Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/InJumESECnQM4cyvPm7CTu5XFiU.roa
File: InJumESECnQM4cyvPm7CTu5XFiU.roa (raw, json)
Hash identifier: yaO/E2wKrr1UuwG+3Z6ax1DvYgP/V1341gwEisSCL3w=
Subject key identifier: 22:72:6E:98:44:84:0A:74:0C:E1:CC:AF:3E:6E:C2:4E:EE:57:16:25
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 018CC9BC488FF4D9318421FA76FA7395DE1A
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/InJumESECnQM4cyvPm7CTu5XFiU.roa
Signing time: Tue 02 Jan 2024 10:33:28 +0000
ROA not before: Tue 02 Jan 2024 10:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51248
IP address blocks: 185.8.56.0/22 maxlen: 24
176.74.216.0/21 maxlen: 24
158.255.32.0/21 maxlen: 24
188.124.56.0/21 maxlen: 24
158.255.39.0/24 maxlen: 24
193.161.84.0/22 maxlen: 24
5.43.224.0/21 maxlen: 24
2a03:1840:1::/48 maxlen: 64
2a03:1840:2::/48 maxlen: 64
2a03:1840::/48 maxlen: 64
2a03:1840:3::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:48:8f:f4:d9:31:84:21:fa:76:fa:73:95:de:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22726e9844840a740ce1ccaf3e6ec24eee571625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:4b:13:ff:26:d2:b3:7a:df:c2:4d:df:37:
fb:95:44:0f:51:5d:3c:e4:33:18:2a:4e:16:18:c7:
18:6e:bc:2a:f4:9f:42:c6:1c:8e:a8:28:39:2b:df:
4d:6f:20:1d:8d:52:63:d8:b9:2d:36:e4:f7:55:6c:
81:ff:fe:2f:08:8b:63:a1:cd:1e:4a:77:3b:56:0a:
e4:54:dd:1d:5a:ab:a0:2b:fe:e6:6f:88:52:be:ff:
98:26:71:a6:d2:d8:46:a8:f9:40:1a:1e:27:21:38:
79:43:de:60:24:2e:fb:15:8e:4f:72:42:12:4d:66:
ff:38:37:9d:e4:28:fa:9f:48:1f:78:7f:76:93:26:
28:6c:7c:0d:37:21:bb:c2:b8:7f:cb:0e:8d:c0:95:
3a:3c:f3:af:d4:22:b5:0b:f4:fe:a7:f9:c7:b9:da:
5e:b5:5a:ce:d6:d1:6b:fc:21:fe:d3:cc:40:6e:03:
25:1b:f3:5f:26:24:59:11:0f:81:97:2e:3b:35:a1:
ef:02:f9:68:8a:06:8f:31:ce:71:7a:4e:97:ef:ce:
06:ad:02:41:a2:01:02:0e:a8:26:a3:0c:73:df:6f:
34:dd:8e:ea:e9:02:aa:64:c6:3e:34:ee:4d:3b:c8:
65:ac:55:e8:df:ef:bd:00:7a:82:cf:22:90:ae:6b:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:6E:98:44:84:0A:74:0C:E1:CC:AF:3E:6E:C2:4E:EE:57:16:25
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/InJumESECnQM4cyvPm7CTu5XFiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.224.0/21
158.255.32.0/21
176.74.216.0/21
185.8.56.0/22
188.124.56.0/21
193.161.84.0/22
IPv6:
2a03:1840::/46
Signature Algorithm: sha256WithRSAEncryption
1f:54:b5:30:88:72:87:af:e7:b9:54:bf:de:f9:4d:62:a2:ec:
b8:74:60:62:3e:34:c7:15:7c:85:e8:20:2c:01:02:df:90:63:
0b:c1:29:f2:a8:3f:10:75:11:c1:3f:39:b8:a7:74:02:7f:b4:
b6:62:87:9a:d9:8d:15:80:6b:dd:79:30:97:73:10:7b:21:99:
b1:50:4d:1b:ab:c9:c4:8d:92:4a:07:78:b1:31:97:35:cd:4c:
70:ad:d7:64:f5:dc:4c:96:fb:ba:b7:f8:5d:50:d5:67:ee:96:
6f:ad:f8:24:11:23:11:6e:43:f1:54:4c:37:71:d6:7d:61:7a:
36:ce:e0:30:83:a0:90:62:12:90:56:f4:ba:44:b8:2d:b0:d0:
a1:8a:c3:af:c0:de:2e:07:51:4f:c2:82:6b:92:2d:4d:3c:07:
8a:37:a5:61:24:11:f6:71:da:c5:6b:46:e5:18:a4:62:2a:f1:
72:6e:2e:a2:7c:a2:69:e9:22:f3:b8:a1:61:b6:7d:93:1d:e7:
7e:c4:9a:61:88:4c:9c:65:dd:4b:c5:5b:96:d6:42:30:95:d5:
8f:07:3a:d6:30:df:7d:73:1b:f2:32:14:23:e2:3b:7f:0d:10:
dc:75:8e:62:84:ec:7b:b1:5b:11:a5:23:3f:f8:df:e1:0c:fc:
e0:60:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:02 2024 by rpki-client on console-fra.rpki-client.org