Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JY3hfx3uYUv1djoeyNtgDrFNC7M.roa
File: JY3hfx3uYUv1djoeyNtgDrFNC7M.roa (raw, json)
Hash identifier: LXSs2r7Fvg+vwLwTsPEEVBqnIAMOo+mitynaziNmHSI=
Subject key identifier: 25:8D:E1:7F:1D:EE:61:4B:F5:76:3A:1E:C8:DB:60:0E:B1:4D:0B:B3
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794F27D5E5B5687F3CE9A4211067BFD
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JY3hfx3uYUv1djoeyNtgDrFNC7M.roa
Signing time: Tue 02 Jan 2024 00:31:16 +0000
ROA not before: Tue 02 Jan 2024 00:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398464
IP address blocks: 193.142.36.0/22 maxlen: 24
194.180.232.0/23 maxlen: 24
91.132.124.0/24 maxlen: 24
212.87.218.0/24 maxlen: 24
212.87.216.0/24 maxlen: 24
212.87.219.0/24 maxlen: 24
194.180.236.0/23 maxlen: 24
45.133.112.0/22 maxlen: 24
45.136.24.0/22 maxlen: 24
45.147.8.0/22 maxlen: 24
93.177.94.0/23 maxlen: 24
45.147.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f2:7d:5e:5b:56:87:f3:ce:9a:42:11:06:7b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=258de17f1dee614bf5763a1ec8db600eb14d0bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:59:fa:b5:c1:74:0c:ab:cc:dc:cd:46:08:
02:4e:c3:d8:93:f8:57:82:71:6b:9d:31:ff:7d:f8:
39:aa:0a:76:76:e1:c9:03:28:a6:73:f0:58:c5:75:
68:06:b0:8b:2d:95:09:b6:f4:a9:3a:0d:9b:dc:53:
49:f2:ec:03:39:10:00:8e:c5:04:49:d6:3f:99:46:
6b:5a:9e:90:c1:6e:90:dd:14:31:11:2d:2e:cd:60:
22:2a:84:2c:21:d5:40:74:4d:0e:8b:31:a0:3b:aa:
a4:7d:d7:7e:5d:77:ec:65:7c:30:87:60:cf:39:86:
71:a5:33:74:ee:58:19:80:23:e4:c1:38:ba:dc:dc:
1a:9a:f9:c8:60:ec:a2:03:59:21:96:ed:e0:c4:b6:
3f:ee:7c:a6:77:96:0c:8a:68:13:fa:53:56:5b:c1:
d1:6a:06:31:47:40:45:c3:2d:16:97:bb:f2:67:bb:
7e:35:bb:fe:e2:9a:ba:64:e3:19:bb:97:e9:bd:55:
53:0b:40:06:3f:2b:29:f3:24:92:8a:66:ce:dd:78:
4e:8b:4e:5a:f8:fa:86:c1:63:91:71:38:13:7f:ff:
09:50:1b:af:2c:22:44:0a:5b:30:c5:03:d9:6c:51:
dd:b4:6b:92:04:c0:f5:2c:f2:ac:c5:7b:b4:64:41:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:E1:7F:1D:EE:61:4B:F5:76:3A:1E:C8:DB:60:0E:B1:4D:0B:B3
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/JY3hfx3uYUv1djoeyNtgDrFNC7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
45.136.24.0/22
45.147.8.0/22
45.147.232.0/22
91.132.124.0/24
93.177.94.0/23
193.142.36.0/22
194.180.232.0/23
194.180.236.0/23
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
37:0c:05:45:b1:39:a8:c1:f2:b8:87:75:5e:eb:de:99:70:1e:
d8:4a:72:3b:3f:2b:f2:de:cf:76:93:d4:b9:79:74:e4:de:e4:
74:df:bd:03:61:56:eb:2f:c4:38:ed:bb:1f:aa:b6:0f:04:9b:
fe:af:b7:4e:eb:68:cd:92:05:f7:c0:2e:94:7f:77:94:1f:13:
d5:e7:79:3e:17:38:9a:5c:68:dd:2a:c8:8d:58:e4:62:0e:4f:
bf:44:1d:70:aa:3b:b1:0e:75:24:a3:16:5f:56:c4:6d:20:e1:
f5:ca:0d:df:a0:ff:e4:cb:60:27:be:ae:46:a5:6d:f6:6f:ce:
34:72:de:b1:bb:d5:96:79:19:ca:c3:96:a6:73:f0:1b:c0:8d:
4b:e2:ac:67:e2:95:26:68:92:61:88:e4:be:57:48:f6:ad:60:
ae:87:28:01:98:fe:2e:73:6b:64:f2:25:82:6d:b2:1f:50:13:
70:75:04:d9:f6:11:79:61:6b:4e:87:d4:30:a5:af:5f:01:6b:
a9:6a:8b:92:b0:59:ae:2f:9c:96:68:be:6f:10:8d:45:f8:de:
84:17:a0:78:8b:b0:68:58:59:c8:f9:47:d1:29:86:82:2a:97:
2d:b4:f2:f0:87:9d:65:da:ff:8d:65:4f:81:5d:56:35:80:bd:
4b:2c:45:0a
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYzHlPJ9XltWh/POmkIRBnv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjQwMTAyMDAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNThkZTE3ZjFkZWU2MTRiZjU3NjNhMWVjOGRiNjAwZWIxNGQwYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmlZ+rXBdAyrzNzNRggCTsPYk/hX
gnFrnTH/ffg5qgp2duHJAyimc/BYxXVoBrCLLZUJtvSpOg2b3FNJ8uwDORAAjsUE
SdY/mUZrWp6QwW6Q3RQxES0uzWAiKoQsIdVAdE0OizGgO6qkfdd+XXfsZXwwh2DP
OYZxpTN07lgZgCPkwTi63NwamvnIYOyiA1khlu3gxLY/7nymd5YMimgT+lNWW8HR
agYxR0BFwy0Wl7vyZ7t+Nbv+4pq6ZOMZu5fpvVVTC0AGPysp8ySSimbO3XhOi05a
+PqGwWORcTgTf/8JUBuvLCJEClswxQPZbFHdtGuSBMD1LPKsxXu0ZEGdywIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFCWN4X8d7mFL9XY6HsjbYA6xTQuzMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvSlkzaGZ4M3VZVXYxZGpvZXlOdGdEckZOQzdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCLYVwAwQC
LYgYAwQCLZMIAwQCLZPoAwQAW4R8AwQBXbFeAwQCwY4kAwQBwrToAwQBwrTsAwQA
1FfYAwQB1FfaMA0GCSqGSIb3DQEBCwUAA4IBAQA3DAVFsTmowfK4h3Ve696ZcB7Y
SnI7Pyvy3s92k9S5eXTk3uR0370DYVbrL8Q47bsfqrYPBJv+r7dO62jNkgX3wC6U
f3eUHxPV53k+FziaXGjdKsiNWORiDk+/RB1wqjuxDnUkoxZfVsRtIOH1yg3foP/k
y2Anvq5GpW32b840ct6xu9WWeRnKw5amc/AbwI1L4qxn4pUmaJJhiOS+V0j2rWCu
hygBmP4uc2tk8iWCbbIfUBNwdQTZ9hF5YWtOh9Qwpa9fAWupaouSsFmuL5yWaL5v
EI1F+N6EF6B4i7BoWFnI+UfRKYaCKpcttPLwh51l2v+NZU+BXVY1gL1LLEUK
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:10:39 2024 by rpki-client on console-fra.rpki-client.org