Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jNRKvQkC1gY10PQNu9YG5XaA1SQ.roa
File: jNRKvQkC1gY10PQNu9YG5XaA1SQ.roa (raw, json)
Hash identifier: DOB3XEtSzS+SP4WnuCAGNajVy0L7as8KW2ghfMlD1ek=
Subject key identifier: 8C:D4:4A:BD:09:02:D6:06:35:D0:F4:0D:BB:D6:06:E5:76:80:D5:24
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC727669D18F4C7D259517FA72EAD7CB0
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jNRKvQkC1gY10PQNu9YG5XaA1SQ.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59958
IP address blocks: 217.153.252.0/22 maxlen: 22
85.219.176.0/20 maxlen: 20
89.174.160.0/23 maxlen: 23
89.174.162.0/24 maxlen: 24
217.153.168.0/23 maxlen: 23
89.174.192.0/20 maxlen: 20
217.153.84.0/26 maxlen: 26
217.153.85.192/26 maxlen: 26
89.174.208.0/22 maxlen: 22
89.174.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:66:9d:18:f4:c7:d2:59:51:7f:a7:2e:ad:7c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cd44abd0902d60635d0f40dbbd606e57680d524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:5d:bd:0e:a1:99:1e:7c:46:de:e1:61:6a:
d0:d3:4c:de:55:1c:b8:5d:bf:2e:0a:a6:fd:c5:9b:
a1:76:45:ad:f2:f9:0e:15:af:c1:e4:78:47:82:22:
b8:a8:aa:b0:ea:77:54:84:f7:7f:7f:f6:45:11:af:
ba:c4:64:34:9c:d3:82:a6:00:0b:56:5e:e1:64:f0:
e7:c2:cf:ab:02:dc:5a:5d:c0:ea:1f:01:fc:ef:67:
6e:f6:27:7c:be:a3:3f:a5:e2:c9:8c:7c:03:c6:8e:
f9:54:a9:20:71:a3:aa:c6:70:55:ed:64:50:c0:c2:
81:60:60:d1:55:ad:9e:01:61:dc:89:1a:47:42:7d:
1c:93:fe:5f:42:4d:99:00:2b:12:e0:9a:a7:4c:b9:
da:74:ce:bd:10:da:71:55:39:8d:b9:d9:80:4b:b4:
bb:73:58:60:74:21:cc:50:0f:d0:b2:80:24:85:ca:
62:a1:04:23:d4:d6:34:8a:95:af:95:db:0b:24:0f:
cf:1c:93:7b:dc:96:80:6a:22:c3:6b:16:20:4e:ea:
e7:a1:c0:1f:f4:45:b1:4a:cd:64:4f:a7:4d:1b:ac:
1b:49:0a:69:33:18:74:1e:d7:eb:1f:63:b1:95:4a:
3b:47:45:71:ef:5b:a9:ed:0a:da:a1:7a:43:9c:ec:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:4A:BD:09:02:D6:06:35:D0:F4:0D:BB:D6:06:E5:76:80:D5:24
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/jNRKvQkC1gY10PQNu9YG5XaA1SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.176.0/20
89.174.128.0-89.174.162.255
89.174.192.0-89.174.211.255
217.153.84.0/26
217.153.85.192/26
217.153.168.0/23
217.153.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:7a:8c:86:b7:24:60:99:01:4d:0c:c9:86:21:3d:8d:e2:ae:
1a:3f:b8:f6:1f:f2:53:03:e4:c7:6c:c0:9a:9f:05:dc:45:95:
06:e6:b9:0f:3f:02:44:0f:24:59:f6:93:e3:34:43:12:32:ce:
30:9a:7e:7a:d7:a2:f5:d9:e1:7f:7d:0a:06:1d:05:eb:52:56:
95:e5:29:2c:7e:5a:2a:42:f6:bc:7c:0e:9d:d3:7c:75:3c:82:
b1:62:b5:81:5c:57:7f:71:2c:ec:5b:f3:d7:1c:6a:24:2e:99:
fc:62:57:92:e1:9f:59:23:58:77:f3:7f:48:52:7d:58:3b:97:
c7:25:d7:66:79:1f:d4:05:cd:6b:e8:f5:83:2f:77:b0:b3:b5:
04:ee:ba:e2:10:f0:ee:23:6f:4b:da:aa:f3:a5:ab:10:73:5b:
91:03:fc:40:59:c2:c4:9d:08:63:06:50:7f:f1:85:4e:b1:71:
ca:cb:c1:5a:1e:a2:3a:c6:9e:41:d6:52:80:1f:17:16:46:38:
29:74:b5:53:f7:c5:80:de:f7:42:d1:10:f4:cf:32:f6:26:fc:
a2:71:dd:11:ff:c3:16:17:20:0d:18:8c:15:88:70:a8:52:39:
4d:07:6f:31:67:71:f2:6e:45:9c:14:e2:64:67:ad:5a:ba:69:
49:f0:ee:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:48:27 2024 by rpki-client on console-ams.rpki-client.org