Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JuKV-1EqJmhibO4oDxSe5apZvow.roa
File: JuKV-1EqJmhibO4oDxSe5apZvow.roa (raw, json)
Hash identifier: HyPk849xXtFyEg26Rf8iA1Jad8WNBopJtcQi23GcWZs=
Subject key identifier: 26:E2:95:FB:51:2A:26:68:62:6C:EE:28:0F:14:9E:E5:AA:59:BE:8C
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01934E36200461114F583D1B53824D28FFAC
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JuKV-1EqJmhibO4oDxSe5apZvow.roa
Signing time: Thu 21 Nov 2024 10:13:10 +0000
ROA not before: Thu 21 Nov 2024 10:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3352
IP address blocks: 2.136.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
2.139.0.0/16 maxlen: 16
2.140.0.0/16 maxlen: 24
2.141.0.0/16 maxlen: 24
2.142.0.0/16 maxlen: 24
2.143.0.0/16 maxlen: 24
5.205.0.0/16 maxlen: 24
37.10.128.0/17 maxlen: 24
37.12.0.0/16 maxlen: 24
37.13.0.0/16 maxlen: 24
37.158.0.0/16 maxlen: 24
79.144.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
79.148.0.0/16 maxlen: 16
79.149.0.0/16 maxlen: 24
79.150.0.0/16 maxlen: 24
79.151.0.0/16 maxlen: 24
79.152.0.0/16 maxlen: 24
79.153.0.0/16 maxlen: 24
79.154.0.0/16 maxlen: 24
79.155.0.0/16 maxlen: 24
79.156.0.0/16 maxlen: 24
79.157.0.0/16 maxlen: 24
79.158.0.0/16 maxlen: 24
79.159.0.0/16 maxlen: 24
80.24.0.0/16 maxlen: 16
80.25.0.0/16 maxlen: 16
80.26.0.0/16 maxlen: 16
80.27.0.0/16 maxlen: 24
80.28.0.0/16 maxlen: 16
80.29.0.0/16 maxlen: 24
80.30.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
80.32.0.0/16 maxlen: 16
80.33.0.0/16 maxlen: 16
80.34.0.0/16 maxlen: 16
80.35.0.0/16 maxlen: 16
80.36.0.0/16 maxlen: 16
80.37.0.0/16 maxlen: 16
80.38.0.0/16 maxlen: 16
80.39.0.0/16 maxlen: 16
80.58.0.0/16 maxlen: 16
80.59.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
81.33.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
81.42.0.0/16 maxlen: 16
81.43.0.0/16 maxlen: 16
81.44.0.0/16 maxlen: 16
81.45.0.0/16 maxlen: 16
81.46.0.0/16 maxlen: 16
81.47.0.0/16 maxlen: 24
83.32.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
83.36.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
83.40.0.0/16 maxlen: 24
83.41.0.0/16 maxlen: 24
83.42.0.0/16 maxlen: 24
83.43.0.0/16 maxlen: 24
83.44.0.0/16 maxlen: 24
83.45.0.0/16 maxlen: 24
83.46.0.0/16 maxlen: 24
83.47.0.0/16 maxlen: 16
83.48.0.0/16 maxlen: 24
83.49.0.0/16 maxlen: 24
83.50.0.0/16 maxlen: 24
83.51.0.0/16 maxlen: 24
83.52.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
83.56.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.60.0.0/16 maxlen: 16
83.61.0.0/16 maxlen: 16
83.62.0.0/16 maxlen: 21
83.63.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
88.2.0.0/16 maxlen: 16
88.3.0.0/16 maxlen: 16
88.4.0.0/16 maxlen: 24
88.5.0.0/16 maxlen: 24
88.6.0.0/16 maxlen: 24
88.7.0.0/16 maxlen: 24
88.8.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.12.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.17.0.0/16 maxlen: 24
88.18.0.0/16 maxlen: 24
88.19.0.0/16 maxlen: 24
88.20.0.0/16 maxlen: 24
88.21.0.0/16 maxlen: 24
88.22.0.0/16 maxlen: 24
88.23.0.0/16 maxlen: 24
88.24.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
88.26.0.0/16 maxlen: 16
88.27.0.0/16 maxlen: 16
88.28.0.0/16 maxlen: 24
88.29.0.0/16 maxlen: 24
88.30.0.0/16 maxlen: 16
88.31.0.0/16 maxlen: 24
95.120.0.0/16 maxlen: 24
95.121.0.0/16 maxlen: 16
95.122.0.0/16 maxlen: 16
95.123.0.0/16 maxlen: 16
95.124.0.0/16 maxlen: 24
95.125.0.0/16 maxlen: 24
95.126.0.0/16 maxlen: 24
95.127.0.0/16 maxlen: 24
176.80.0.0/16 maxlen: 24
176.81.0.0/16 maxlen: 16
176.82.0.0/16 maxlen: 24
176.83.0.0/16 maxlen: 24
176.84.0.0/16 maxlen: 24
176.85.0.0/16 maxlen: 16
176.86.0.0/16 maxlen: 16
176.87.0.0/16 maxlen: 24
192.101.1.0/24 maxlen: 24
193.152.0.0/16 maxlen: 24
193.153.0.0/16 maxlen: 16
194.69.225.0/24 maxlen: 24
194.179.0.0/17 maxlen: 17
194.179.0.0/18 maxlen: 18
194.179.34.0/24 maxlen: 24
194.179.64.0/18 maxlen: 18
194.179.112.0/24 maxlen: 24
194.224.0.0/16 maxlen: 16
194.224.157.0/24 maxlen: 24
195.53.0.0/16 maxlen: 16
195.53.193.0/24 maxlen: 24
195.53.218.0/23 maxlen: 23
195.55.0.0/16 maxlen: 16
195.55.78.0/24 maxlen: 24
195.55.79.0/24 maxlen: 24
195.55.110.0/24 maxlen: 24
195.57.0.0/16 maxlen: 16
195.57.5.0/24 maxlen: 24
195.57.27.0/24 maxlen: 24
195.76.0.0/16 maxlen: 16
195.76.141.0/24 maxlen: 24
195.76.164.0/24 maxlen: 24
195.77.0.0/16 maxlen: 16
195.77.57.0/24 maxlen: 24
195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.235.0.0/16 maxlen: 16
195.235.95.0/24 maxlen: 24
195.235.188.0/24 maxlen: 24
195.235.225.0/24 maxlen: 24
195.235.241.0/24 maxlen: 24
195.235.242.0/24 maxlen: 24
212.170.0.0/16 maxlen: 16
212.170.156.0/24 maxlen: 24
212.170.159.0/24 maxlen: 24
213.0.0.0/16 maxlen: 16
213.4.0.0/16 maxlen: 16
213.96.0.0/16 maxlen: 16
213.97.0.0/16 maxlen: 16
213.98.0.0/16 maxlen: 16
213.99.0.0/16 maxlen: 24
213.99.44.0/24 maxlen: 24
213.99.59.0/24 maxlen: 24
217.11.96.0/19 maxlen: 19
217.124.0.0/16 maxlen: 16
217.124.182.0/24 maxlen: 24
217.125.0.0/16 maxlen: 16
217.126.0.0/16 maxlen: 16
217.127.0.0/16 maxlen: 16
2a02:9000::/23 maxlen: 23
2a02:9144::/32 maxlen: 32
2a02:9145::/32 maxlen: 32
2a02:9146::/32 maxlen: 32
2a02:9147::/32 maxlen: 32
2a02:9148::/32 maxlen: 32
2a02:9149::/32 maxlen: 32
2a02:914a::/32 maxlen: 32
2a02:914b::/32 maxlen: 32
2a02:914c::/32 maxlen: 32
2a02:914d::/32 maxlen: 32
2a02:914e::/32 maxlen: 32
2a02:914f::/32 maxlen: 32
2a02:9150::/32 maxlen: 32
2a02:9151::/32 maxlen: 32
2a02:9152::/32 maxlen: 32
2a02:9153::/32 maxlen: 32
2a02:9154::/32 maxlen: 32
2a02:9155::/32 maxlen: 32
2a02:9156::/32 maxlen: 32
2a02:9157::/32 maxlen: 32
2a02:9158::/32 maxlen: 32
2a02:9159::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:36:20:04:61:11:4f:58:3d:1b:53:82:4d:28:ff:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Nov 21 10:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26e295fb512a2668626cee280f149ee5aa59be8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:14:02:cb:65:ce:d2:08:09:01:69:b8:4c:
18:d0:5e:3b:cd:51:96:40:20:6c:79:e8:49:93:34:
a3:ee:ae:eb:c0:d4:b5:40:1d:b9:0b:d1:3f:c3:d5:
03:7b:a2:69:ef:e0:d1:09:a0:44:e3:19:80:a5:00:
09:56:d3:93:27:51:16:f8:e2:55:ce:ec:83:35:b6:
07:1a:f2:74:37:be:cd:5a:5d:75:cc:a3:38:da:e3:
1e:e3:1a:f3:a3:08:73:da:96:c4:9a:97:ef:81:12:
6a:6c:70:51:ed:7a:71:4f:eb:ae:d3:4d:bc:f3:3b:
4e:35:da:98:8a:15:4c:f0:c9:6f:74:2f:c0:7e:ab:
2c:4f:fc:8e:62:f6:ea:46:fa:36:8d:f7:4a:ee:19:
1a:4a:3e:65:10:a0:dd:cb:12:11:55:0d:a3:2a:04:
ff:c9:ec:5e:24:a9:01:9d:77:0f:66:9b:57:00:b7:
67:f7:70:d6:df:3f:70:2b:e6:d3:78:47:85:d9:e9:
df:31:18:4c:ce:73:a0:da:10:24:c7:b8:0d:76:63:
6d:6e:83:0e:4a:9c:e9:27:08:d8:6f:e2:11:de:1d:
50:4c:1c:e2:1f:e9:87:df:d7:d4:9c:16:99:e1:30:
ad:c7:db:23:f0:78:e4:5d:84:16:34:8f:9f:48:8d:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E2:95:FB:51:2A:26:68:62:6C:EE:28:0F:14:9E:E5:AA:59:BE:8C
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/JuKV-1EqJmhibO4oDxSe5apZvow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.136.0.0/13
5.205.0.0/16
37.10.128.0/17
37.12.0.0/15
37.158.0.0/16
79.144.0.0/12
80.24.0.0-80.39.255.255
80.58.0.0/15
81.32.0.0/12
83.32.0.0/11
88.0.0.0/11
95.120.0.0/13
176.80.0.0/13
192.101.1.0/24
193.152.0.0/15
194.69.225.0/24
194.179.0.0/17
194.224.0.0/16
195.53.0.0/16
195.55.0.0/16
195.57.0.0/16
195.76.0.0/15
195.235.0.0/16
212.170.0.0/16
213.0.0.0/16
213.4.0.0/16
213.96.0.0/14
217.11.96.0/19
217.124.0.0/14
IPv6:
2a02:9000::/23
Signature Algorithm: sha256WithRSAEncryption
e9:2c:9c:6e:1a:7c:71:37:b8:52:37:18:4c:7a:50:62:de:2b:
90:06:36:d9:75:41:28:92:11:54:82:b5:f3:98:eb:0f:3a:a0:
00:89:80:be:d4:d5:0c:9d:61:91:13:14:ed:da:44:7c:a0:3c:
ff:c7:ae:37:c7:3b:a5:3e:ef:63:0e:e6:11:e8:c2:06:8b:f4:
63:75:06:03:c1:95:fa:2b:5f:b6:2e:6a:cb:e4:d6:cb:35:12:
d2:62:77:ff:d2:f3:56:56:68:ee:3e:70:7c:82:cc:fc:e7:70:
39:37:18:47:2a:74:df:49:01:fd:64:5e:1a:b2:b5:13:09:36:
86:ec:66:18:a4:7e:a0:ad:e6:7f:bc:2d:b8:33:ac:46:5f:52:
54:cc:1b:13:f5:e1:b9:39:a7:91:2a:a5:2c:5b:31:2b:12:46:
08:06:70:26:c8:51:e7:41:65:3f:ff:7c:dd:34:87:8e:9c:eb:
bd:50:4a:c8:97:cc:0f:a6:5c:2f:76:4d:cb:2b:22:dc:54:cc:
b1:db:22:3d:d8:f8:f0:d7:3d:33:c3:25:a5:70:bc:7a:e5:3a:
92:28:7b:2f:cb:2e:e4:10:53:79:71:58:06:82:9a:7e:b8:68:
4d:dd:d1:e1:9a:f3:94:15:6a:e1:88:c4:16:53:5c:fc:cb:d5:
01:af:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:39 2024 by rpki-client on console-ams.rpki-client.org