Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JXa0g7O6BApZkhscDuspJws4Jec.roa
File: JXa0g7O6BApZkhscDuspJws4Jec.roa (raw, json)
Hash identifier: 3V7idOUHrJhUDVnGhJ7PBf/Fz4e/zzGKWCoRv6NVvCM=
Subject key identifier: 25:76:B4:83:B3:BA:04:0A:59:92:1B:1C:0E:EB:29:27:0B:38:25:E7
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794D2799B08DC6186F9F6D51C6B4C37
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JXa0g7O6BApZkhscDuspJws4Jec.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205964
IP address blocks: 104.239.0.0/23 maxlen: 23
104.239.4.0/23 maxlen: 23
104.239.2.0/23 maxlen: 23
104.239.6.0/23 maxlen: 23
104.143.248.0/22 maxlen: 22
104.143.254.0/23 maxlen: 23
64.137.70.0/23 maxlen: 23
64.137.105.0/24 maxlen: 24
64.137.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d2:79:9b:08:dc:61:86:f9:f6:d5:1c:6b:4c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2576b483b3ba040a59921b1c0eeb29270b3825e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:ee:03:63:4c:ee:5b:92:2f:6a:b4:48:5c:
b2:28:b5:06:04:56:97:9c:ef:8a:c5:c7:4f:47:26:
03:5f:d2:41:70:d2:0e:5a:30:aa:c9:08:36:c5:8c:
4b:48:99:df:ab:f4:0f:bc:7a:a7:48:54:89:dc:44:
bb:5a:49:0d:67:61:b1:be:8a:4c:45:5f:b6:d8:a7:
7f:2a:27:15:76:7e:c3:7f:1c:c9:fc:2c:fb:13:6a:
b7:50:68:fd:4a:d0:6b:f5:6d:b4:22:21:85:63:45:
81:12:fb:02:ae:7c:8c:03:f6:07:fd:e9:25:f9:10:
90:d0:f5:b3:52:44:a0:08:9c:66:16:5e:30:a8:cd:
78:6d:07:fe:6e:a7:21:40:69:b1:1d:3b:12:65:51:
b3:77:36:5a:84:4d:29:2f:76:dd:45:85:4c:88:d8:
d9:89:58:84:fd:18:38:b6:5b:d9:66:d6:ca:93:3d:
f5:ed:f6:7f:da:fe:a8:ab:a9:46:db:cc:05:c7:fa:
bb:d8:f4:89:cd:c9:13:80:75:47:95:6f:89:d9:34:
92:53:86:85:3c:c4:e4:a4:1d:aa:39:8b:8c:45:ba:
63:1f:cf:a8:cc:11:64:49:f2:97:9d:32:9f:49:72:
4e:8a:63:64:46:dd:7e:a2:a3:fa:02:cf:aa:70:e8:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:76:B4:83:B3:BA:04:0A:59:92:1B:1C:0E:EB:29:27:0B:38:25:E7
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/JXa0g7O6BApZkhscDuspJws4Jec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.70.0/23
64.137.105.0/24
64.137.107.0/24
104.143.248.0/22
104.143.254.0/23
104.239.0.0/21
Signature Algorithm: sha256WithRSAEncryption
79:02:c9:f8:9b:62:c0:99:79:20:25:48:d7:63:22:f9:57:4a:
e4:6a:11:57:58:f0:83:25:c0:df:44:38:fe:7c:42:c3:b5:a3:
2c:46:2e:a8:65:6e:97:55:5d:6a:65:7e:a1:8e:9f:44:32:87:
1f:4c:08:b3:27:76:f4:18:fd:d3:28:33:91:68:3a:94:18:cc:
d2:40:ff:0f:e5:83:1a:c9:2d:f9:f3:5c:5e:7d:aa:a7:eb:7b:
e1:2f:8c:83:a9:a2:18:ec:33:44:64:d0:c7:1f:6c:ce:12:ff:
81:b3:2e:52:78:e0:ed:a3:76:f5:d4:19:b1:d6:db:1c:1a:a6:
7e:6f:c0:2d:fa:59:ee:58:27:38:60:6c:fa:55:98:c2:ba:18:
ff:9b:16:71:ff:d9:5e:43:3d:46:8b:63:f5:42:98:dd:c8:0f:
fc:92:e9:d1:dc:28:2b:97:b5:7d:3c:d2:b5:d9:6d:21:ea:22:
b0:8d:19:d7:dc:33:9b:cd:7e:85:e0:34:cd:2a:01:d1:0a:39:
fe:10:f9:b3:2e:1d:1a:45:1a:bd:25:8f:03:9f:48:e0:10:bc:
66:c6:b5:c2:e8:6b:28:98:a0:5b:27:d1:33:da:cb:d5:ba:ed:
55:46:80:ad:c6:85:19:07:31:a7:6c:79:96:cf:14:67:5d:d8:
f9:5d:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:22:37 2024 by rpki-client on console-ams.rpki-client.org