Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/JhBkCUXRrpm0mL7lVTxsQ-TUQHg.roa
File: JhBkCUXRrpm0mL7lVTxsQ-TUQHg.roa (raw, json)
Hash identifier: caJMpJ7PpBH6BmNEvZvIfXVBtBIxksxMdndyG7KBt1Q=
Subject key identifier: 26:10:64:09:45:D1:AE:99:B4:98:BE:E5:55:3C:6C:43:E4:D4:40:78
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 018CC2DB32F3B976B7B1C001296FB9CDDB7D
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/JhBkCUXRrpm0mL7lVTxsQ-TUQHg.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199139
IP address blocks: 91.236.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:32:f3:b9:76:b7:b1:c0:01:29:6f:b9:cd:db:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2610640945d1ae99b498bee5553c6c43e4d44078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:91:13:ad:5e:27:00:4a:d5:67:a5:9b:a9:
a3:92:80:db:36:4b:c7:27:07:5d:ca:b7:88:6a:8d:
d6:83:54:57:ee:22:eb:15:d5:bc:59:7b:3f:2f:e4:
45:8b:0b:21:59:df:a4:62:d9:af:4f:bc:04:42:95:
b6:ea:3b:39:9a:14:a9:8f:ac:4d:21:5f:61:3b:ed:
0f:ed:42:ee:ec:ff:3d:07:61:0e:66:14:18:09:8e:
af:2c:df:6b:d9:09:f2:fb:91:86:92:23:b5:f8:3c:
cd:07:4a:83:c2:b7:6d:6f:70:44:25:d1:05:cf:a9:
5f:6f:30:8c:b2:a5:db:13:79:a3:aa:37:fd:23:8d:
5c:e0:a4:12:d2:86:47:6a:9c:6e:54:d9:ee:33:e0:
13:46:c4:1d:b4:e8:39:2c:a7:2f:74:45:e7:e7:51:
fe:f0:ac:5f:01:e3:5c:a0:23:5b:d1:fd:11:13:0a:
41:6d:be:66:f4:f9:dd:d6:0b:10:f5:7b:a5:bb:cb:
53:ff:df:02:80:bc:bc:36:52:41:48:53:54:58:e7:
c4:bc:cb:69:de:6d:4b:36:88:ec:79:dd:17:8e:f5:
6b:d3:d1:3b:f1:32:a3:ce:6d:40:8d:31:7c:f2:cc:
c7:4b:35:06:00:f4:33:a3:85:a7:b1:f0:7b:13:52:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:10:64:09:45:D1:AE:99:B4:98:BE:E5:55:3C:6C:43:E4:D4:40:78
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/JhBkCUXRrpm0mL7lVTxsQ-TUQHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.19.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ba:07:40:e1:bf:e1:f2:bf:9e:a3:ce:7c:c3:55:45:a8:50:
cb:65:19:fa:d5:5d:a3:88:f5:6d:20:3c:df:b1:f3:3d:7f:ca:
92:64:1a:b6:44:c0:4c:21:bf:21:75:ed:d6:42:5b:a2:7a:6c:
9f:b5:99:63:2a:dc:78:f0:eb:55:2c:78:6a:92:35:85:bf:90:
72:ed:68:8c:fc:94:f7:fd:06:26:e7:1b:c4:0c:c8:24:04:2e:
3b:f3:09:f3:ce:27:7c:c3:f9:a6:c0:db:7b:e8:8a:fd:7c:da:
bf:3a:e0:3c:54:1f:aa:7e:90:d0:24:e6:79:81:dc:ba:4b:13:
0a:cb:69:01:84:ae:26:c3:9b:19:8f:b8:db:b4:80:03:14:a4:
19:9a:64:a7:04:9a:05:35:18:4a:22:59:e0:46:fa:6a:cf:7b:
66:af:3e:d0:f3:af:92:bd:f6:ae:52:b8:94:a6:4e:22:3c:52:
6a:25:85:c5:f0:77:69:a5:d3:0a:fd:e4:da:91:f5:7d:81:16:
1c:93:fa:d5:18:64:f5:8b:95:25:c7:1c:78:af:0b:7f:33:be:
e6:a7:a6:42:33:1b:bf:95:51:7f:27:81:e8:16:a9:d5:0f:ad:
30:a4:bb:3c:55:86:2e:6c:46:78:d5:2e:ce:5b:bd:a4:e9:ec:
10:58:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:04:26 2024 by rpki-client on console-fra.rpki-client.org