Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/JnCkiKhvXxETkeqIMOxM3OpQiKQ.roa
File: JnCkiKhvXxETkeqIMOxM3OpQiKQ.roa (raw, json)
Hash identifier: avpohwv7ZMLroTxc53x7L5cPqLLkDouG5Aw9z714tqc=
Subject key identifier: 26:70:A4:88:A8:6F:5F:11:13:91:EA:88:30:EC:4C:DC:EA:50:88:A4
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 018CC42525D66ABE1676260C6375850AB2A5
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/JnCkiKhvXxETkeqIMOxM3OpQiKQ.roa
Signing time: Mon 01 Jan 2024 08:30:17 +0000
ROA not before: Mon 01 Jan 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34966
IP address blocks: 194.30.174.0/24 maxlen: 24
185.237.33.0/24 maxlen: 24
185.237.32.0/24 maxlen: 24
153.92.184.0/23 maxlen: 24
153.92.186.0/24 maxlen: 24
195.238.224.0/24 maxlen: 24
2a0c:280::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:25:d6:6a:be:16:76:26:0c:63:75:85:0a:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 1 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2670a488a86f5f111391ea8830ec4cdcea5088a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:b9:02:99:41:f5:a8:b8:3c:d5:6c:22:80:
f5:a3:f6:c2:c8:b9:2b:52:a7:a5:dd:5e:5c:28:21:
75:b4:b6:5d:66:3c:a2:fe:8f:b9:2c:c4:17:e9:55:
ca:41:0f:ec:aa:a8:37:ae:5d:b7:30:21:b1:23:72:
e5:55:5c:88:30:ff:a4:7a:85:50:7c:10:24:92:0e:
78:49:b0:05:57:56:8f:40:37:05:38:4c:1e:00:bc:
ed:6f:23:a0:4d:28:07:98:7e:9f:d3:36:1b:91:35:
36:28:8d:11:18:74:31:73:67:f9:4a:38:71:31:41:
fc:b4:2c:77:b8:d4:de:de:34:bc:08:3b:a5:e5:78:
9d:8e:d6:c6:5d:ab:aa:a3:12:2e:27:d8:23:a6:1a:
27:04:dc:fc:41:3c:e3:70:8c:83:8b:d9:e1:cb:70:
f7:d6:69:73:b3:df:93:e6:e7:ec:49:a6:60:a0:51:
7f:d4:26:20:29:d2:ae:cd:ef:8d:9e:33:95:a7:80:
11:93:d9:3a:65:9a:d3:09:40:79:57:2b:71:06:cf:
23:30:b0:6a:54:54:1a:3a:c4:d1:2c:5c:58:37:31:
23:4f:c7:13:e4:51:a8:64:1c:b9:d9:a0:47:eb:c3:
1d:34:74:18:25:1a:52:91:56:4e:f1:a2:8e:6f:8a:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:A4:88:A8:6F:5F:11:13:91:EA:88:30:EC:4C:DC:EA:50:88:A4
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/JnCkiKhvXxETkeqIMOxM3OpQiKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.184.0-153.92.186.255
185.237.32.0/23
194.30.174.0/24
195.238.224.0/24
IPv6:
2a0c:280::/30
Signature Algorithm: sha256WithRSAEncryption
4a:85:5e:bd:e6:fd:93:48:bd:61:ad:08:98:b1:f6:22:c2:3e:
3b:c5:59:08:69:7d:5c:b2:69:84:ae:54:ec:f7:ee:1e:61:fe:
12:5a:36:ed:dc:c5:9d:fa:0a:14:d6:60:f1:70:24:3d:a6:63:
42:16:3f:73:0c:16:c2:85:56:58:eb:31:c7:0f:60:01:34:bd:
25:09:f9:1f:5d:8b:19:73:ab:b0:5e:28:7a:61:2a:e9:b9:96:
3a:42:ea:ef:f0:aa:f6:db:7d:12:a4:00:3c:fb:57:f0:eb:de:
9a:ba:a8:7f:aa:8e:1f:f5:02:1f:5c:d6:b7:d1:8f:d5:00:b5:
71:61:89:86:ee:c4:09:30:c8:fc:78:bd:0f:86:ff:c5:12:b6:
88:a2:fa:ef:fb:6a:d1:59:7c:f2:67:e8:37:95:25:50:b5:0f:
4f:2e:51:78:3c:ec:63:53:da:eb:e7:0d:6e:1b:3d:88:76:5d:
8d:a8:68:f7:73:a3:1c:65:c7:1a:51:7c:06:f7:cd:7c:47:fd:
a7:dd:0a:29:b5:64:9c:9f:d6:f4:15:0e:69:47:98:31:80:cf:
b8:a5:ee:ce:8c:fd:92:1b:b3:85:cc:8b:c0:00:9a:4f:fb:c5:
82:aa:f7:e8:2d:84:9e:de:bb:19:e9:15:64:e5:f4:7a:4c:45:
54:14:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:43:26 2024 by rpki-client on console-fra.rpki-client.org