Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/JE0RzCg4VIpMAxXAgGl-1h9mQLU.roa
File: JE0RzCg4VIpMAxXAgGl-1h9mQLU.roa (raw, json)
Hash identifier: 4APkApiMN1fz+dmXm8vdh1fko60C2Kvz2n0iMw7VYAA=
Subject key identifier: 24:4D:11:CC:28:38:54:8A:4C:03:15:C0:80:69:7E:D6:1F:66:40:B5
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 018CC94DC9C4D600074BB9C1BEE9FACF6945
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/JE0RzCg4VIpMAxXAgGl-1h9mQLU.roa
Signing time: Tue 02 Jan 2024 08:32:47 +0000
ROA not before: Tue 02 Jan 2024 08:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202196
IP address blocks: 185.150.60.0/22 maxlen: 22
185.150.60.0/23 maxlen: 23
185.150.60.0/24 maxlen: 24
185.150.61.0/24 maxlen: 24
185.150.62.0/24 maxlen: 24
185.150.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:c9:c4:d6:00:07:4b:b9:c1:be:e9:fa:cf:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jan 2 08:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=244d11cc2838548a4c0315c080697ed61f6640b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:05:e6:e8:8c:20:d8:e0:b6:f9:dc:1a:a9:
ba:16:59:6f:95:e6:57:cc:3e:fa:05:7f:65:6a:a7:
7f:f0:67:ab:94:74:46:60:35:cc:46:e4:f5:aa:76:
21:4f:15:ba:aa:90:74:86:11:7f:8b:85:92:51:5d:
84:58:2f:3b:35:2f:b7:76:85:2d:5d:a6:61:7a:fc:
7d:8b:8c:9e:b8:53:eb:b5:cd:36:21:bd:14:2a:32:
db:d6:11:3a:20:77:66:e4:b3:7e:3f:1b:84:a6:15:
cf:5a:a1:86:45:a1:66:ca:54:07:0f:6f:5c:cd:ca:
bc:e1:26:5a:cc:81:6d:4e:60:86:28:dc:11:83:53:
f4:cc:2a:0c:bd:fa:ef:a8:e1:0b:ed:32:18:9e:7b:
57:f7:1a:54:c7:d8:d2:6e:3d:0e:ed:14:69:45:31:
7c:0e:e5:b4:f7:9c:2c:b5:f2:7f:bc:7c:32:a0:c4:
4e:f0:ae:9a:8f:42:c1:3e:be:7d:1a:55:c2:ce:4b:
b6:55:5b:97:9f:b4:93:f3:ea:97:81:7c:c3:75:c5:
53:21:01:bf:ba:17:46:d0:cb:68:30:21:d0:81:65:
d8:f6:94:de:08:6c:c9:3a:78:c1:34:d8:f9:fd:d7:
7e:5b:39:08:f7:95:1f:1f:52:b5:7e:ba:6a:ab:80:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:11:CC:28:38:54:8A:4C:03:15:C0:80:69:7E:D6:1F:66:40:B5
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/JE0RzCg4VIpMAxXAgGl-1h9mQLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:d4:ca:0b:96:86:af:b1:f5:99:b1:12:28:36:61:71:de:26:
63:7b:9f:18:b2:03:9f:ef:96:2a:1f:89:8b:93:a8:ce:a7:03:
25:2d:62:25:18:c6:cd:2f:cc:39:90:90:03:ea:51:f1:20:3d:
ff:04:bf:24:cf:a3:93:f8:eb:e3:3f:21:09:a4:13:c4:79:47:
1e:40:1e:32:40:6f:c2:91:da:d8:0c:55:b8:a9:aa:61:75:1c:
ea:71:42:1a:da:56:28:7a:7e:ef:6c:2e:63:ae:38:02:99:5d:
6e:10:73:3b:d7:f6:06:63:ab:3b:e2:a7:43:88:97:91:c2:6e:
28:3d:75:df:c5:04:8d:72:33:34:8e:f3:f8:43:62:30:0a:d1:
d4:5d:de:88:e9:9a:f8:d3:51:45:84:14:44:07:5f:6c:3b:9c:
31:1c:02:70:9c:e1:f6:0e:77:d9:14:6e:2e:62:81:8f:fd:ae:
bb:b3:7c:9e:de:b6:9d:5d:1f:f5:c4:7b:22:a0:3e:37:6f:97:
6b:85:e2:0c:39:db:4d:3e:df:8c:8a:48:00:91:db:b5:81:18:
57:70:6d:0d:c5:46:76:69:4d:ea:3d:74:f2:88:a4:38:85:14:
7f:ad:8b:ec:ef:65:b0:47:dd:46:4d:16:8c:98:37:86:6a:44:
68:82:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:35 2024 by rpki-client on console-fra.rpki-client.org