Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/JE-tGR0kP80vpqc3jvrvRP0_Sd4.roa
File: JE-tGR0kP80vpqc3jvrvRP0_Sd4.roa (raw, json)
Hash identifier: BfG46qaYZUjbChwrjJ/BU520uhdW0at5Ws/3M5P7gf0=
Subject key identifier: 24:4F:AD:19:1D:24:3F:CD:2F:A6:A7:37:8E:FA:EF:44:FD:3F:49:DE
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 018CC3B6D4EAA51274CDF35FC7E3552FB4E0
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/JE-tGR0kP80vpqc3jvrvRP0_Sd4.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54128
IP address blocks: 213.86.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 20:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d4:ea:a5:12:74:cd:f3:5f:c7:e3:55:2f:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=244fad191d243fcd2fa6a7378efaef44fd3f49de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:e3:ce:19:69:41:82:88:90:f5:ea:c8:27:
df:c3:de:2a:e2:24:7e:9b:b1:92:de:99:ac:e0:d9:
61:24:6b:2a:a0:67:41:24:82:25:de:f1:bc:67:a5:
70:22:68:67:b5:00:96:92:6d:81:f1:b5:1d:29:ab:
f8:7e:6d:99:6e:e7:90:8c:00:d5:59:0c:cd:e6:d1:
57:61:65:41:12:53:63:f9:c5:81:b5:57:5c:71:b1:
0a:db:b0:45:b4:30:94:95:8f:71:17:b6:e0:51:2a:
20:a7:13:e3:af:87:5c:4f:cd:e4:66:d1:65:c5:99:
a8:78:26:f6:48:c2:af:27:ca:7f:04:e7:4a:7e:e3:
cf:f1:75:df:26:b2:27:f3:ce:4b:30:9b:bf:e9:f9:
3b:0d:8c:57:c2:a1:55:8b:59:61:ba:d2:02:0b:87:
b8:1a:8b:5e:d7:55:f4:fa:38:b9:37:8a:ea:ec:48:
fb:31:ee:f8:21:9d:8c:19:f0:1e:b5:12:5b:e8:cc:
c5:6f:7d:c2:04:cc:dc:99:c9:5f:4a:a7:21:82:68:
68:2a:de:0f:c9:1a:25:06:27:09:0a:ab:2d:1d:c3:
42:01:ca:81:ec:64:82:12:25:96:d9:74:94:2f:1b:
bb:e8:54:10:82:cb:78:5c:b6:69:a9:6f:14:85:5e:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:AD:19:1D:24:3F:CD:2F:A6:A7:37:8E:FA:EF:44:FD:3F:49:DE
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/JE-tGR0kP80vpqc3jvrvRP0_Sd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.86.124.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b1:92:96:86:cc:73:53:0c:e4:7c:da:4d:0a:02:b8:93:09:
69:5e:2c:76:97:ac:fe:22:e7:30:15:e4:92:9f:65:be:a7:10:
9f:6c:0b:c8:49:0e:0d:fa:0f:2b:d6:f6:29:f1:a9:06:74:5d:
67:99:04:b0:ca:8f:ae:8a:86:d5:ab:b5:f3:bf:91:74:74:00:
dd:3b:6c:4b:fd:be:6f:40:cb:6f:63:fc:57:23:8e:d6:b1:a8:
7b:a8:48:d2:f4:12:25:a1:3f:c2:31:8d:bf:dc:9e:e9:6c:02:
75:1e:c5:cf:7b:56:2e:1a:41:6b:48:60:45:2b:39:46:b0:a5:
fc:6f:58:3e:25:e6:48:74:cd:df:1e:aa:ee:b3:ab:7b:a6:d7:
c8:c2:60:00:ce:f0:4b:c3:b6:d1:c5:de:1d:88:46:fb:e4:c0:
a2:cd:a1:e0:bd:f9:d4:6c:b6:90:cc:a9:2e:32:24:12:52:02:
74:84:6e:5c:d6:44:06:24:90:0a:49:f3:e6:47:e6:da:66:c6:
85:ce:5a:95:52:18:5f:da:0b:3b:da:79:75:02:bb:07:77:33:
d1:10:16:97:c9:ba:7c:eb:5a:e6:fd:d9:48:1d:47:7e:ff:33:
cc:a5:15:17:76:f6:25:07:f1:fa:09:54:be:db:05:6f:c5:a3:
98:e0:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 01:37:44 2024 by rpki-client on console-fra.rpki-client.org