Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/IjTHt34fcGQWGmoNOHkegXHL0Nw.roa
File: IjTHt34fcGQWGmoNOHkegXHL0Nw.roa (raw, json)
Hash identifier: Nox69MuD6x2YwTUuiHb7HXKEQNWjaq5zrOadyfMMFhY=
Subject key identifier: 22:34:C7:B7:7E:1F:70:64:16:1A:6A:0D:38:79:1E:81:71:CB:D0:DC
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018DD48F29987CDBFD69E951E4016405952C
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/IjTHt34fcGQWGmoNOHkegXHL0Nw.roa
Signing time: Fri 23 Feb 2024 06:02:48 +0000
ROA not before: Fri 23 Feb 2024 06:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213274
IP address blocks: 89.252.142.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.152.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.157.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:8f:29:98:7c:db:fd:69:e9:51:e4:01:64:05:95:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Feb 23 06:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2234c7b77e1f7064161a6a0d38791e8171cbd0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:fc:06:1c:31:94:01:cb:75:0d:5b:05:de:
65:93:6d:46:35:3d:26:73:24:5e:cf:e5:1c:40:8f:
4e:ed:ab:76:ec:91:65:59:25:21:cf:ef:cf:2c:c6:
8d:db:5f:18:dc:1b:ac:b1:0f:84:e9:64:48:4e:b2:
3e:ca:71:19:59:1d:98:a7:4b:df:ee:fe:9c:da:93:
d4:3f:07:69:e0:b1:d5:52:eb:01:3c:42:e1:28:15:
f3:4c:2a:20:a9:f9:62:1c:4a:79:cc:71:48:d4:22:
51:6c:da:e2:40:72:40:df:af:ff:6e:f0:f5:10:a5:
45:64:cb:38:28:24:54:b5:3d:ff:bb:7d:29:f3:b7:
e3:0a:57:6e:1d:65:8e:1c:dd:0d:e3:95:ee:4e:b7:
d2:d3:39:1c:21:26:d7:3a:f1:73:6b:d5:54:1e:02:
7d:85:65:b8:c6:af:46:92:e4:dc:c9:0d:b1:07:87:
f1:a0:08:01:d3:5f:cb:18:62:57:65:47:ad:b6:e1:
3e:00:bc:f2:f7:40:86:ec:8c:c6:5e:a6:e8:ad:b5:
c6:9a:a0:55:f7:96:bd:16:04:20:78:a6:00:bd:d0:
a1:eb:25:f0:ca:bb:a9:06:b6:2b:45:15:0c:3d:9e:
a1:5a:34:17:61:2f:6d:18:e8:b2:40:51:73:c0:a5:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:34:C7:B7:7E:1F:70:64:16:1A:6A:0D:38:79:1E:81:71:CB:D0:DC
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/IjTHt34fcGQWGmoNOHkegXHL0Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.142.0/24
89.252.144.0/24
89.252.147.0/24
89.252.149.0-89.252.150.255
89.252.152.0/24
89.252.156.0/23
94.102.10.0/24
94.102.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c9:de:c9:ca:b2:cd:98:5c:12:a4:07:df:76:06:a2:dd:d6:
db:3f:2e:b6:6a:37:0a:7f:b2:54:a0:9a:7f:22:34:97:d9:82:
3b:37:79:37:c1:3b:58:16:92:c5:15:7c:e2:b8:c4:07:58:2d:
16:4e:2e:5e:d9:b3:55:67:12:d5:78:1f:0b:3b:5d:c1:86:fa:
37:90:de:27:ad:e3:7a:7d:80:c9:18:1c:88:4f:7a:96:d9:70:
2f:ec:d2:28:87:b6:73:06:c2:b4:62:97:0c:33:82:94:83:4c:
59:75:bb:34:ba:16:1c:ee:1d:de:19:c3:26:35:4c:82:5c:c2:
14:22:c1:87:c9:5d:e1:01:af:4a:e3:c8:18:11:5d:b1:14:cf:
0b:bb:da:06:c2:6f:8f:4c:95:6b:0d:46:fd:dd:e1:2d:01:21:
98:35:90:e6:29:1c:8e:7b:dc:fb:88:3b:34:e3:0a:11:b2:18:
db:8e:e7:2f:a8:45:9e:5b:3a:bb:f2:77:b1:2e:8d:6b:13:af:
0d:fc:e3:34:a4:58:ff:9a:47:82:64:5f:e5:c5:a5:d2:8a:70:
00:e7:5c:67:59:26:9e:ed:20:72:d9:b4:85:cc:cc:fe:8e:4a:
49:18:19:1a:5b:3d:9f:79:90:30:0b:6b:7f:26:a5:7c:a1:04:
81:1b:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:15:34 2024 by rpki-client on console-fra.rpki-client.org