Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JMo8OzGf6DXhfN9FEyOtCtVepFk.roa
File: JMo8OzGf6DXhfN9FEyOtCtVepFk.roa (raw, json)
Hash identifier: ghwtL9/iV0zqkkYgHQQ+NGWKmsebV1XY26afI9x/Tg0=
Subject key identifier: 24:CA:3C:3B:31:9F:E8:35:E1:7C:DF:45:13:23:AD:0A:D5:5E:A4:59
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F7CD292AAC3BD7409E5A4ACF02E0F939F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JMo8OzGf6DXhfN9FEyOtCtVepFk.roa
Signing time: Wed 15 May 2024 15:15:25 +0000
ROA not before: Wed 15 May 2024 15:15:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43278
IP address blocks: 152.89.199.0/24 maxlen: 24
185.207.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:d2:92:aa:c3:bd:74:09:e5:a4:ac:f0:2e:0f:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 15 15:15:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24ca3c3b319fe835e17cdf451323ad0ad55ea459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:08:a8:24:ed:1c:a2:d4:c5:f8:f7:5f:61:
c0:fa:cc:eb:0d:02:f9:50:04:b8:aa:2f:a9:76:56:
5b:a6:df:9d:34:72:14:58:92:72:54:fa:45:7a:da:
c2:50:68:2c:fc:e2:80:34:52:4c:00:60:b9:5b:ae:
cb:12:1c:0b:13:81:c2:8b:f0:e9:ee:35:9f:1d:ae:
59:cf:9f:91:fe:a3:d1:24:ba:79:be:b6:91:a5:20:
7f:96:74:6b:4f:83:54:ef:2d:93:0f:85:c7:d0:ee:
0b:dc:30:25:d0:98:4c:7d:e5:a1:d7:d9:6d:be:79:
ca:93:14:3e:d9:6e:ba:48:da:e1:de:56:00:47:84:
fe:27:fe:3b:c6:e2:fd:94:13:b3:78:a8:4a:48:75:
be:5e:1d:37:b2:f1:67:da:c0:78:71:87:cf:7a:6c:
3e:cd:b9:c0:13:fe:76:13:ff:d6:6f:b6:bc:72:34:
0b:4b:5c:43:98:29:f2:20:11:62:4e:5e:8a:ce:ed:
6a:09:d5:10:3e:29:e1:6c:5a:9b:3e:d7:d1:31:da:
aa:a7:83:ed:97:6d:e9:f9:80:ba:a9:68:4f:8d:6c:
96:cb:4c:16:4b:60:a3:4a:64:16:4d:3f:62:a2:ad:
0c:d2:d4:6e:4e:4b:7b:96:33:a2:2e:44:69:a7:ff:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:3C:3B:31:9F:E8:35:E1:7C:DF:45:13:23:AD:0A:D5:5E:A4:59
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JMo8OzGf6DXhfN9FEyOtCtVepFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.199.0/24
185.207.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f2:94:ff:4d:49:37:ae:45:c6:60:b6:f9:93:98:f1:7c:4a:
6c:78:b2:0b:ff:ac:61:be:ae:1b:29:4e:d6:08:32:90:fc:99:
67:15:8e:c4:31:99:e3:1d:cf:36:45:7b:a7:21:dd:d8:87:a8:
0f:ad:7d:6c:62:69:8c:d6:bb:dc:8c:d5:af:83:46:5d:7a:48:
1b:6c:ab:3d:d8:59:32:7d:9c:0c:12:d0:c2:49:43:8b:9e:5a:
80:cb:cb:1a:c1:c1:7c:ec:1b:12:24:f0:8a:f1:dd:31:70:47:
2f:3a:01:0d:d4:68:4b:7c:3f:75:27:61:ec:68:83:0a:3a:17:
fb:ae:de:3c:5c:f4:b7:01:8f:f3:5e:19:7e:55:aa:43:cc:bc:
19:f5:e9:0b:74:a8:c2:23:12:d4:b4:41:a9:3d:04:a8:3b:d8:
70:dd:76:bd:8a:5d:90:c3:a6:17:d1:46:82:6f:cd:b3:a2:83:
52:03:c0:10:3d:7b:b0:33:dd:79:62:2d:1f:7f:58:90:db:b8:
88:0e:4f:ed:0f:3f:73:94:9f:3c:94:6e:5b:b7:4d:43:ec:6c:
2e:61:82:2a:65:fa:cd:e0:ac:1d:74:87:0c:e5:14:80:9b:81:
ec:97:26:fe:1c:a5:93:6a:57:61:ad:f7:ec:36:23:8d:2b:94:
f6:fc:e1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:47 2024 by rpki-client on console-ams.rpki-client.org