Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/jVwPAXESnSK8OkgYTla2s7ccqv8.roa
File: jVwPAXESnSK8OkgYTla2s7ccqv8.roa (raw, json)
Hash identifier: VJTYTXpp5SECPHl2NL755Mp+1UXK6f6lIWxuVUctoT0=
Subject key identifier: 8D:5C:0F:01:71:12:9D:22:BC:3A:48:18:4E:56:B6:B3:B7:1C:AA:FF
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 018CC8010CED0BA60A7B19B838ED19AC7ACD
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/jVwPAXESnSK8OkgYTla2s7ccqv8.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.178.165.0/24 maxlen: 24
185.178.164.0/24 maxlen: 24
185.178.166.0/24 maxlen: 24
185.178.167.0/24 maxlen: 24
185.196.98.0/24 maxlen: 24
185.196.96.0/24 maxlen: 24
185.196.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0c:ed:0b:a6:0a:7b:19:b8:38:ed:19:ac:7a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d5c0f0171129d22bc3a48184e56b6b3b71caaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:ec:c7:6d:08:4f:cc:b9:9a:c3:68:41:21:
b3:a7:f3:78:30:17:9a:0d:77:56:9e:f2:9b:c6:4b:
4d:bd:1c:09:16:a6:33:7f:03:22:89:82:9f:b7:fb:
d9:2c:89:79:cf:5d:b8:00:ea:81:d7:e0:be:79:3c:
82:62:7f:f0:65:42:e7:94:4c:c4:1e:d3:3f:46:c6:
ba:c0:79:5e:5b:a2:b8:81:6a:44:53:d2:ac:79:1c:
6f:b1:f8:83:10:a8:50:a9:b6:96:e3:1e:50:60:ac:
53:22:bf:d4:71:08:ca:cd:36:b2:ad:1a:09:b4:45:
7a:53:84:f7:05:7d:d3:5e:72:1f:de:d2:e6:f6:65:
e9:0c:4e:85:48:f7:f3:42:48:0c:cf:bc:c8:55:39:
f4:01:8d:45:fd:a5:8e:08:d6:d1:cd:f0:50:cd:c5:
05:07:40:6c:ad:d7:09:1f:8e:3e:4f:de:95:53:5c:
e6:d2:f6:2c:68:60:57:63:96:53:2b:c1:62:c5:55:
6d:19:28:55:b5:11:71:62:e1:58:fc:35:34:da:92:
e8:a8:a4:15:64:13:ac:38:66:89:1b:ff:e2:a0:84:
86:62:b1:5f:46:b0:ae:ef:f5:66:11:ba:9c:c0:b5:
67:78:de:e0:9b:0a:b4:4e:ff:4d:16:f1:94:d0:ee:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:0F:01:71:12:9D:22:BC:3A:48:18:4E:56:B6:B3:B7:1C:AA:FF
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/jVwPAXESnSK8OkgYTla2s7ccqv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.164.0/22
185.196.96.0/24
185.196.98.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:6c:8d:8e:74:ca:cb:9c:64:8b:93:d6:e2:ae:55:bb:85:cc:
cb:78:91:c7:10:17:51:5a:95:3b:ae:6c:09:70:33:5f:10:cd:
01:10:16:3c:54:40:8a:cb:fd:0b:de:ca:b9:2b:27:c1:1e:bf:
17:ec:11:09:e9:0d:46:dd:44:cd:cf:28:0f:2b:09:3a:9e:ef:
b6:41:6b:d7:87:7e:7e:a3:6e:54:a7:0d:48:2f:44:eb:07:0c:
09:56:2c:8b:cc:c7:bc:d8:a3:58:80:ac:5f:c4:db:d5:b4:35:
b1:14:40:53:a3:99:99:f1:67:d7:d3:fe:7a:20:64:61:87:2f:
ed:8d:d2:67:1f:b9:a6:16:32:1e:a7:b2:99:37:71:de:ea:3b:
f6:d2:3a:77:26:bb:31:52:7c:f7:a6:59:6e:fd:6c:9a:ce:d9:
cd:5a:7a:e0:37:4b:bc:b0:af:a4:b4:4a:93:62:87:08:7b:1d:
6e:c6:6a:a7:21:c7:66:8a:b2:6e:34:38:58:46:aa:10:ea:6a:
f8:f1:f7:f5:aa:48:38:1b:b2:f9:fd:b9:35:f8:a9:5f:0d:6b:
75:93:da:c9:e8:1d:34:69:7f:b8:97:d9:7f:7b:2d:c5:c2:9a:
aa:76:b8:0b:db:e5:14:7f:bf:3e:ce:78:d5:24:6c:0d:04:c3:
59:91:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:06:29 2024 by rpki-client on console-ams.rpki-client.org