Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/jTPsAyzAGI46TtZesy17SlAaaxU.roa
File: jTPsAyzAGI46TtZesy17SlAaaxU.roa (raw, json)
Hash identifier: kcAmfum7usY5q2K0+OBaM6HRRHY2cTEy12DLrhGdt60=
Subject key identifier: 8D:33:EC:03:2C:C0:18:8E:3A:4E:D6:5E:B3:2D:7B:4A:50:1A:6B:15
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 018CC801B4C39D92AA5E85942F15AF533E03
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/jTPsAyzAGI46TtZesy17SlAaaxU.roa
Signing time: Tue 02 Jan 2024 02:30:04 +0000
ROA not before: Tue 02 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200470
IP address blocks: 185.104.103.0/24 maxlen: 24
185.104.100.0/23 maxlen: 23
185.104.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b4:c3:9d:92:aa:5e:85:94:2f:15:af:53:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Jan 2 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d33ec032cc0188e3a4ed65eb32d7b4a501a6b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:83:41:aa:ca:d2:d7:d2:4e:36:cf:0f:7d:
8f:3a:b4:81:30:ec:af:b0:98:41:88:69:70:e8:24:
bc:f4:e9:3b:66:4b:a9:22:b9:3f:60:10:fe:19:bb:
58:2e:b0:dc:5b:28:ab:c8:1c:ac:b4:3a:95:d2:76:
f5:1c:ec:9a:2b:ee:55:e9:c0:ca:b1:ea:ef:49:9b:
9e:90:b7:8e:86:9c:b3:e5:2d:db:cf:78:e0:5d:32:
3d:2d:0e:3f:05:f1:75:bb:e8:f3:6b:ab:1d:e2:18:
9a:87:0a:18:61:c1:1e:41:ef:d7:93:a4:5c:2a:24:
20:3e:2d:f4:93:70:21:30:59:ff:02:c1:6a:b3:ce:
4b:f5:fc:e1:fb:8f:0d:34:6e:15:13:0a:9c:64:f6:
ba:79:b5:3d:8d:9b:c1:76:74:2f:54:40:ab:b2:ea:
57:a7:b5:d5:6f:28:7e:bb:9f:43:04:21:cb:66:9b:
4f:1d:71:8a:77:e8:c1:9d:5f:2e:41:87:84:b4:3c:
dd:bc:8c:54:40:a8:65:ff:15:75:5a:ed:c8:5c:a3:
3c:63:fc:61:ef:2a:4f:1a:d6:a5:58:5e:cb:6e:fe:
45:58:41:fb:a6:05:8e:2e:9e:bc:1e:28:e6:73:5a:
83:43:84:83:c5:bb:f0:32:5a:1c:76:80:79:24:34:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:EC:03:2C:C0:18:8E:3A:4E:D6:5E:B3:2D:7B:4A:50:1A:6B:15
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/jTPsAyzAGI46TtZesy17SlAaaxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.100.0/22
Signature Algorithm: sha256WithRSAEncryption
35:99:e5:32:68:c0:8b:25:fb:09:db:2d:80:f5:97:c4:6a:93:
6d:8c:67:cb:16:cf:3d:f2:a8:c1:41:ea:98:d7:01:42:f0:a4:
18:c8:d9:1e:57:8d:b3:d7:6a:f9:e6:d1:bf:f5:03:ef:fc:0c:
0d:cb:ff:02:b7:16:bb:3e:0b:b2:e4:61:bf:f9:1f:a5:ba:8f:
bf:e3:87:1c:c2:db:93:3b:00:22:6d:93:d4:18:2a:65:74:f5:
90:da:89:5c:27:79:ac:0f:57:da:c8:d5:61:2a:de:75:b2:f6:
39:99:d7:84:12:bc:ff:ad:86:2b:10:81:d9:48:11:86:1e:5f:
68:fb:a5:5d:ad:ca:d1:e5:4b:b4:4a:0e:64:fb:ff:b9:43:bc:
56:c1:0c:bd:1a:5a:70:a5:f9:46:46:d2:35:fe:0a:b0:7b:0c:
fa:d3:b6:91:b8:c5:7a:5f:5c:9c:d1:59:d1:bf:12:47:29:46:
44:e2:80:c5:de:b1:eb:8d:db:2e:f5:f6:a4:e2:5f:ef:8e:a6:
ca:89:e6:c3:45:bf:5f:f2:d1:8e:6f:3d:18:57:3c:38:79:87:
d2:e5:2d:ca:2e:46:90:42:e0:e2:70:47:e0:56:0d:e5:17:95:
d1:93:27:fb:ef:ca:ef:1c:30:7e:05:78:36:ef:8f:cc:62:0a:
58:09:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:26:03 2024 by rpki-client on console-fra.rpki-client.org