Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/j9z42mx5W68FGKCLBJZipPpMs5M.roa
File: j9z42mx5W68FGKCLBJZipPpMs5M.roa (raw, json)
Hash identifier: Ks3Wi1JimYetF6xLdQgXfAAb9l2wlrXH9biNY5q/Uew=
Subject key identifier: 8F:DC:F8:DA:6C:79:5B:AF:05:18:A0:8B:04:96:62:A4:FA:4C:B3:93
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 019349009F685829FC82D1571DAF15C0154C
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/j9z42mx5W68FGKCLBJZipPpMs5M.roa
Signing time: Wed 20 Nov 2024 09:56:37 +0000
ROA not before: Wed 20 Nov 2024 09:56:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56655
IP address blocks: 45.88.200.0/24 maxlen: 24
45.88.201.0/24 maxlen: 24
185.14.97.0/24 maxlen: 24
185.125.168.0/22 maxlen: 22
185.181.60.0/22 maxlen: 22
185.243.216.0/24 maxlen: 24
185.243.217.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
193.243.189.0/24 maxlen: 24
194.32.107.0/24 maxlen: 24
195.16.73.0/24 maxlen: 24
198.140.141.0/24 maxlen: 24
2a03:94e0::/32 maxlen: 32
2a03:94e1::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:00:9f:68:58:29:fc:82:d1:57:1d:af:15:c0:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Nov 20 09:56:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fdcf8da6c795baf0518a08b049662a4fa4cb393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:11:63:54:86:b7:d0:26:21:08:e6:9a:16:
78:1a:a3:32:0f:c8:67:e1:6c:92:5e:ec:16:64:51:
48:bf:5f:ba:d2:0b:e2:54:ae:da:d4:d8:f5:d0:84:
87:3d:91:41:79:a0:ad:6f:ac:f7:7c:13:54:9d:d9:
c5:f7:d0:a3:d4:d4:ac:d0:4f:cc:75:e2:bb:c3:94:
2b:31:f4:9e:94:d0:7b:3b:d4:fa:8e:06:92:64:2e:
d5:9f:c4:c4:e8:88:49:f5:c0:be:a4:a6:fd:e7:8f:
e8:d1:29:b3:04:cf:65:2e:d9:e3:94:52:ce:31:72:
86:b0:9a:a1:a0:07:29:c3:63:07:57:79:22:9d:01:
bd:dd:c1:98:a2:14:d0:b6:ee:a6:5f:f7:7b:77:23:
a1:a1:89:18:4a:0d:26:f0:bb:16:e3:9e:57:c1:59:
be:c7:c2:ec:93:42:6e:d2:72:fe:78:5a:55:86:84:
9c:de:d2:fa:b6:7d:a4:81:33:d0:1d:be:a8:e1:56:
c2:eb:41:d9:a8:23:db:17:07:4c:90:27:d6:35:28:
85:f1:0e:0a:4f:14:2e:4c:b4:4a:70:9e:53:f4:17:
5b:e3:d0:7e:62:a2:45:3d:b6:a3:77:62:89:68:aa:
e0:ef:7c:3a:4f:96:e0:d7:4d:49:10:0f:e7:e9:a4:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:F8:DA:6C:79:5B:AF:05:18:A0:8B:04:96:62:A4:FA:4C:B3:93
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/j9z42mx5W68FGKCLBJZipPpMs5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0/23
185.14.97.0/24
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
193.243.189.0/24
194.32.107.0/24
195.16.73.0/24
198.140.141.0/24
IPv6:
2a03:94e0::/30
Signature Algorithm: sha256WithRSAEncryption
81:f7:e5:8d:35:60:a9:da:f2:2e:ed:e2:95:0c:73:42:5f:d5:
fd:d1:df:82:76:33:9f:6b:d0:83:4b:89:3b:ab:12:6a:ed:35:
7d:69:d7:f8:f2:c6:ab:2e:ec:9e:be:05:45:ed:d3:c4:d3:12:
0c:f5:ec:7a:e3:df:73:f8:2b:64:2a:e8:53:71:1c:22:ab:e4:
d2:bd:f8:c6:9d:87:b3:f7:d0:43:d6:87:de:3b:eb:64:81:0e:
88:a8:b5:c8:75:55:f7:bd:af:15:5f:9b:db:a1:99:2d:f0:f8:
95:34:d2:26:d8:4d:a2:c5:34:ea:62:86:47:7d:b1:b1:35:53:
d4:2c:95:fe:f1:22:ec:e0:a9:66:c9:ca:88:e0:26:1e:c8:49:
c6:47:2d:f0:98:98:dc:92:ac:7a:d6:6b:2f:e7:93:e2:34:11:
de:04:5b:b4:48:3e:3f:8d:0a:22:86:e7:e6:48:24:a6:fd:91:
80:4c:6b:98:26:5b:b8:f7:eb:e5:fc:a2:ba:4b:26:7b:d8:fc:
42:75:e7:05:f1:38:23:f4:0c:66:16:ab:cf:08:19:62:8b:3a:
6e:8b:be:75:8b:95:ed:a8:4f:6d:13:b3:62:d3:9f:ed:3b:e7:
ba:2c:76:fa:cc:c0:71:71:0a:9d:83:6c:d1:15:73:d2:9f:18:
ad:e3:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:49 2024 by rpki-client on console-ams.rpki-client.org