Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JFgg1GpXRly7Q84b4T3gdc03ov0.roa
File: JFgg1GpXRly7Q84b4T3gdc03ov0.roa (raw, json)
Hash identifier: Jexq7H2/YBPmh/coYuyD15VmI1rhO6PnbWq/RUHltWQ=
Subject key identifier: 24:58:20:D4:6A:57:46:5C:BB:43:CE:1B:E1:3D:E0:75:CD:37:A2:FD
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802EB88C7EFDDCAE25FA205D5BE3E03
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JFgg1GpXRly7Q84b4T3gdc03ov0.roa
Signing time: Tue 02 Jan 2024 02:31:23 +0000
ROA not before: Tue 02 Jan 2024 02:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42649
IP address blocks: 193.234.83.0/24 maxlen: 24
193.234.86.0/24 maxlen: 24
193.180.121.0/24 maxlen: 24
194.103.4.0/24 maxlen: 24
193.235.73.0/24 maxlen: 24
193.183.239.0/24 maxlen: 24
194.68.159.0/24 maxlen: 24
193.234.255.0/24 maxlen: 24
193.180.20.0/24 maxlen: 24
194.68.43.0/24 maxlen: 24
194.68.160.0/24 maxlen: 24
192.165.127.0/24 maxlen: 24
192.165.138.0/23 maxlen: 24
193.235.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:eb:88:c7:ef:dd:ca:e2:5f:a2:05:d5:be:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=245820d46a57465cbb43ce1be13de075cd37a2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:f7:d2:96:d5:d6:d8:d4:05:45:73:24:30:
80:dc:40:57:bb:de:9d:47:9b:35:3d:f1:81:5c:2a:
46:93:97:02:56:10:f8:ca:38:30:a8:c4:ad:57:3d:
20:88:6e:33:16:06:d2:7e:9d:15:08:b0:6d:4d:d4:
73:8e:d9:81:28:1f:fd:3f:cc:48:54:16:d7:5b:8e:
4d:42:ea:fc:1c:14:61:10:f5:52:2a:e6:19:32:36:
a0:df:f1:67:39:f0:b3:7b:2c:df:ab:81:08:fc:f8:
6c:f4:d3:d9:b4:f3:c0:12:fb:5b:7c:94:1a:8a:c4:
fc:dc:34:d7:05:e3:14:b4:cd:06:ee:7b:26:ac:22:
62:9d:e0:44:bd:91:47:3d:a8:d4:be:11:ce:ff:45:
04:d0:ca:c8:13:0f:88:bb:69:5f:5b:95:bb:0c:12:
7f:e8:7b:01:0d:45:1b:48:3d:32:8c:11:79:db:cd:
e9:86:89:af:0c:fd:af:77:c6:f2:65:9b:35:4f:79:
c0:97:62:bd:72:74:25:cf:2c:2c:90:a3:59:74:4c:
7f:82:77:8b:6a:a2:79:bd:3b:9e:ba:4a:0b:56:15:
55:fa:9e:58:d2:39:c7:f6:19:4b:af:85:ba:32:0a:
d8:27:8f:d0:92:af:02:6d:a0:05:2c:b9:92:c3:70:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:20:D4:6A:57:46:5C:BB:43:CE:1B:E1:3D:E0:75:CD:37:A2:FD
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JFgg1GpXRly7Q84b4T3gdc03ov0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.127.0/24
192.165.138.0/23
193.180.20.0/24
193.180.121.0/24
193.183.239.0/24
193.234.83.0/24
193.234.86.0/24
193.234.255.0/24
193.235.73.0/24
193.235.130.0/24
194.68.43.0/24
194.68.159.0-194.68.160.255
194.103.4.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ec:48:0f:f9:f2:c5:51:54:7a:9c:6e:81:15:d0:f8:1e:d3:
72:8a:46:8e:99:cc:e9:19:a3:5c:65:92:10:4f:28:f7:33:0e:
e8:3b:36:71:87:1a:4e:57:38:20:75:8f:f2:48:5b:c6:3e:f5:
ee:47:82:51:c6:52:74:f0:aa:6f:2c:17:6c:16:77:93:16:80:
fe:2f:0a:2b:16:ae:60:ae:0c:09:39:bc:dd:0c:ea:e8:22:05:
59:c3:0e:f4:50:ac:87:8e:dc:42:dc:90:52:b3:93:cd:a3:90:
07:97:bc:10:36:f9:90:55:52:e0:0d:01:72:af:34:c9:49:2d:
a5:cf:24:44:da:ae:eb:ba:48:31:4e:5e:59:2f:7d:c4:52:6a:
bc:f5:f2:56:40:60:ae:da:dd:6c:ec:d7:63:b2:78:0b:bd:0b:
cb:e9:99:f8:89:7a:28:9a:4f:c9:4b:91:cb:a5:46:43:68:5c:
e1:e7:e5:ac:e9:d2:58:0d:12:2a:aa:f9:48:09:2e:95:1f:3d:
56:b1:14:fb:35:f9:ed:6d:48:ad:76:37:9c:5a:04:ca:d5:43:
46:4f:8b:cd:05:29:6d:79:7f:38:e5:77:a5:93:9f:51:89:ac:
c1:26:a8:5c:ab:9f:14:c5:90:d1:1f:30:2f:73:56:75:e8:49:
71:d1:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:00 2024 by rpki-client on console-ams.rpki-client.org