Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/JITisVs1C7mpm-hRov_sJ8_LNX4.roa
File: JITisVs1C7mpm-hRov_sJ8_LNX4.roa (raw, json)
Hash identifier: Slt5dP86F9zI+osa46Zx8sJRumCngjdQIvt/L44qGkI=
Subject key identifier: 24:84:E2:B1:5B:35:0B:B9:A9:9B:E8:51:A2:FF:EC:27:CF:CB:35:7E
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 018CC3B67B4CB6FBAA0A404A28F385EBB9D3
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/JITisVs1C7mpm-hRov_sJ8_LNX4.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.91.255.0/24 maxlen: 24
193.57.172.0/24 maxlen: 24
2a11:5ec0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7b:4c:b6:fb:aa:0a:40:4a:28:f3:85:eb:b9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2484e2b15b350bb9a99be851a2ffec27cfcb357e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:6e:b0:54:89:35:dd:65:a9:5b:48:7a:5e:
82:f2:af:05:8a:a3:fc:bc:dc:3b:a7:63:8a:cc:a3:
46:e0:da:9b:f2:4c:96:53:fc:47:8a:4d:e9:c1:38:
a6:77:af:25:df:e8:0d:a2:ec:38:ba:d2:10:56:31:
78:11:6c:2e:e2:96:36:94:f5:24:c9:16:23:d3:ae:
5a:d8:a3:da:f6:64:2f:d4:1d:39:a1:e0:81:74:12:
77:0b:08:e3:db:46:d1:ae:d3:82:25:ff:f9:4e:b8:
d7:a3:89:39:13:e1:a4:b7:41:95:39:aa:b5:29:be:
c5:8d:7b:57:b5:1b:f5:26:ba:74:ea:3c:c3:4e:ec:
15:b8:9d:7f:96:57:53:d5:81:34:e6:be:da:f7:cc:
eb:83:eb:83:de:e3:8f:ed:98:bc:c0:ce:20:e6:4a:
f5:fc:e8:d8:ad:5b:fa:1d:57:66:e9:b5:dc:82:67:
f2:93:e8:1d:05:a8:f8:e8:dd:12:3d:ee:ab:d1:1d:
5e:09:37:a6:ff:e2:2a:de:a4:ea:8b:ec:df:cf:ef:
88:43:8a:aa:a5:68:24:b0:82:30:25:ad:55:3e:a2:
1a:57:b5:8b:e9:11:f3:84:02:fd:ab:aa:8f:32:52:
41:76:23:91:ba:2b:d7:41:a5:16:b6:c2:44:5f:37:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:E2:B1:5B:35:0B:B9:A9:9B:E8:51:A2:FF:EC:27:CF:CB:35:7E
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/JITisVs1C7mpm-hRov_sJ8_LNX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.255.0/24
193.57.172.0/24
IPv6:
2a11:5ec0::/40
Signature Algorithm: sha256WithRSAEncryption
3c:8e:4e:bd:55:87:0b:20:12:c6:b5:95:7c:68:b1:f1:6f:cb:
73:5f:80:2d:32:a0:48:bd:b3:35:c1:a2:2c:3a:28:9d:27:da:
a1:df:65:69:ac:db:a6:a8:45:24:d2:8c:50:b4:f4:48:68:b0:
ef:c2:6f:b5:23:5c:72:19:b9:b8:fd:d7:61:e5:d7:b3:ac:aa:
7a:2d:7b:27:9b:d4:50:59:9c:29:bb:36:b7:c9:1e:fe:79:1f:
0a:b1:88:1b:f1:a9:7d:4d:ff:ee:90:b9:28:fc:bd:d4:21:b6:
6d:76:da:10:e0:22:c3:2c:67:b0:82:38:b4:53:5e:60:43:b3:
dc:26:9f:01:76:39:9a:5e:7b:61:f5:18:34:7f:72:c5:c6:8c:
6e:e8:9b:62:74:ff:8e:00:01:76:f9:d5:27:a8:12:84:e7:36:
8b:68:1a:9c:2a:27:ed:74:f9:cc:fb:ea:bf:20:0a:90:b2:ff:
9c:13:4e:1c:1c:c3:ab:5c:55:60:52:f0:c8:4d:67:b4:21:94:
ca:06:2e:29:cb:a5:dd:0b:7d:90:6a:45:1e:14:87:85:cd:b5:
92:c7:1e:f1:2b:39:03:15:ca:4c:29:89:84:d7:6e:31:04:04:
e0:86:fb:5b:e8:56:68:91:41:1a:63:69:3d:1b:f9:c3:b6:7e:
b2:af:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:41:27 2024 by rpki-client on console-fra.rpki-client.org