Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/jo7grHdiLm0iiS1-h57taF-asAg.roa
File: jo7grHdiLm0iiS1-h57taF-asAg.roa (raw, json)
Hash identifier: kH4gI0/SEdo6PdbG9KLhqSblMfwDwBe4bFL2AF5J1zQ=
Subject key identifier: 8E:8E:E0:AC:77:62:2E:6D:22:89:2D:7E:87:9E:ED:68:5F:9A:B0:08
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 018CC2DB4F080EA5A4833379824ACF42C980
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/jo7grHdiLm0iiS1-h57taF-asAg.roa
Signing time: Mon 01 Jan 2024 02:30:01 +0000
ROA not before: Mon 01 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200865
IP address blocks: 185.91.16.0/24 maxlen: 24
185.91.17.0/24 maxlen: 24
185.91.16.0/22 maxlen: 22
185.91.18.0/24 maxlen: 24
185.91.19.0/24 maxlen: 24
37.17.128.0/20 maxlen: 20
37.17.128.0/19 maxlen: 19
37.17.144.0/24 maxlen: 24
37.17.145.0/24 maxlen: 24
37.17.144.0/20 maxlen: 20
37.17.148.0/24 maxlen: 24
37.17.149.0/24 maxlen: 24
37.17.150.0/24 maxlen: 24
37.17.151.0/24 maxlen: 24
37.17.146.0/24 maxlen: 24
37.17.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4f:08:0e:a5:a4:83:33:79:82:4a:cf:42:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e8ee0ac77622e6d22892d7e879eed685f9ab008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:c8:08:93:83:92:0e:96:41:da:7e:aa:03:
84:46:4f:12:64:52:4f:4d:be:dd:d8:96:df:2c:8d:
54:7e:02:b3:3f:4e:45:5c:17:5f:6f:38:1d:8a:36:
b8:4d:29:ea:ab:d5:57:e6:bd:2b:17:d7:48:b5:c3:
1f:42:77:4b:6d:22:5a:a0:bc:06:b8:fa:9d:46:28:
43:5d:1a:e1:d3:a5:c9:f3:f6:28:45:ac:4d:ae:0d:
3e:07:45:6f:e8:f0:bb:9b:e0:bc:bc:db:2a:b2:53:
ad:7b:16:be:77:52:c6:b4:0a:1c:76:fc:ae:17:b1:
7f:50:2a:2a:46:ac:93:42:a0:8c:53:23:44:26:80:
c3:5a:f0:05:0d:a0:8a:7c:6d:32:43:c4:e8:d0:ad:
a7:13:f9:d2:d1:1a:b5:87:d3:11:a2:96:94:f1:58:
b4:f3:40:e6:48:f3:29:4d:09:ca:b7:0e:46:df:40:
63:63:40:8e:25:3d:bd:c1:0e:76:22:6f:77:bb:b7:
7b:a8:22:3f:bf:01:e2:30:54:0f:a3:0d:51:3f:34:
c5:7a:c9:db:16:e5:4e:3d:e4:fa:87:51:03:d8:0c:
ec:4b:5d:e5:25:0b:7d:c8:a0:e1:e4:c4:96:05:c9:
d7:8c:2b:c1:15:94:12:f6:47:46:1d:c3:e6:80:bc:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8E:E0:AC:77:62:2E:6D:22:89:2D:7E:87:9E:ED:68:5F:9A:B0:08
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/jo7grHdiLm0iiS1-h57taF-asAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.128.0/19
185.91.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:71:40:78:e9:18:21:cf:48:3b:8e:f2:77:14:f0:b8:1f:65:
05:ce:17:df:21:01:22:05:6e:3a:38:ce:c8:44:b8:0a:01:06:
50:14:c1:6b:d3:9a:c8:88:ac:c0:7d:0d:ee:49:02:a0:8f:c6:
65:e5:1f:46:21:0c:73:37:58:95:b0:bb:2c:85:a3:5f:9b:d8:
b3:ed:bc:1a:d4:b1:4e:c8:41:0b:78:08:f6:84:a3:c5:81:b0:
6c:94:27:5d:8f:ec:4c:31:a6:da:86:ec:bf:1d:6e:c0:f2:f9:
da:64:1e:55:94:96:07:98:77:b7:09:34:dd:83:9a:e1:a9:4a:
ef:d6:17:6c:45:10:62:fa:0c:31:39:21:13:ed:9d:ed:e5:3c:
5f:45:7f:a6:88:53:13:e8:e1:40:e2:0c:d9:62:17:d4:b3:fa:
1e:09:6f:e1:56:70:ea:95:c2:5f:ec:63:44:a7:7f:ce:45:cd:
5e:c8:b9:a2:9d:2e:9d:ce:e8:07:a8:2b:41:c3:43:fc:7f:16:
ce:fc:e2:d5:25:de:b0:ee:b8:f5:82:65:11:b8:bf:34:14:34:
eb:19:a3:06:88:d1:d3:a3:2a:d9:53:52:2e:db:23:9f:1a:a7:
2e:d2:41:8e:d5:ae:ec:8e:20:bc:d6:21:ff:14:b3:51:b4:38:
0d:74:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:50 2024 by rpki-client on console-ams.rpki-client.org