Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/jIGeLlFkGYeyEGA_7KJYCXaEdJc.roa
File: jIGeLlFkGYeyEGA_7KJYCXaEdJc.roa (raw, json)
Hash identifier: HdlihBdllkqYZUsWZHFedoxyCezcqYX0InUR5frbouM=
Subject key identifier: 8C:81:9E:2E:51:64:19:87:B2:10:60:3F:EC:A2:58:09:76:84:74:97
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 018CED635B3F0AC558F87B11E264948C56AC
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/jIGeLlFkGYeyEGA_7KJYCXaEdJc.roa
Signing time: Tue 09 Jan 2024 08:42:40 +0000
ROA not before: Tue 09 Jan 2024 08:42:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 37.221.65.0/24 maxlen: 24
45.86.86.0/24 maxlen: 24
37.221.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 May 2024 13:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:63:5b:3f:0a:c5:58:f8:7b:11:e2:64:94:8c:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 9 08:42:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c819e2e51641987b210603feca2580976847497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:d9:a8:44:4a:f6:86:39:fb:8a:db:d7:dd:
d3:24:b3:14:d7:4a:98:16:ee:a0:a4:cf:e5:aa:d9:
76:a7:fb:20:2a:bc:93:6f:f6:e1:22:2c:d8:a7:81:
3e:d7:70:70:12:86:9b:1d:36:fc:76:44:12:62:8a:
b8:f5:ca:2b:00:d0:61:1b:c0:bd:a5:5d:c6:37:31:
f8:38:f7:22:d9:d2:11:06:03:28:8c:e2:89:66:22:
3c:38:e7:69:6e:69:f9:0c:b7:7e:23:93:4c:21:42:
fc:ac:36:28:c4:ac:c9:dc:16:52:c5:b0:5a:02:24:
71:2e:d6:b4:24:44:2e:8f:0d:f0:d1:c7:9e:93:b9:
49:aa:72:02:10:64:3a:ee:cd:cd:9e:d0:c8:52:c3:
fa:b5:c0:dc:d7:03:a6:22:da:6e:f7:71:e0:00:33:
6e:a1:53:02:76:b3:c9:eb:30:27:2d:4c:9c:b9:f9:
d6:c1:ab:4c:58:19:31:bc:f6:e2:bc:0b:b1:0b:46:
77:51:90:fc:b3:52:f8:21:a2:c8:49:50:58:e8:58:
0c:43:69:1d:e1:29:cc:46:4b:1f:22:78:df:d8:1f:
70:f5:7c:05:cf:f5:21:06:8a:9d:3d:66:cb:c4:ed:
83:ef:3d:ab:5b:3f:04:86:1c:d9:2f:19:e7:79:85:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:9E:2E:51:64:19:87:B2:10:60:3F:EC:A2:58:09:76:84:74:97
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/jIGeLlFkGYeyEGA_7KJYCXaEdJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.64.0/22
45.86.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ab:3b:cd:b2:97:90:0b:1b:10:62:2f:2e:96:02:9a:68:4f:
37:52:31:af:67:69:ad:73:00:e6:f8:8b:eb:ab:f9:30:18:d8:
b5:d6:2d:68:e0:92:e9:97:3e:56:48:a8:9e:29:28:35:92:56:
d0:4f:a5:60:e1:0d:41:b3:3e:2a:86:c2:15:5f:ba:2e:fe:3a:
71:61:27:e5:0f:f8:28:0a:c3:02:7e:56:82:f7:28:9a:9d:c8:
30:d6:7a:91:00:c9:d4:ed:4e:21:7f:4a:55:28:06:54:1a:18:
aa:8a:00:2f:14:29:ab:d1:5a:b8:25:9c:ed:f6:67:6a:68:84:
ff:ef:81:55:fd:15:88:be:56:47:35:74:ec:15:42:e2:25:a7:
84:17:d9:a7:8f:07:4a:46:8c:ce:3d:50:20:6e:19:48:60:9e:
6d:42:77:c2:15:f9:de:52:b0:c5:4d:b1:2e:15:f9:ac:bd:64:
b7:41:de:de:da:92:86:a2:6c:ef:67:72:fd:af:86:69:66:11:
01:90:16:6a:d4:4f:55:6a:6c:60:a5:9c:e6:6f:96:03:34:5a:
c5:f4:98:5c:c7:97:cf:8c:3f:6f:51:df:c6:09:a7:f8:70:0c:
3f:55:82:8d:20:3a:9a:8a:7b:2b:fd:71:a2:b6:58:c5:ad:ea:
2b:05:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 19:49:57 2024 by rpki-client on console-ams.rpki-client.org