Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/JnZj3XzUad4VKXXcdLxVfXbi55A.roa
File: JnZj3XzUad4VKXXcdLxVfXbi55A.roa (raw, json)
Hash identifier: M43+XUCrXB16WLrttdbuE2JN8vw+jMh8vY4H0bWA8a4=
Subject key identifier: 26:76:63:DD:7C:D4:69:DE:15:29:75:DC:74:BC:55:7D:76:E2:E7:90
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018FF2A67AF79A5C643E08B85B83F00FBAD6
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/JnZj3XzUad4VKXXcdLxVfXbi55A.roa
Signing time: Fri 07 Jun 2024 12:22:27 +0000
ROA not before: Fri 07 Jun 2024 12:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35751
IP address blocks: 45.133.32.0/22 maxlen: 22
193.56.188.0/24 maxlen: 24
193.56.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:a6:7a:f7:9a:5c:64:3e:08:b8:5b:83:f0:0f:ba:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 7 12:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=267663dd7cd469de152975dc74bc557d76e2e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:9e:b4:ac:aa:c1:85:2e:2e:64:f5:72:98:
a0:54:55:ae:28:d5:54:44:76:13:6d:65:d4:56:67:
e4:ec:7c:cb:a4:bb:e2:fd:c9:9c:41:7b:ad:d2:a1:
3c:dc:68:30:c8:90:bb:39:80:e9:95:01:ed:67:cb:
90:84:a7:77:52:85:ee:69:89:6b:76:b1:21:8c:86:
c2:88:4d:9a:e3:da:e2:f8:52:0e:bf:36:33:80:fc:
71:6e:a0:8b:cc:41:9f:7f:91:c1:0c:7b:c6:ed:54:
a1:b3:3c:07:26:bb:f4:8f:0c:c3:e2:bc:97:cf:a7:
3b:4e:41:73:72:6b:43:1a:f8:ac:5e:33:65:7d:ec:
5b:62:99:b9:c7:99:7b:93:f8:5e:d4:fc:86:f7:42:
76:4f:ee:7a:60:c8:93:72:9e:f0:13:5a:70:48:fc:
8c:64:72:14:33:b3:d6:31:dc:93:0d:a7:eb:ed:14:
bc:ca:ab:68:7e:55:1f:75:fa:cc:e4:23:db:f6:39:
d3:a7:cf:81:fb:34:9e:61:cc:e8:32:73:a0:ab:b2:
f0:c9:7f:0e:4b:a1:59:87:90:fb:4d:cf:02:a4:ed:
8e:35:87:77:1c:a2:06:9e:4d:46:26:f8:ee:90:d4:
ed:8c:53:cc:3b:60:aa:1d:30:4a:9c:0e:4b:52:24:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:76:63:DD:7C:D4:69:DE:15:29:75:DC:74:BC:55:7D:76:E2:E7:90
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/JnZj3XzUad4VKXXcdLxVfXbi55A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.32.0/22
193.56.188.0/24
193.56.190.0/24
Signature Algorithm: sha256WithRSAEncryption
58:09:a7:58:3a:cb:8b:03:5e:df:2b:ca:c9:90:60:45:9c:a1:
e0:d1:4e:53:1a:79:97:64:dd:46:6a:1a:02:9b:5c:e8:eb:00:
0a:c8:92:6e:0c:46:21:95:9e:b4:b6:2f:45:48:76:c9:10:29:
dd:fd:0e:0c:59:52:db:e4:69:ea:cb:56:66:85:d9:d6:1d:3d:
cf:4e:1d:a1:9b:9a:8f:55:f5:21:ab:43:d4:10:b6:4c:b2:c9:
a7:3a:05:a6:55:18:87:e9:77:2c:3a:20:2f:f2:51:d7:95:51:
c6:3e:63:6f:b2:58:3d:90:4d:2a:ad:ec:21:ce:74:af:08:3f:
d8:75:99:53:4f:4f:da:99:33:54:f7:d9:39:16:55:b1:90:e1:
e2:0b:66:d6:ae:40:53:9f:58:bb:97:1c:7a:61:15:e9:c3:de:
82:61:1f:66:4f:f0:cc:60:d5:51:57:3b:0c:8e:91:16:b6:c1:
bf:2d:0e:bd:d3:6b:98:9e:0b:07:ab:11:d9:a6:bb:10:33:76:
82:88:ea:f5:ac:8f:28:ac:58:15:2f:6d:27:d0:b0:69:96:7c:
ec:99:70:e6:ce:6d:40:31:59:31:be:ea:d4:34:46:de:82:f0:
f8:f7:5f:63:c5:1d:b5:61:b1:f6:fb:18:1b:a3:02:5e:b4:92:
5e:dc:42:ec
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY/ypnr3mlxkPgi4W4PwD7rWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwNjA3MTIyMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjc2NjNkZDdjZDQ2OWRlMTUyOTc1ZGM3NGJjNTU3ZDc2ZTJlNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsqetKyqwYUuLmT1cpigVFWuKNVU
RHYTbWXUVmfk7HzLpLvi/cmcQXut0qE83GgwyJC7OYDplQHtZ8uQhKd3UoXuaYlr
drEhjIbCiE2a49ri+FIOvzYzgPxxbqCLzEGff5HBDHvG7VShszwHJrv0jwzD4ryX
z6c7TkFzcmtDGvisXjNlfexbYpm5x5l7k/he1PyG90J2T+56YMiTcp7wE1pwSPyM
ZHIUM7PWMdyTDafr7RS8yqtoflUfdfrM5CPb9jnTp8+B+zSeYczoMnOgq7LwyX8O
S6FZh5D7Tc8CpO2ONYd3HKIGnk1GJvjukNTtjFPMO2CqHTBKnA5LUiSWHwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCZ2Y9181GneFSl13HS8VX124ueQMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvSm5aajNYelVhZDRWS1hYY2RMeFZmWGJpNTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYUgAwQA
wTi8AwQAwTi+MA0GCSqGSIb3DQEBCwUAA4IBAQBYCadYOsuLA17fK8rJkGBFnKHg
0U5TGnmXZN1GahoCm1zo6wAKyJJuDEYhlZ60ti9FSHbJECnd/Q4MWVLb5Gnqy1Zm
hdnWHT3PTh2hm5qPVfUhq0PUELZMssmnOgWmVRiH6XcsOiAv8lHXlVHGPmNvslg9
kE0qrewhznSvCD/YdZlTT0/amTNU99k5FlWxkOHiC2bWrkBTn1i7lxx6YRXpw96C
YR9mT/DMYNVRVzsMjpEWtsG/LQ6902uYngsHqxHZprsQM3aCiOr1rI8orFgVL20n
0LBplnzsmXDmzm1AMVkxvurUNEbegvD4919jxR21YbH2+xgbowJetJJe3ELs
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:48:15 2024 by rpki-client on console-ams.rpki-client.org