Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/JBAZS55h3azCEgsxXF7cax9wOVI.roa
File: JBAZS55h3azCEgsxXF7cax9wOVI.roa (raw, json)
Hash identifier: 5h9WWkkygl9a4ZrM3yYEfTiOCpRnQyYEFAn9BFUhp7E=
Subject key identifier: 24:10:19:4B:9E:61:DD:AC:C2:12:0B:31:5C:5E:DC:6B:1F:70:39:52
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018EF0A3BBB2FA5B9A792E01A38AAB362A8C
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/JBAZS55h3azCEgsxXF7cax9wOVI.roa
Signing time: Thu 18 Apr 2024 09:57:25 +0000
ROA not before: Thu 18 Apr 2024 09:57:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59741
IP address blocks: 45.141.52.0/22 maxlen: 24
45.141.54.0/24 maxlen: 24
45.155.78.0/24 maxlen: 24
45.155.79.0/24 maxlen: 24
185.73.240.0/24 maxlen: 24
185.73.241.0/24 maxlen: 24
2a05:4740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:a3:bb:b2:fa:5b:9a:79:2e:01:a3:8a:ab:36:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Apr 18 09:57:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2410194b9e61ddacc2120b315c5edc6b1f703952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:84:9b:f6:49:a1:c1:7d:c6:4c:d9:e5:4e:
3a:d4:0a:75:aa:9e:a4:bc:9c:62:6d:fe:c5:26:15:
26:0e:22:9f:58:e5:07:de:c1:bc:97:89:dc:47:62:
c4:b7:67:73:58:c4:6e:dc:1f:dd:49:c1:2b:5f:24:
d5:61:e0:80:54:98:57:2b:fb:54:8f:61:1f:c0:2f:
74:95:17:ba:e7:b1:26:e7:69:71:f7:5e:7b:7e:6d:
c7:08:46:6e:cf:b7:41:52:c7:bf:37:11:e3:48:03:
b9:bc:b3:2f:e5:32:91:a6:68:44:ed:ee:dd:8e:3e:
fa:5f:61:c1:84:e8:61:8a:94:36:7c:d2:99:05:d2:
8a:2b:b2:20:66:90:b5:f3:a1:aa:b6:4c:a7:fe:2d:
aa:e4:b5:79:cc:40:ab:83:bc:49:25:d2:78:bb:c2:
28:67:08:ee:ee:40:fc:c5:5a:a3:22:f5:de:9c:a2:
4d:79:ee:b8:05:bf:e5:32:e9:1b:bc:53:60:8c:2c:
19:35:b5:0b:05:9f:f3:eb:41:a3:3e:25:a4:25:66:
78:02:c5:d7:56:a5:91:8f:d0:d6:01:4f:28:75:e1:
2e:9f:d8:67:39:a4:8d:1e:2f:f2:2d:c9:77:9c:4d:
53:c1:a5:da:93:34:b6:4b:8e:d1:85:8e:c2:b6:55:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:19:4B:9E:61:DD:AC:C2:12:0B:31:5C:5E:DC:6B:1F:70:39:52
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/JBAZS55h3azCEgsxXF7cax9wOVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.52.0/22
45.155.78.0/23
185.73.240.0/23
IPv6:
2a05:4740::/32
Signature Algorithm: sha256WithRSAEncryption
b4:d4:09:60:4a:41:2e:3b:fa:f3:e8:25:13:ef:e5:19:71:dc:
54:1c:6d:1b:83:1e:39:64:38:0d:72:7b:33:02:77:3f:8f:62:
73:b4:da:08:af:4a:93:44:3b:a0:6b:06:d4:46:56:9c:60:ba:
75:67:70:4f:71:be:66:89:5b:f9:dc:ca:0c:b1:5d:f5:1a:4b:
88:dc:0e:7b:8e:f6:f3:5c:8e:ab:44:25:40:37:dd:3e:b3:b5:
9c:c0:04:d3:31:7d:0e:a7:36:d9:46:6c:20:98:a0:7f:1f:fa:
fc:db:fe:13:f8:9b:46:3b:03:3a:36:8b:a7:13:73:70:66:40:
75:5e:61:ff:61:7a:11:bd:28:9f:4b:85:31:25:78:01:77:a9:
d1:aa:e9:05:f4:ab:3c:25:be:37:37:7f:29:45:60:4c:e5:95:
d1:6c:bf:84:54:f5:e2:9c:95:9c:67:c1:08:b9:48:70:c3:0e:
05:a0:da:c2:73:35:49:62:ad:33:61:30:e9:6f:0d:96:da:a6:
e8:31:b4:0b:32:5c:20:a6:ca:28:35:9f:12:e3:85:5c:16:27:
e0:50:9a:60:41:90:cf:ee:e3:f5:21:fa:2f:fb:ba:07:27:32:
e9:40:15:8e:ec:c9:7d:1d:2c:ed:95:f4:1a:4b:9b:83:7f:1e:
14:f6:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:15:26 2024 by rpki-client on console-fra.rpki-client.org