Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JoBdLbfJFZ_zOKupNc7qx56tnPw.roa
File: JoBdLbfJFZ_zOKupNc7qx56tnPw.roa (raw, json)
Hash identifier: Y4Ny3v2l32AwEFt7BRSF4B+Yo0AtuorzXhyUqzEvYEQ=
Subject key identifier: 26:80:5D:2D:B7:C9:15:9F:F3:38:AB:A9:35:CE:EA:C7:9E:AD:9C:FC
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018E77119894B2C651B8B6F5C44604BFA8EB
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JoBdLbfJFZ_zOKupNc7qx56tnPw.roa
Signing time: Mon 25 Mar 2024 19:23:45 +0000
ROA not before: Mon 25 Mar 2024 19:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34702
IP address blocks: 46.19.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:77:11:98:94:b2:c6:51:b8:b6:f5:c4:46:04:bf:a8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 25 19:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26805d2db7c9159ff338aba935ceeac79ead9cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:08:5f:8b:b1:d4:5c:b1:3e:1f:1d:68:cc:
e8:65:b5:c5:d2:ac:4a:20:5d:13:8b:ca:bf:a4:0c:
b6:97:c1:47:ad:a1:04:63:b0:23:37:62:8c:20:01:
cf:03:a3:2c:94:21:52:2f:e3:31:41:e9:aa:6b:5a:
cc:ea:94:3a:74:ec:9b:9d:52:1e:62:0f:af:90:8e:
03:25:b5:b3:9d:b3:e5:27:e8:f8:dc:8f:a9:70:64:
7f:66:bb:4a:e0:83:94:01:de:0a:02:41:21:71:07:
0f:e2:f3:1a:29:49:c7:9d:59:33:7d:72:18:23:73:
4a:a7:4f:c6:0b:97:a9:58:2a:2b:ea:d7:77:17:e0:
f6:ee:bb:f5:48:6b:98:45:79:f3:f2:a0:3d:ef:7f:
3e:bb:ab:ed:fe:ec:bc:62:c9:d3:ad:95:56:2a:5f:
a8:11:3c:14:07:78:e8:ba:1b:49:2b:2f:22:7d:c1:
e0:61:bd:da:e2:3d:8e:29:52:17:d9:d7:21:b1:8c:
de:e6:52:09:09:99:8a:c9:e2:5b:25:98:be:af:c7:
ce:40:41:92:0a:87:cd:aa:92:0b:d5:3c:52:69:c9:
10:db:9a:7f:54:45:1a:9e:e9:e6:b2:ee:1e:30:bd:
c8:9e:81:7f:55:37:8e:01:35:3b:49:c2:75:a1:06:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:80:5D:2D:B7:C9:15:9F:F3:38:AB:A9:35:CE:EA:C7:9E:AD:9C:FC
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JoBdLbfJFZ_zOKupNc7qx56tnPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
26:45:ce:a2:25:e9:8f:ab:9c:c4:79:48:0b:03:87:79:df:91:
8f:bd:de:73:50:d1:53:0a:4f:0a:c5:ef:8a:ae:01:cd:6f:26:
41:fd:49:2f:71:2e:85:63:82:81:52:6e:82:82:d3:ae:e2:a2:
9a:63:3f:06:58:f3:c2:e1:db:5b:cb:2d:7c:20:11:1f:5d:49:
05:47:5a:18:96:c7:d2:71:9e:4f:bb:60:7b:bb:29:f9:48:34:
3f:79:a9:0c:c3:1d:82:70:a6:b3:ff:35:7f:46:f2:69:32:0a:
96:27:18:4d:35:ba:6c:eb:54:a9:7f:1c:4b:f7:52:38:ff:40:
1c:ad:be:2c:3b:09:a0:88:8d:c9:7f:ed:60:f5:c6:56:d8:42:
67:75:ff:a0:ca:9b:30:1a:ea:20:27:5f:57:60:01:20:79:ba:
7b:41:c4:87:f3:2f:7b:49:36:17:46:73:88:94:27:94:60:b1:
f0:05:01:0e:2f:aa:52:24:c2:55:55:59:82:80:00:d6:9e:57:
8c:25:94:65:16:59:4e:01:65:ab:3c:c1:3f:fc:e2:6f:85:81:
b7:ac:55:2a:c6:2f:4c:5c:34:8a:81:eb:7e:95:cc:d3:b9:68:
a2:ba:43:51:b1:16:19:7d:4f:74:9b:37:2f:d4:cb:c5:63:19:
89:9e:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:33:05 2024 by rpki-client on console-fra.rpki-client.org