Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JNYRWa0HJlX-8zNcSwgWSCNTp8c.roa
File: JNYRWa0HJlX-8zNcSwgWSCNTp8c.roa (raw, json)
Hash identifier: MPpctZmSeB86gu/MEzM8hbvLPEhAJQU1iLV7qOZwJZE=
Subject key identifier: 24:D6:11:59:AD:07:26:55:FE:F3:33:5C:4B:08:16:48:23:53:A7:C7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01900CFF45F162684BE479D717439E33D5C3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JNYRWa0HJlX-8zNcSwgWSCNTp8c.roa
Signing time: Wed 12 Jun 2024 15:09:34 +0000
ROA not before: Wed 12 Jun 2024 15:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.57.241.0/24 maxlen: 24
45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
45.144.172.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.147.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 07:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:ff:45:f1:62:68:4b:e4:79:d7:17:43:9e:33:d5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 12 15:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24d61159ad072655fef3335c4b0816482353a7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:4d:e0:2f:f0:b9:6a:f9:5f:a9:0c:68:38:
ce:5b:04:df:aa:9a:58:3a:b7:09:c9:93:a4:9c:92:
2e:08:b5:12:e7:c5:4f:ab:67:2b:92:b7:5d:53:1b:
4a:ea:38:ce:7b:89:10:a9:54:73:27:73:3a:64:6a:
6e:f2:a7:22:bb:76:95:d2:d5:bd:19:e6:46:fb:4e:
e8:1a:4f:c5:78:e5:00:84:5d:73:24:83:ba:64:94:
da:d6:3a:44:80:4e:2d:1d:37:98:a3:b0:20:fc:69:
32:c4:6b:55:75:4f:65:bd:27:96:9b:e2:a4:fc:3a:
54:28:9f:d6:73:46:04:06:ac:9d:93:93:19:0e:a0:
0f:40:21:de:6d:b1:25:0b:65:6b:72:3e:8a:9d:ab:
ca:ba:0f:6f:0a:a9:98:b6:71:4f:fa:6a:aa:02:11:
46:a1:91:e7:5b:f2:bb:bb:8d:51:6e:d1:e4:db:7d:
46:8e:cb:82:93:a5:ed:77:57:4b:3e:5e:b5:dd:35:
f3:77:34:5e:41:14:0f:6a:ca:2c:56:16:2d:40:41:
ff:a0:2b:31:99:67:be:a6:33:c3:ae:b7:b2:03:30:
99:29:75:e1:3a:06:f5:00:3d:9b:5b:cc:ad:81:dc:
fa:19:5e:c5:af:f1:b9:6a:5d:bb:87:11:99:83:c1:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:11:59:AD:07:26:55:FE:F3:33:5C:4B:08:16:48:23:53:A7:C7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JNYRWa0HJlX-8zNcSwgWSCNTp8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.135.181.0-45.135.183.255
45.144.172.0/24
86.107.100.0/24
89.34.106.0/24
92.114.32.0/24
93.114.183.0/24
94.177.147.0/24
176.223.66.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
92:99:5d:e9:ae:d4:a0:d1:12:25:5a:d8:2e:35:8e:58:1b:26:
50:58:c1:9e:f4:c7:d2:17:aa:07:90:8e:74:4d:07:b8:79:d2:
e5:25:9e:68:cd:c7:30:57:a0:8a:0c:ea:36:09:c1:28:d4:4a:
66:de:fc:69:4e:d2:e1:cf:aa:61:08:33:22:46:e5:95:2e:e2:
82:65:9f:c1:9f:ba:f4:fe:0c:e3:dd:6a:72:e3:9c:a1:37:6d:
a6:dc:b7:5f:31:e6:70:ec:4d:81:57:19:ce:68:be:8d:50:f2:
6f:b0:aa:3b:48:25:46:43:6d:cc:f5:48:71:ef:79:0c:5a:14:
67:e1:60:a3:2e:6d:29:61:72:22:a9:75:3f:45:fa:a4:01:62:
6e:1c:db:d5:42:9c:b4:e4:ed:db:f7:17:00:3a:c1:42:15:98:
c4:6c:ae:c7:27:ea:d7:d3:b1:de:ad:ff:8c:e6:4b:69:c6:47:
40:97:fd:39:57:80:3d:4a:75:f0:cb:a1:9e:7e:a2:cf:8a:91:
c9:63:36:62:da:de:f2:79:fc:3a:0a:a3:b8:36:3d:b3:f4:34:
69:a6:4a:0f:8e:40:15:3e:0d:5a:5e:27:99:ee:6d:dd:d9:7e:
3f:21:02:fb:56:cf:cf:62:65:d5:da:95:14:b2:53:18:38:18:
b4:6b:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 12:47:53 2024 by rpki-client on console-fra.rpki-client.org