Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JnuPwi_eg-9dfR1jTtUBkfQv4Tc.roa
File: JnuPwi_eg-9dfR1jTtUBkfQv4Tc.roa (raw, json)
Hash identifier: Dx4gC9W/B4vYZnb1r72pR/ltvMn0he0DoHurkjI25JM=
Subject key identifier: 26:7B:8F:C2:2F:DE:83:EF:5D:7D:1D:63:4E:D5:01:91:F4:2F:E1:37
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01936261B2E22863F7817F8842D980509FC3
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JnuPwi_eg-9dfR1jTtUBkfQv4Tc.roa
Signing time: Mon 25 Nov 2024 08:13:10 +0000
ROA not before: Mon 25 Nov 2024 08:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214036
IP address blocks: 31.210.50.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:61:b2:e2:28:63:f7:81:7f:88:42:d9:80:50:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 25 08:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=267b8fc22fde83ef5d7d1d634ed50191f42fe137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:91:4b:f3:7d:f2:3f:3b:0a:3b:62:1d:29:
c5:fa:1f:d5:85:ff:cb:18:6a:86:f1:37:f2:f5:06:
04:f3:3a:76:9e:b9:47:01:e8:bd:8e:1a:79:1d:36:
5c:97:7d:aa:54:32:e2:c4:c2:f0:1a:4d:ff:a1:b7:
03:1a:5f:53:6a:12:ce:9f:58:4c:51:db:5f:18:59:
c4:59:b7:93:63:a7:26:c4:1e:a4:04:b6:7d:f4:f1:
2c:41:cb:9e:5f:0a:bd:5e:48:1a:5c:a5:d0:bf:b9:
12:44:d7:e3:d4:85:7a:ef:15:3d:80:d6:91:df:2c:
7e:18:2a:49:04:db:05:7e:5d:fb:8d:aa:0e:b8:d4:
d0:73:2d:a0:e9:0f:6c:f6:aa:fc:f6:6c:be:b0:1b:
41:98:85:15:7b:78:76:26:49:d4:a4:38:0b:aa:f5:
a3:2a:7d:fd:17:ab:de:13:e5:c2:2b:e2:01:41:de:
0b:91:d5:65:f3:29:9e:36:18:31:c6:a6:43:b5:1e:
4c:b8:45:1f:b8:25:5a:b4:13:42:3d:e2:b0:84:f7:
f2:fe:53:cd:b4:0c:b6:fc:0c:23:bf:4a:b9:58:70:
f3:76:39:59:7b:a9:ce:ab:16:46:9b:ee:9d:3f:a6:
70:a0:88:b9:2e:d5:7b:1d:c7:15:93:5a:2c:99:dd:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7B:8F:C2:2F:DE:83:EF:5D:7D:1D:63:4E:D5:01:91:F4:2F:E1:37
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JnuPwi_eg-9dfR1jTtUBkfQv4Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.50.0/24
77.92.145.0/24
188.132.129.0/24
188.132.153.0/24
188.132.183.0-188.132.184.255
Signature Algorithm: sha256WithRSAEncryption
51:c8:22:d5:49:7f:36:d3:92:ef:79:38:07:fa:72:57:82:45:
fb:2b:bd:62:ba:3f:68:a5:1a:19:2d:59:61:8c:5e:31:dc:7f:
4c:36:15:88:a8:ce:ea:09:68:dd:97:e5:e7:eb:3c:d3:79:49:
4f:39:38:15:31:29:6f:4b:ff:fd:92:27:1f:25:dc:5b:53:e4:
16:1d:1c:d1:8a:cb:f3:a5:e2:82:26:4c:c0:04:4b:85:3d:a0:
b4:18:57:e1:18:5a:01:12:64:f9:24:40:c5:e6:a2:fa:42:02:
d0:79:55:8a:65:e6:f6:93:42:7e:a7:8d:40:80:8d:23:69:df:
42:25:65:c9:4f:6c:bd:28:31:c0:36:fe:53:2e:99:fb:de:07:
1a:f4:d7:bd:b7:df:69:f7:17:6f:9a:b1:88:21:8a:77:93:e8:
cb:6c:ba:0d:4c:06:35:f6:52:41:73:37:3b:d3:5b:33:a9:0a:
ae:6c:d9:d3:5c:7d:fd:c6:29:f0:48:f7:d7:ba:56:86:ec:5a:
5b:6e:70:27:d7:6d:1d:86:63:08:a4:f7:a1:70:90:7b:04:a8:
58:93:2a:f7:4b:86:1c:82:a7:55:3a:41:bc:97:0f:7f:12:88:
32:fa:8c:3e:ef:66:5f:1a:57:0c:91:6a:16:a9:c4:67:f0:81:
a8:25:b9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:35:48 2024 by rpki-client on console-ams.rpki-client.org