Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JZv5h2YfOUNMvJt383N58HGPN7A.roa
File: JZv5h2YfOUNMvJt383N58HGPN7A.roa (raw, json)
Hash identifier: ZMnt0BNgdCioZ1aCfAoHohW45uu8jIqF7KChLPl9P8U=
Subject key identifier: 25:9B:F9:87:66:1F:39:43:4C:BC:9B:77:F3:73:79:F0:71:8F:37:B0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFA6D074AED4B4AB7E01B82024DBBC
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JZv5h2YfOUNMvJt383N58HGPN7A.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202578
IP address blocks: 193.34.234.0/24 maxlen: 24
185.233.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a6:d0:74:ae:d4:b4:ab:7e:01:b8:20:24:db:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=259bf987661f39434cbc9b77f37379f0718f37b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:c6:9a:0f:84:b3:b0:1a:21:b5:aa:9e:e9:
55:b0:a2:6a:c2:55:84:f5:93:26:12:7d:74:d4:54:
25:f9:7d:f3:4d:d5:2b:60:7f:37:af:fc:72:33:c8:
77:49:66:bc:a0:a5:72:40:ac:81:ff:55:18:65:b5:
2d:1b:7d:9d:ce:10:8f:89:9c:d9:03:3f:9c:eb:07:
1e:00:8f:d1:44:56:94:8a:3b:33:7e:f0:5a:93:b1:
59:05:1f:e0:f5:87:81:5a:d8:bc:91:e6:31:b2:38:
0d:95:f9:f2:2e:20:68:f1:b6:4d:26:5d:97:6f:4a:
3e:89:d5:5e:23:6a:1b:33:0e:2f:0a:80:e5:5a:40:
f6:35:48:31:a6:f9:8b:90:13:13:71:35:38:8f:73:
73:82:b5:37:65:42:b8:5c:82:3a:bd:1d:eb:c0:a7:
2b:2d:8b:e9:78:b2:aa:36:93:f3:5e:8c:35:08:15:
a8:f5:2a:06:23:5c:8c:11:8c:cd:29:96:3a:e7:af:
10:94:87:cd:4a:e5:3b:15:13:87:04:e0:17:26:9a:
38:5e:5d:bf:36:11:90:9f:13:3a:23:26:c3:a7:f4:
04:ee:fa:45:1d:30:93:b2:8f:de:e2:45:a3:e2:54:
57:d7:09:41:98:42:0b:3e:df:c7:d8:d3:f2:02:f0:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:F9:87:66:1F:39:43:4C:BC:9B:77:F3:73:79:F0:71:8F:37:B0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JZv5h2YfOUNMvJt383N58HGPN7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.201.0/24
193.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b3:ff:1e:eb:00:79:45:ce:4f:e4:ca:bc:7d:bc:a7:7f:ae:
ce:5d:2c:4a:bf:94:32:62:36:a6:30:6f:93:cd:d2:3f:b0:db:
8f:3d:a6:5a:65:9a:55:fc:ba:76:03:bc:8c:04:a9:de:e9:f9:
7d:c9:48:ca:7f:d0:84:84:34:e4:05:d6:e6:af:b0:31:f8:11:
06:3b:96:cd:22:33:11:a1:86:00:fa:ef:30:e0:e8:4e:b9:6f:
f9:b7:5f:46:82:e0:6f:c7:e6:5e:06:ab:6f:e1:55:6f:22:8f:
ce:cb:69:50:ec:5e:66:79:3d:f3:f5:8b:70:48:ce:8d:61:99:
62:91:f6:56:de:61:c2:1c:d3:c6:da:88:19:43:30:ce:c9:5a:
5a:d1:89:8b:d3:02:98:6b:21:15:93:d2:be:9a:f2:cb:dc:fc:
43:3e:59:b7:f0:25:87:45:d6:4b:38:02:2a:16:f0:cd:52:3a:
4e:09:66:f0:e5:64:c7:aa:71:bc:2c:80:4a:49:07:2e:de:98:
7e:a7:7d:eb:70:a7:61:49:16:1d:b9:b5:3a:80:ae:74:4d:be:
0e:85:ef:90:8a:06:11:f1:05:9a:25:ac:c1:1b:15:55:fb:52:
44:6a:35:95:4b:87:fb:2d:6a:4d:c5:2a:53:70:d4:c4:bc:a6:
7a:35:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:58 2024 by rpki-client on console-ams.rpki-client.org