Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JcR1e-tB_VYMVMRspkyT4AzigwI.roa
File: JcR1e-tB_VYMVMRspkyT4AzigwI.roa (raw, json)
Hash identifier: 1izmIfOmxeH/Ax9+xKLtHxKUmKk93JUnpMzCSl5Z95E=
Subject key identifier: 25:C4:75:7B:EB:41:FD:56:0C:54:C4:6C:A6:4C:93:E0:0C:E2:83:02
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192363AFEEB6C13FF9AE3F1B67E0DEEDE3D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JcR1e-tB_VYMVMRspkyT4AzigwI.roa
Signing time: Sat 28 Sep 2024 01:24:48 +0000
ROA not before: Sat 28 Sep 2024 01:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
188.208.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:36:3a:fe:eb:6c:13:ff:9a:e3:f1:b6:7e:0d:ee:de:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 28 01:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c4757beb41fd560c54c46ca64c93e00ce28302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:52:48:7b:26:68:bc:4c:a7:88:71:b5:c2:
ed:43:be:2b:68:41:08:78:52:dc:0e:a9:29:64:6e:
f8:ec:45:05:30:8b:25:cc:e7:97:fd:82:66:38:32:
33:e4:a9:3b:c3:ae:d6:5c:ef:d4:00:76:85:15:79:
b5:29:96:da:3f:b4:c1:0d:6a:c1:fa:6f:95:f9:35:
e4:48:6d:ef:2f:87:13:f8:35:73:2b:ae:89:40:52:
78:c0:7c:6c:25:e8:2d:a6:a5:af:94:fc:a9:8a:2f:
8c:46:84:ef:c0:27:ec:f2:85:a3:0a:60:06:eb:e4:
41:3f:ac:b5:10:82:c2:a8:e2:fc:7b:75:7a:03:8f:
f4:ef:67:19:18:13:0c:f9:5e:14:9c:71:86:cc:a2:
63:56:22:8e:95:ee:72:dc:2e:0a:91:cf:ee:65:e3:
9c:89:05:98:48:9a:84:be:80:af:0d:5a:9b:a2:c4:
da:85:31:e6:97:b5:91:24:31:61:f0:3c:4e:8e:2a:
fe:3e:ee:57:cf:4c:ce:09:4b:ef:20:d2:f8:54:bb:
b7:77:98:d1:72:80:f8:2f:9a:12:89:04:b2:8f:fd:
1a:91:28:7f:f9:de:50:4b:3b:ec:1e:f7:59:42:fd:
87:da:d2:23:86:6a:8e:fe:62:f0:5f:cc:0e:d2:f0:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C4:75:7B:EB:41:FD:56:0C:54:C4:6C:A6:4C:93:E0:0C:E2:83:02
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JcR1e-tB_VYMVMRspkyT4AzigwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
185.141.219.0/24
188.208.110.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2a:04:ca:14:9d:e3:04:ae:62:74:57:8b:ad:2a:67:75:b8:
bb:c0:74:7b:8f:ab:f8:97:3c:2b:10:34:e0:3f:b5:0b:9c:98:
fb:a1:06:61:ff:19:44:81:64:69:00:16:5b:dd:d2:53:80:70:
6f:e7:f8:3e:54:6e:04:3f:0a:45:40:fc:a9:72:b9:ce:64:12:
67:01:37:a7:a4:09:70:b6:7f:44:39:27:c9:c2:53:0f:4e:05:
b0:4f:8c:da:e6:d8:cd:98:19:3e:2a:b8:90:0e:3c:de:41:bc:
c5:ae:2c:a4:fb:15:67:50:fc:24:2f:a0:31:c1:14:09:2c:b5:
c4:69:25:71:ec:b5:d1:f8:a7:57:5b:40:8e:40:82:24:a6:a6:
72:e6:f3:1d:06:93:47:c3:57:58:80:db:15:b6:4a:a6:78:27:
8f:c7:d6:3f:d8:d9:e4:a0:94:dc:04:4c:5f:0e:da:75:7f:f7:
a3:16:31:f3:15:fd:ff:85:8d:32:44:5f:ab:3e:7c:68:ad:d6:
54:88:2e:32:0a:cd:60:fa:ce:54:3f:68:7f:99:a4:63:bd:ed:
8d:26:75:ac:65:f3:94:77:2c:83:c6:bb:35:a7:24:a9:10:04:
68:45:f9:0b:00:64:bf:50:b7:7a:9a:ea:4e:01:66:f7:50:dd:
b2:9c:c7:5b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZI2Ov7rbBP/muPxtn4N7t49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwOTI4MDEyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWM0NzU3YmViNDFmZDU2MGM1NGM0NmNhNjRjOTNlMDBjZTI4MzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU1SSHsmaLxMp4hxtcLtQ74raEEI
eFLcDqkpZG747EUFMIslzOeX/YJmODIz5Kk7w67WXO/UAHaFFXm1KZbaP7TBDWrB
+m+V+TXkSG3vL4cT+DVzK66JQFJ4wHxsJegtpqWvlPypii+MRoTvwCfs8oWjCmAG
6+RBP6y1EILCqOL8e3V6A4/072cZGBMM+V4UnHGGzKJjViKOle5y3C4Kkc/uZeOc
iQWYSJqEvoCvDVqbosTahTHml7WRJDFh8DxOjir+Pu5Xz0zOCUvvINL4VLu3d5jR
coD4L5oSiQSyj/0akSh/+d5QSzvsHvdZQv2H2tIjhmqO/mLwX8wO0vA1iQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCXEdXvrQf1WDFTEbKZMk+AM4oMCMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSmNSMWUtdEJfVllNVk1Sc3BreVQ0QXppZ3dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALZCsAwQA
LZCuAwQAVmtkAwQAXHI2AwQAXXGrAwQAuY3bAwQAvNBuMA0GCSqGSIb3DQEBCwUA
A4IBAQB5KgTKFJ3jBK5idFeLrSpndbi7wHR7j6v4lzwrEDTgP7ULnJj7oQZh/xlE
gWRpABZb3dJTgHBv5/g+VG4EPwpFQPypcrnOZBJnATenpAlwtn9EOSfJwlMPTgWw
T4za5tjNmBk+KriQDjzeQbzFriyk+xVnUPwkL6AxwRQJLLXEaSVx7LXR+KdXW0CO
QIIkpqZy5vMdBpNHw1dYgNsVtkqmeCePx9Y/2NnkoJTcBExfDtp1f/ejFjHzFf3/
hY0yRF+rPnxordZUiC4yCs1g+s5UP2h/maRjve2NJnWsZfOUdyyDxrs1pySpEARo
RfkLAGS/ULd6mupOAWb3UN2ynMdb
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:14:36 2024 by rpki-client on console-fra.rpki-client.org