Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JuNiJ2K5yYDvd9ZFc0JsdJgABT4.roa
File: JuNiJ2K5yYDvd9ZFc0JsdJgABT4.roa (raw, json)
Hash identifier: sK3HMwZhN/I3KkzhOrL323GQRNG9cv7lP2YVs9bL9z8=
Subject key identifier: 26:E3:62:27:62:B9:C9:80:EF:77:D6:45:73:42:6C:74:98:00:05:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01930C2F885514B9DAB9EEEF76A86C8C57BC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JuNiJ2K5yYDvd9ZFc0JsdJgABT4.roa
Signing time: Fri 08 Nov 2024 14:31:01 +0000
ROA not before: Fri 08 Nov 2024 14:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 185.206.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:2f:88:55:14:b9:da:b9:ee:ef:76:a8:6c:8c:57:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 8 14:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26e3622762b9c980ef77d64573426c749800053e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:58:4d:48:c4:f3:2f:09:32:38:53:dd:92:
4a:b6:23:dd:42:93:7b:fd:0c:cc:ba:18:78:06:ae:
a0:6e:7b:e6:62:4d:0b:a5:1c:42:33:72:57:7f:07:
25:4c:9c:0a:c3:fc:50:86:fa:e9:e5:d7:f9:f3:ac:
64:1d:5e:91:ee:f3:e6:c9:d9:4e:5d:97:a1:19:57:
44:0c:4b:8f:9c:08:8a:bf:61:72:34:0c:e8:84:68:
2e:39:5b:1c:60:d2:3a:4e:5d:72:59:2a:8c:0c:82:
30:b1:ef:73:8f:fa:2f:98:d7:1d:a4:de:99:ee:20:
17:26:0e:0b:10:08:8a:77:01:35:97:23:a5:b1:e2:
b3:1e:3f:c6:8e:a7:8e:52:16:0f:9d:cb:12:01:ec:
f9:07:9d:dc:25:61:d1:b3:19:97:5a:5c:92:dc:ee:
e4:64:ea:c9:f7:a9:dd:79:a3:32:80:22:65:bc:4d:
3e:24:44:14:c0:db:85:b8:fc:74:17:2d:fb:be:45:
36:1c:ad:d6:dc:5d:d8:fd:3e:9d:a0:19:46:df:b5:
1c:b8:af:b0:7e:74:31:7a:6d:cf:6f:e4:52:a2:e2:
cc:7b:b3:a0:9e:43:db:a1:97:f5:78:75:8c:f9:0f:
63:77:5d:cf:8e:90:a4:d1:b5:af:61:85:72:09:27:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:62:27:62:B9:C9:80:EF:77:D6:45:73:42:6C:74:98:00:05:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JuNiJ2K5yYDvd9ZFc0JsdJgABT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a4:ca:04:a5:22:82:85:ed:97:75:0c:fb:c3:5a:75:1e:8a:
43:aa:d4:a8:fe:23:96:40:3e:10:27:00:88:87:e6:62:8e:e2:
cb:81:60:11:1b:b7:c2:a6:35:eb:6d:79:55:44:39:9f:fd:ee:
ef:ca:b4:08:3f:fa:bf:0a:77:71:64:d8:2f:af:b2:aa:74:91:
7e:29:dc:af:c0:f5:40:9f:51:b5:9c:e9:e6:1b:2b:d8:55:5c:
f2:c9:12:99:d9:97:b6:24:dd:e8:b3:f5:fb:4d:ee:a3:28:41:
2a:4b:c6:49:76:35:9e:5e:a9:df:29:61:a8:6d:06:ba:d9:39:
c5:b9:80:00:22:52:73:fd:19:60:7f:82:22:db:50:c8:29:cc:
78:18:4c:1d:e3:e0:22:68:ee:36:1a:41:81:4e:4b:ed:6c:cf:
b2:1a:21:42:22:2d:42:71:ce:05:77:50:f6:c2:51:02:83:07:
9f:26:d6:4a:2e:8f:b8:4f:90:43:f3:23:14:23:b6:6a:d3:0d:
7e:3a:bc:8e:a6:db:9a:c2:cb:b5:0d:a7:e7:34:0e:a5:a2:fe:
b2:87:0d:00:eb:5b:f0:85:36:40:c6:bb:f5:5f:8e:6a:a4:af:
57:34:8e:0f:2a:15:73:3a:43:26:62:d3:3d:ca:0f:01:3b:50:
ed:0b:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:00:03 2024 by rpki-client on console-fra.rpki-client.org