUiH4zBy8f5yB/8IhBn4jM0Aj
N4jPkkU6GpD6do2HW333gZHQ1oI1wKrsxektJiUvxDfhkv6xTIzeobwsAJ9p7EJx
CKu5ULD//dQtY1rR1OWS
-----END CERTIFICATE-----
Generated at Fri May 17 23:48:24 2024 by rpki-client on console-ams.rpki-client.org