Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/JvXsPx12-mGaTi5E8y8Cpg6uYeY.roa
File: JvXsPx12-mGaTi5E8y8Cpg6uYeY.roa (raw, json)
Hash identifier: EyVN0VakXbGe4xRqegbJNrEcdGuIOn0ceBRYy6JntJE=
Subject key identifier: 26:F5:EC:3F:1D:76:FA:61:9A:4E:2E:44:F3:2F:02:A6:0E:AE:61:E6
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 0190264F600A4D439C82BEFF31972B1CA353
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/JvXsPx12-mGaTi5E8y8Cpg6uYeY.roa
Signing time: Mon 17 Jun 2024 13:07:34 +0000
ROA not before: Mon 17 Jun 2024 13:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58010
IP address blocks: 185.139.158.0/24 maxlen: 24
2a0b:20c0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:4f:60:0a:4d:43:9c:82:be:ff:31:97:2b:1c:a3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Jun 17 13:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26f5ec3f1d76fa619a4e2e44f32f02a60eae61e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:19:c5:28:70:ee:ff:65:93:6a:4e:3d:bc:
5d:5b:bc:13:bc:f0:51:54:7f:91:04:68:ff:6e:70:
bc:46:2f:0a:de:d0:ef:89:4f:42:25:21:31:a8:92:
25:ee:be:49:d7:47:1f:72:d5:f7:38:dc:01:43:4c:
6a:55:2c:51:65:70:29:6d:3e:dc:7f:8e:f5:a9:e8:
31:6c:16:a6:28:6b:a9:4a:34:a1:a1:b7:75:40:47:
42:80:5f:8e:00:6d:dd:8f:73:5e:e8:2c:fd:1f:6f:
5e:4b:a4:aa:85:5e:77:f0:2b:43:0d:ca:b7:c6:f4:
89:f2:58:f2:3e:cc:bd:da:b5:e1:b3:fe:95:9a:78:
52:1a:f2:b0:1f:a5:26:a0:7a:87:5c:74:2b:19:71:
c3:f7:2d:eb:56:b8:82:92:13:f9:5e:d0:17:3f:e7:
c1:2f:ec:c0:05:50:b9:5e:85:c2:28:80:77:69:f5:
21:32:20:ca:56:29:e0:8c:84:a4:ca:af:b5:63:57:
0a:06:d5:75:72:29:9e:59:9f:66:b3:2c:2d:28:c7:
0e:9a:1d:c7:dd:f2:c0:6b:57:19:2d:98:09:57:93:
f6:65:f1:a1:2e:77:8e:c1:26:92:a8:6f:5e:9f:92:
5b:01:09:19:0f:59:3d:f0:3a:54:9a:4b:98:dc:96:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:EC:3F:1D:76:FA:61:9A:4E:2E:44:F3:2F:02:A6:0E:AE:61:E6
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/JvXsPx12-mGaTi5E8y8Cpg6uYeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.158.0/24
IPv6:
2a0b:20c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
7c:14:d8:d8:1a:51:d7:d5:6d:26:42:14:8a:c7:5f:eb:da:c6:
01:3d:7b:b3:fe:f9:03:02:56:23:f1:4f:2d:fb:05:ea:ac:38:
a7:65:94:96:5e:4a:72:75:8c:8a:e6:76:fd:0d:0f:59:3d:8d:
03:bd:22:b4:be:94:9d:8a:b4:ae:df:d8:23:10:a5:3a:d5:1c:
24:99:11:c4:80:02:ce:ea:cc:aa:5f:e6:e8:ab:4a:46:74:41:
bc:c5:ce:9e:bf:d3:aa:76:00:f4:e5:f6:30:d7:69:4c:97:6c:
60:9d:83:01:dc:9e:6f:7a:5c:49:05:63:e2:04:11:cd:a7:45:
f5:7c:70:04:e9:e9:b4:c4:c8:d9:85:0b:af:b8:04:f5:50:9c:
2b:ef:d6:ed:5e:2a:cc:0f:27:23:db:00:a1:22:e7:d7:9c:25:
19:91:af:6d:2b:99:41:27:68:ab:dc:69:91:2a:ce:fe:9a:ad:
8a:17:5f:97:1a:35:7f:46:cc:82:5d:e7:3b:43:c2:fa:0f:82:
fa:ad:d5:83:7b:dc:85:d3:34:b0:f4:44:a4:d0:08:a1:e5:fd:
85:9f:03:e9:72:98:91:96:d9:f8:2d:3c:c2:a4:af:e7:7b:6a:
43:64:3c:a8:d5:ee:d6:d4:d7:db:41:c8:de:db:25:40:72:8b:
bb:bf:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:18 2024 by rpki-client on console-fra.rpki-client.org