Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/J26NoJCO1ip-zz05HBo819SDCW4.roa
File: J26NoJCO1ip-zz05HBo819SDCW4.roa (raw, json)
Hash identifier: B/SqFlrkbxBoCWj00OqR/qZ/PGo2QmD2gynz3mEIKeo=
Subject key identifier: 27:6E:8D:A0:90:8E:D6:2A:7E:CF:3D:39:1C:1A:3C:D7:D4:83:09:6E
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 018CC26D42D5131048ED26617ACEBC63B180
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/J26NoJCO1ip-zz05HBo819SDCW4.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41436
IP address blocks: 185.167.98.0/24 maxlen: 24
185.167.96.0/24 maxlen: 24
185.167.97.0/24 maxlen: 24
185.167.99.0/24 maxlen: 24
185.229.225.0/24 maxlen: 24
185.229.224.0/24 maxlen: 24
185.229.227.0/24 maxlen: 24
113.30.188.0/24 maxlen: 24
113.30.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:42:d5:13:10:48:ed:26:61:7a:ce:bc:63:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=276e8da0908ed62a7ecf3d391c1a3cd7d483096e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:46:c1:d0:82:22:30:66:c5:27:5d:94:e3:
91:69:29:da:0b:fc:e2:df:40:e2:0c:eb:d3:39:2e:
cc:49:6e:d4:64:ab:f8:f4:65:44:0c:74:48:d9:cd:
89:55:ba:48:69:3b:4a:b3:0f:f3:fd:be:11:60:5a:
7d:82:56:07:40:59:66:c7:f7:fc:6f:b3:75:64:56:
bc:16:2a:b8:38:86:6e:90:88:a3:44:48:3a:c7:20:
15:9b:e8:0c:a5:05:3a:16:f4:aa:59:fd:c3:70:80:
33:a5:06:8e:2f:44:ed:d4:a9:b0:a3:81:71:df:26:
fc:7b:a3:f7:17:43:63:52:b2:7d:e5:ea:ff:40:18:
be:db:84:9f:11:57:09:be:19:aa:85:a2:62:e2:05:
96:f8:7f:98:60:be:5f:7d:b3:35:2c:6c:7d:fa:47:
58:88:ad:ca:14:f9:44:f2:bc:b8:e9:82:80:52:ed:
60:25:7d:6b:6d:ed:6d:b7:88:5e:45:ab:33:41:69:
89:81:37:0b:92:49:5e:22:48:ee:db:da:f0:0c:9a:
c6:78:7f:07:7c:21:ca:51:b0:78:e7:7b:c2:8e:fc:
5b:e5:83:2b:27:eb:a7:ef:79:db:7c:b9:b5:ff:6d:
92:fe:90:10:16:94:ad:27:46:5c:7f:db:ad:74:4d:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6E:8D:A0:90:8E:D6:2A:7E:CF:3D:39:1C:1A:3C:D7:D4:83:09:6E
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/J26NoJCO1ip-zz05HBo819SDCW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.30.188.0/23
185.167.96.0/22
185.229.224.0/23
185.229.227.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d0:cc:b1:e6:8d:fa:04:25:2d:cb:3f:a9:26:bf:2c:9d:31:
87:0f:e3:59:93:c4:c5:81:8d:25:c6:cd:96:7c:28:f2:17:cd:
9a:65:cd:3d:dd:a8:f2:f3:fd:41:25:14:df:6f:3d:a8:4d:a3:
ca:2f:25:f4:b2:2f:92:6a:8e:09:67:73:8b:4f:ac:02:88:21:
3f:96:14:8f:7a:3d:30:9a:84:53:63:1a:65:f4:b5:94:2d:88:
64:f2:d6:37:59:d6:d0:e3:a3:69:ec:e0:d7:88:79:cd:6e:d5:
e7:c4:73:bd:41:04:b1:ce:87:1b:f5:50:da:e4:11:5b:92:d0:
f4:48:ed:97:1c:92:63:44:6e:2c:6f:61:76:45:47:21:03:1f:
2e:44:86:a6:6f:91:62:95:ec:03:93:16:61:ae:8e:1e:81:8f:
fb:4b:ec:ca:2b:35:17:42:80:a2:26:55:13:a0:49:55:ca:29:
1c:db:ec:33:35:76:3e:d8:42:e6:0e:45:84:b7:97:38:d0:f1:
29:1d:19:f5:e9:ab:85:b1:1c:f5:85:a9:66:40:c7:e0:32:b3:
d1:c0:cb:2d:17:aa:bc:ef:17:ba:94:41:1c:e6:da:8d:a7:2d:
b3:e4:dd:16:f2:3d:32:7f:30:d4:fd:92:b5:79:35:ea:fd:d4:
77:36:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:50 2024 by rpki-client on console-fra.rpki-client.org