Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JRfwexNE5ovAzwnqhcForx1KOSE.roa
File: JRfwexNE5ovAzwnqhcForx1KOSE.roa (raw, json)
Hash identifier: /m68qBwTVJF5Ofw2WPAWWVAj/U81f6wCIcDi/ZYDDHM=
Subject key identifier: 25:17:F0:7B:13:44:E6:8B:C0:CF:09:EA:85:C1:68:AF:1D:4A:39:21
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F75E61D0736D68CD4A4B6BCF5486A75F9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JRfwexNE5ovAzwnqhcForx1KOSE.roa
Signing time: Tue 14 May 2024 06:59:25 +0000
ROA not before: Tue 14 May 2024 06:59:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 81.168.96.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.153.148.0/24 maxlen: 24
89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
213.130.153.0/24 maxlen: 24
213.130.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:75:e6:1d:07:36:d6:8c:d4:a4:b6:bc:f5:48:6a:75:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 14 06:59:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2517f07b1344e68bc0cf09ea85c168af1d4a3921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:43:b9:f7:45:ab:a7:3f:4f:77:e6:05:98:
99:2c:bd:f9:45:a8:27:e4:cf:63:3c:27:2f:09:bf:
a0:a5:01:aa:58:00:10:a4:10:90:30:d0:e4:5b:53:
fc:d4:8e:cc:be:b8:8a:2f:17:9c:c1:46:f0:7d:d6:
73:04:6e:71:ba:4d:f3:d0:87:0d:14:77:0f:5a:28:
67:c9:c6:93:1d:0e:ce:3b:d2:08:bb:16:bd:dd:dd:
04:03:f6:7b:38:18:01:62:76:f0:f3:f5:3e:66:1b:
83:50:52:0f:e6:11:a8:bf:64:46:6e:bf:d7:48:f7:
0d:61:65:cd:69:0d:e2:59:ab:25:dd:af:63:d2:79:
83:74:14:74:d5:40:e6:03:f9:36:fd:d7:ac:51:85:
50:e0:95:f7:24:78:c3:02:c0:98:50:d8:d8:b4:55:
16:35:42:7c:52:14:00:92:2b:90:77:eb:bf:1c:89:
b1:61:18:d4:f4:2a:9b:4f:31:9a:c8:48:7f:77:54:
30:53:a3:9b:4c:f1:60:a2:08:da:37:be:98:5d:93:
66:74:52:b3:0c:68:23:a3:d8:75:06:b0:02:aa:3c:
11:40:52:22:0a:0d:24:a3:05:6d:8c:ab:91:b6:2c:
68:8b:40:1a:af:8f:2d:d1:26:ed:80:16:7d:92:81:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:17:F0:7B:13:44:E6:8B:C0:CF:09:EA:85:C1:68:AF:1D:4A:39:21
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JRfwexNE5ovAzwnqhcForx1KOSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.153.51.0/24
82.153.148.0/24
89.213.107.0/24
89.213.112.0-89.213.114.255
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.227.0/24
213.130.137.0/24
213.130.152.0-213.130.154.255
Signature Algorithm: sha256WithRSAEncryption
0b:e2:8a:f5:16:3d:8e:67:da:86:08:eb:81:8e:87:8d:83:0e:
d1:82:f8:63:e9:cf:db:c4:67:fe:5d:76:8d:43:e9:58:24:a7:
af:d1:52:0b:2e:b9:56:fa:25:0d:7c:0b:bd:a8:49:57:5c:61:
21:6b:27:df:d4:54:1d:c5:3d:fa:e5:93:e2:49:02:c2:58:4e:
33:b3:7a:70:9e:a3:9d:27:de:23:b2:c6:5c:eb:e0:84:f3:e2:
ce:f2:26:6b:ce:5e:83:fe:1e:60:7d:15:c4:cd:38:6c:5d:de:
a4:ec:e9:8b:c6:f2:9e:ae:d0:8d:94:81:ad:82:32:fe:1e:8a:
ae:7b:5e:3d:19:af:f5:9e:bb:a6:2b:0a:87:74:7d:c2:ab:56:
0e:4d:53:ad:c3:24:c6:2d:25:b7:d5:1e:1f:50:cc:b8:f2:6c:
c8:22:d9:de:9f:37:38:14:52:76:c0:b3:f2:48:14:04:af:57:
e7:9d:77:d6:07:d3:7f:07:13:60:7d:3d:ab:89:7b:36:3d:3b:
b4:28:88:5e:e5:e3:f3:4b:dc:72:e3:45:18:98:70:16:a3:75:
f6:9f:aa:f9:7f:3a:d7:e8:a0:81:71:bc:1f:1d:1a:9c:82:b7:
e5:6a:74:e8:af:85:92:5e:0e:6f:d2:1f:eb:ce:e5:b9:8d:5f:
a1:8d:07:e9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAY915h0HNtaM1KS2vPVIanX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNTE0MDY1OTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTE3ZjA3YjEzNDRlNjhiYzBjZjA5ZWE4NWMxNjhhZjFkNGEzOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdhDufdFq6c/T3fmBZiZLL35Ragn
5M9jPCcvCb+gpQGqWAAQpBCQMNDkW1P81I7MvriKLxecwUbwfdZzBG5xuk3z0IcN
FHcPWihnycaTHQ7OO9IIuxa93d0EA/Z7OBgBYnbw8/U+ZhuDUFIP5hGov2RGbr/X
SPcNYWXNaQ3iWasl3a9j0nmDdBR01UDmA/k2/desUYVQ4JX3JHjDAsCYUNjYtFUW
NUJ8UhQAkiuQd+u/HImxYRjU9CqbTzGayEh/d1QwU6ObTPFgogjaN76YXZNmdFKz
DGgjo9h1BrACqjwRQFIiCg0kowVtjKuRtixoi0Aar48t0SbtgBZ9koH54QIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFCUX8HsTROaLwM8J6oXBaK8dSjkhMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSlJmd2V4TkU1b3ZBenducWhjRm9yeDFLT1NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQAUahgAwQA
UpkzAwQAUpmUAwQAWdVrMAwDBARZ1XADBABZ1XIDBABZ1XQDBABZ1XkDBABZ1Z0D
BABZ1eMDBADVgokwDAMEA9WCmAMEANWCmjANBgkqhkiG9w0BAQsFAAOCAQEAC+KK
9RY9jmfahgjrgY6HjYMO0YL4Y+nP28Rn/l12jUPpWCSnr9FSCy65VvolDXwLvahJ
V1xhIWsn39RUHcU9+uWT4kkCwlhOM7N6cJ6jnSfeI7LGXOvghPPizvIma85eg/4e
YH0VxM04bF3epOzpi8bynq7QjZSBrYIy/h6KrntePRmv9Z67pisKh3R9wqtWDk1T
rcMkxi0lt9UeH1DMuPJsyCLZ3p83OBRSdsCz8kgUBK9X55131gfTfwcTYH09q4l7
Nj07tCiIXuXj80vccuNFGJhwFqN19p+q+X861+iggXG8Hx0anIK35Wp06K+Fkl4O
b9If687luY1foY0H6Q==
-----END CERTIFICATE-----
Generated at Tue Jun 11 12:17:14 2024 by rpki-client on console-fra.rpki-client.org