Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/JR3ebzdmQ6o3IsZgWA6cddy9xVs.roa
File: JR3ebzdmQ6o3IsZgWA6cddy9xVs.roa (raw, json)
Hash identifier: jIaj/k6CaOOO0DsFDRupDRAkzno8vZkY8OH/cK5Y19s=
Subject key identifier: 25:1D:DE:6F:37:66:43:AA:37:22:C6:60:58:0E:9C:75:DC:BD:C5:5B
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01927098C16B01BB50F1734464EA17D5195D
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/JR3ebzdmQ6o3IsZgWA6cddy9xVs.roa
Signing time: Wed 09 Oct 2024 09:25:12 +0000
ROA not before: Wed 09 Oct 2024 09:25:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20857
IP address blocks: 31.14.96.0/22 maxlen: 24
37.34.56.0/21 maxlen: 24
37.97.128.0/17 maxlen: 24
77.72.144.0/21 maxlen: 24
80.69.64.0/19 maxlen: 24
84.247.8.0/21 maxlen: 24
85.10.128.0/19 maxlen: 24
86.105.244.0/22 maxlen: 24
87.253.128.0/19 maxlen: 24
89.41.168.0/22 maxlen: 24
91.142.254.0/23 maxlen: 23
93.119.0.0/20 maxlen: 24
95.170.64.0/19 maxlen: 24
141.138.136.0/21 maxlen: 24
149.210.128.0/17 maxlen: 24
185.10.48.0/22 maxlen: 24
185.108.112.0/22 maxlen: 24
188.240.52.0/22 maxlen: 22
188.241.148.0/22 maxlen: 22
195.8.195.0/24 maxlen: 24
195.135.195.0/24 maxlen: 24
2a01:7c8::/32 maxlen: 32
2a01:7c8:7000::/36 maxlen: 36
2a01:7c8:d000::/36 maxlen: 36
2a01:7c8:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:98:c1:6b:01:bb:50:f1:73:44:64:ea:17:d5:19:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Oct 9 09:25:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=251dde6f376643aa3722c660580e9c75dcbdc55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:16:f8:cc:97:58:59:2a:71:6c:85:93:e9:b9:
70:53:3b:93:a8:8e:a1:3f:3c:17:c1:6b:76:1a:13:
2d:3d:50:58:20:22:2d:e3:5e:62:19:4f:c0:bf:21:
8e:21:51:21:03:f9:a4:db:02:28:7c:ff:75:5a:d5:
6f:ba:e9:7c:b5:ba:83:ba:b4:29:0e:e1:39:dd:5a:
b7:60:28:40:76:3f:b5:ef:fb:59:4f:34:c5:69:b1:
48:20:01:b3:2f:68:ce:99:fd:99:e6:c6:02:ad:80:
d1:ec:47:7c:ff:3c:06:06:6d:24:f8:2a:ab:b0:8f:
21:38:51:1c:86:99:d2:1d:9f:d4:10:58:1a:39:8a:
1f:81:b3:6f:0e:2e:3f:ac:1d:7d:71:89:aa:24:85:
6d:a1:e0:4a:40:12:f8:45:5c:81:8b:d8:e9:9e:c3:
04:e5:99:15:c6:1f:67:13:44:12:9b:19:db:98:06:
07:52:f5:92:d4:53:cd:82:42:94:f9:ab:e4:81:80:
19:44:7d:71:d7:a9:eb:e5:21:70:ea:f0:74:e3:68:
5b:84:53:7c:8f:d7:94:5b:5c:ec:e6:cf:d6:cb:7f:
80:2f:ea:00:df:56:39:56:cf:18:62:85:a0:ec:55:
a7:41:d4:4c:13:60:05:09:72:d7:b1:0e:98:8d:b4:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:DE:6F:37:66:43:AA:37:22:C6:60:58:0E:9C:75:DC:BD:C5:5B
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/JR3ebzdmQ6o3IsZgWA6cddy9xVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.96.0/22
37.34.56.0/21
37.97.128.0/17
77.72.144.0/21
80.69.64.0/19
84.247.8.0/21
85.10.128.0/19
86.105.244.0/22
87.253.128.0/19
89.41.168.0/22
91.142.254.0/23
93.119.0.0/20
95.170.64.0/19
141.138.136.0/21
149.210.128.0/17
185.10.48.0/22
185.108.112.0/22
188.240.52.0/22
188.241.148.0/22
195.8.195.0/24
195.135.195.0/24
IPv6:
2a01:7c8::/32
Signature Algorithm: sha256WithRSAEncryption
60:cc:90:08:72:f9:cf:ff:15:77:a4:88:cb:20:be:b7:4a:73:
8a:cd:d8:ed:77:37:18:e0:6f:19:cb:bb:c5:46:8a:5b:b9:31:
d9:95:89:08:9e:32:c3:a1:87:12:dd:ba:9c:07:77:bf:ab:2b:
c0:67:38:af:40:40:f3:1f:6d:a1:2b:94:cc:24:91:b9:ab:d9:
93:a7:ff:83:5f:a0:80:61:18:39:70:19:2c:d1:24:f6:11:fa:
4a:a7:47:f0:15:a5:ce:19:fd:84:ae:15:07:d1:5c:a0:ff:cd:
35:d0:ca:d4:ad:ef:33:94:28:7d:a7:7d:da:38:df:28:a9:ea:
e1:d8:ad:8a:f6:33:59:ed:34:25:6c:0e:a5:13:4a:ec:af:69:
a0:6d:c6:93:15:51:d7:c0:a3:5c:4d:a4:98:4a:ac:94:03:a2:
54:62:39:67:ff:9d:6e:8d:5c:39:04:be:16:4e:fe:51:c3:f7:
96:7e:46:84:78:89:bb:d2:44:ab:67:15:d1:c0:06:2a:3f:2e:
98:af:7c:ad:58:cd:fb:32:a7:a2:2c:0d:a0:e3:9e:56:02:92:
62:f5:b1:cc:ed:d8:1f:a0:e6:43:b7:93:3e:03:5d:1f:7e:51:
f6:bd:63:b0:0c:92:b8:1a:82:9e:5f:cb:2f:7a:1a:78:a7:ec:
52:4a:2b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:22:34 2024 by rpki-client on console-ams.rpki-client.org