Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/JrnJrnx2M5Znft4D4VlSV8-xgtA.roa
File: JrnJrnx2M5Znft4D4VlSV8-xgtA.roa (raw, json)
Hash identifier: xLuNP1cXsSsGRrlaYcWl1ogQhnBjRd/jnaPmrBep/jg=
Subject key identifier: 26:B9:C9:AE:7C:76:33:96:67:7E:DE:03:E1:59:52:57:CF:B1:82:D0
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 018CC4253DEF62B8E4D2051A0F14198CC26D
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/JrnJrnx2M5Znft4D4VlSV8-xgtA.roa
Signing time: Mon 01 Jan 2024 08:30:24 +0000
ROA not before: Mon 01 Jan 2024 08:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31059
IP address blocks: 91.200.178.0/24 maxlen: 24
46.227.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3d:ef:62:b8:e4:d2:05:1a:0f:14:19:8c:c2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Jan 1 08:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26b9c9ae7c763396677ede03e1595257cfb182d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:17:55:98:f3:7f:ca:3a:85:a8:d9:ab:db:
5c:4c:60:24:f4:04:24:10:77:0b:49:24:7c:ad:94:
83:4a:d2:a8:b6:ed:a4:0d:03:16:c9:10:5e:53:84:
bc:9c:b5:aa:3f:9d:60:f5:d8:5b:b2:34:a4:66:b8:
c7:a6:d0:34:c3:85:a2:a3:c3:eb:74:70:05:21:2b:
55:c7:32:75:3c:67:9c:1a:5f:76:4e:c5:05:67:68:
79:70:93:4f:e5:41:db:3a:d1:64:d3:86:1a:1d:35:
39:df:eb:9e:5a:c8:30:68:3d:d6:99:15:45:03:f1:
87:12:54:76:9f:47:c1:1a:0f:5c:52:4a:1f:54:a7:
86:eb:b2:15:ee:a4:75:5a:7e:3a:90:b7:fb:48:32:
08:bc:c1:c8:d4:62:90:4d:8d:e9:ab:c1:8f:1f:3d:
d1:84:30:06:3d:e5:9e:8e:d2:81:3c:44:f8:b7:1c:
02:78:e1:61:6b:aa:0b:17:c2:3a:29:ed:bc:ff:2b:
c9:f2:a2:47:26:6f:a5:0f:9c:9a:42:fa:0e:b1:f2:
17:66:64:1c:5a:45:24:86:97:d9:4a:29:57:7e:9b:
08:63:0a:28:d0:07:28:46:14:cf:c4:67:fd:31:40:
98:9d:a8:bf:d9:73:92:d5:fb:17:08:6b:5d:e6:c8:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B9:C9:AE:7C:76:33:96:67:7E:DE:03:E1:59:52:57:CF:B1:82:D0
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/JrnJrnx2M5Znft4D4VlSV8-xgtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.165.0/24
91.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9f:50:eb:7e:03:39:31:6d:f6:1e:27:5d:4e:10:c6:74:c1:
bf:f4:2a:f3:5e:f9:86:a6:26:bd:5f:94:f4:d3:8b:a4:12:f7:
8f:fa:4d:eb:19:0b:d3:e6:42:98:63:42:70:49:06:90:63:a3:
f9:03:aa:89:bd:b1:61:b6:ac:f4:dd:c2:ce:7e:81:6c:ba:6a:
49:0a:05:a9:d2:e5:b6:9a:97:f1:e2:fa:3a:58:57:2d:28:e7:
af:8a:ff:e1:73:66:18:4f:4e:a7:34:fa:19:15:f3:39:d0:ff:
2d:1a:9a:b2:d0:14:cf:61:b8:db:a9:47:43:91:73:06:36:89:
fe:cc:dc:ef:50:a5:c4:34:45:e8:0b:2c:44:ad:eb:f9:2a:a8:
2f:b8:cd:83:ad:08:17:c8:37:82:71:25:fd:39:98:97:b4:34:
a1:39:65:d6:09:69:b5:7d:96:54:a8:96:eb:0d:4e:6d:20:59:
e1:10:d3:fc:03:bf:50:4b:87:1e:97:f3:17:35:a7:99:62:7d:
c2:f4:f1:1d:b2:74:be:e2:ae:21:2a:4f:94:ca:b3:05:2d:c4:
59:20:69:32:a7:7c:f8:8e:98:7a:65:98:85:76:24:2d:a9:9a:
0a:27:4d:fb:48:e3:07:55:bb:fe:a4:76:5c:f1:f9:2e:d5:d9:
3a:85:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:50 2024 by rpki-client on console-fra.rpki-client.org