Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/jtblYKaJyb_WeousNAe0tZYnZbs.roa
File: jtblYKaJyb_WeousNAe0tZYnZbs.roa (raw, json)
Hash identifier: eewzgTb1tzD8wCe5l+N0nD8fxE6FsxJFJVhVjHQItTY=
Subject key identifier: 8E:D6:E5:60:A6:89:C9:BF:D6:7A:8B:AC:34:07:B4:B5:96:27:65:BB
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018CC8DEDB5FB7856241E2AD26BE754204EA
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/jtblYKaJyb_WeousNAe0tZYnZbs.roa
Signing time: Tue 02 Jan 2024 06:31:37 +0000
ROA not before: Tue 02 Jan 2024 06:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28761
IP address blocks: 195.26.81.0/24 maxlen: 24
195.26.82.0/23 maxlen: 23
195.26.80.0/24 maxlen: 24
194.140.228.0/24 maxlen: 24
195.49.204.0/23 maxlen: 23
188.191.16.0/22 maxlen: 22
188.191.16.0/24 maxlen: 24
188.191.17.0/24 maxlen: 24
188.191.24.0/24 maxlen: 24
188.191.18.0/24 maxlen: 24
188.191.19.0/24 maxlen: 24
188.191.25.0/24 maxlen: 24
188.191.26.0/24 maxlen: 24
188.191.27.0/24 maxlen: 24
185.76.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:db:5f:b7:85:62:41:e2:ad:26:be:75:42:04:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 06:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ed6e560a689c9bfd67a8bac3407b4b5962765bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:fb:1a:aa:38:21:29:81:ce:e8:35:35:93:
c1:86:bf:91:19:99:20:17:87:2c:00:5a:25:57:a3:
ed:c8:b0:09:34:15:61:c7:39:e2:c7:7a:aa:00:43:
ed:14:7b:07:b0:74:c9:ff:1b:3b:c2:55:ac:2a:75:
87:3e:1c:7a:9c:23:77:6e:bd:52:c2:b4:3f:1d:d3:
46:ce:aa:b1:ea:b2:7c:38:7c:aa:42:9e:79:b9:55:
24:d1:79:f2:44:96:99:81:fd:b0:13:09:ae:30:be:
7c:7d:c1:86:54:fd:86:81:80:78:cf:4e:26:41:b0:
c5:59:d2:69:67:25:d2:00:8b:5e:f0:20:4f:20:a9:
13:8a:19:c7:4a:e5:7a:fa:f3:71:f9:88:0d:59:80:
6c:80:43:6e:18:f1:0e:ff:05:af:f9:9e:0b:e7:82:
df:b3:07:af:5c:fe:97:ec:05:fa:d9:8d:1a:fd:e3:
2d:46:68:52:27:42:c4:48:82:b0:33:74:a2:a4:72:
49:b8:3c:0d:98:f5:1a:ed:c0:15:4c:9b:ef:a0:34:
63:1f:7f:4e:06:1c:cb:be:c2:e9:a6:87:2c:cf:98:
26:bc:c4:67:08:c4:ec:74:70:e6:a9:c6:16:0b:70:
a5:31:ee:5b:68:41:ae:4b:72:98:9f:61:c7:cb:ca:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D6:E5:60:A6:89:C9:BF:D6:7A:8B:AC:34:07:B4:B5:96:27:65:BB
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/jtblYKaJyb_WeousNAe0tZYnZbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.80.0/24
188.191.16.0/22
188.191.24.0/22
194.140.228.0/24
195.26.80.0/22
195.49.204.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:85:96:24:6e:89:77:39:80:e7:1d:48:05:b9:9a:66:c2:84:
08:4e:5c:6b:81:5f:0d:45:be:f5:36:d8:b7:50:1f:a8:1f:3a:
69:e4:1b:39:17:72:03:1e:91:4a:e3:1d:a8:35:58:e6:a0:0c:
fb:55:0e:a8:4c:01:36:1a:35:32:9c:a0:02:5a:e8:b0:47:01:
b1:ac:02:b4:60:ea:89:74:95:65:10:29:d1:a1:24:c3:65:59:
70:2f:62:c1:6f:48:fa:87:3a:11:c9:81:0b:91:2e:ef:44:d7:
51:a5:11:1d:12:fe:8d:68:f2:38:46:62:fc:bc:2c:a6:fb:b6:
29:36:6b:9a:cc:47:7a:fe:c3:0e:a9:e5:78:54:89:b4:7c:2f:
4b:a5:4e:f0:cf:25:ce:df:4d:f0:ba:8f:cc:bf:5b:9e:cc:8e:
6a:77:c5:ba:e0:72:e4:ec:5d:fa:f5:5e:68:14:16:cb:c4:20:
73:98:a2:7e:3a:9c:2e:d9:2f:e8:74:44:98:55:61:16:eb:9a:
d5:57:1d:78:fa:94:61:17:0c:0f:44:e7:1c:b6:f7:72:25:c7:
86:5c:41:6b:ef:f5:80:08:e8:8f:1b:4e:c1:f0:d0:0b:dd:3c:
1f:28:b0:65:95:63:53:b4:a9:0f:89:72:23:95:6f:41:1d:05:
5b:8c:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:15:25 2024 by rpki-client on console-fra.rpki-client.org