Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JATkZOJ2F8b9Io6c6YWESuzcpqE.roa
File: JATkZOJ2F8b9Io6c6YWESuzcpqE.roa (raw, json)
Hash identifier: ChN6nUhZtNZ5PC0s7YXWTO2YBvlVgPCS3HjgM8lZX2o=
Subject key identifier: 24:04:E4:64:E2:76:17:C6:FD:22:8E:9C:E9:85:84:4A:EC:DC:A6:A1
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF85A1E701B5D62717A0E7D05F3F2E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JATkZOJ2F8b9Io6c6YWESuzcpqE.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203576
IP address blocks: 78.135.110.0/24 maxlen: 24
188.132.196.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:85:a1:e7:01:b5:d6:27:17:a0:e7:d0:5f:3f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2404e464e27617c6fd228e9ce985844aecdca6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:0a:3f:d7:ea:1b:67:1c:6f:47:df:f8:a0:
d4:a1:3d:f8:b4:de:1c:d2:ed:5b:be:bc:f5:31:35:
38:d5:b8:92:24:50:a7:ad:6a:9d:98:6e:90:11:a9:
b9:32:c9:1d:8b:e6:d8:5d:2e:d0:f2:1c:70:08:96:
65:ed:b8:ee:b4:b1:32:73:c9:6e:46:19:c4:22:f2:
75:ff:82:2a:3a:a0:bb:28:a2:53:fa:bf:09:c2:21:
20:9b:f6:25:ee:ad:6c:2d:d1:94:ce:46:65:7d:40:
09:79:2f:e6:59:3c:a1:1a:93:c6:fc:d3:a8:14:fd:
12:20:89:6d:86:7e:94:24:6f:d5:fe:60:e2:9e:fc:
0b:a6:34:3f:b2:8b:e7:3a:8b:bf:3e:35:25:3e:97:
30:55:9b:ed:32:76:ca:50:1c:7b:ab:e9:a6:7d:b7:
bd:f7:d8:9e:eb:46:84:af:fc:ae:6a:d2:09:0b:3e:
da:5e:d3:c1:26:c9:a7:51:cf:8f:42:ce:e1:9b:a2:
cd:b0:e1:c4:6c:74:7d:d8:2f:13:f5:16:ab:0c:cb:
78:35:8c:b6:27:3c:85:e2:0a:2c:f1:cd:8f:67:24:
ef:5e:c5:b4:c9:a4:95:fe:97:c2:ae:59:34:16:2a:
4a:1d:7a:11:3c:01:2b:9f:7e:9c:6b:2c:89:74:d8:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:04:E4:64:E2:76:17:C6:FD:22:8E:9C:E9:85:84:4A:EC:DC:A6:A1
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JATkZOJ2F8b9Io6c6YWESuzcpqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.89.0/24
78.135.110.0/24
188.132.196.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4a:71:e1:5e:d3:c1:36:de:98:3a:16:d7:57:3a:33:33:1a:
a5:2f:77:11:0b:6a:ce:f1:8e:9e:69:e7:2a:c9:c3:a4:3e:29:
85:ff:8b:c6:c7:bb:f5:7e:56:da:11:b8:1c:74:88:3f:22:fb:
7b:4c:60:81:c0:f3:42:cf:6f:3c:cf:ff:2e:63:f6:53:16:99:
60:87:1a:a8:59:a5:f3:15:30:ef:d5:68:3c:8d:3f:91:32:7a:
6d:fe:40:15:1c:e6:ce:55:4e:ea:48:a7:27:d6:a0:11:3a:87:
93:31:c9:42:72:bd:32:24:93:9a:73:ef:21:59:8f:fc:fa:6a:
04:8b:27:9a:94:1b:7b:ab:d3:c7:91:e1:5c:f3:e1:d9:8f:17:
8f:d6:27:f2:25:c6:6a:a5:4b:4f:e2:87:18:4c:a6:d9:50:ae:
ff:6f:c5:8b:1a:50:4e:58:eb:d0:36:eb:12:eb:14:ff:26:87:
fe:ec:ba:02:d2:4f:04:c0:60:19:50:0a:50:1d:f1:17:3a:35:
7e:60:9f:74:33:3b:e4:70:b7:cc:d6:e5:1a:db:ff:85:bd:89:
95:64:e0:79:e8:33:a6:4e:66:05:fa:64:91:d6:9c:23:2e:bf:
e4:48:86:82:ce:18:7e:a9:92:33:f2:5d:e1:15:3c:6b:62:ee:
c3:50:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 13:01:20 2024 by rpki-client on console-fra.rpki-client.org