Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/jpbAabedaMWrsn-NWkkPxn2VEgo.roa
File: jpbAabedaMWrsn-NWkkPxn2VEgo.roa (raw, json)
Hash identifier: wWOS8hFXNgNEI6+nlUlv23yRyrI92kS1F77+Vwdx7fM=
Subject key identifier: 8E:96:C0:69:B7:9D:68:C5:AB:B2:7F:8D:5A:49:0F:C6:7D:95:12:0A
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 0191DFF4CF6DBDA0A705EED236AD2AF6436E
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/jpbAabedaMWrsn-NWkkPxn2VEgo.roa
Signing time: Wed 11 Sep 2024 07:20:48 +0000
ROA not before: Wed 11 Sep 2024 07:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48059
IP address blocks: 91.208.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:f4:cf:6d:bd:a0:a7:05:ee:d2:36:ad:2a:f6:43:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Sep 11 07:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e96c069b79d68c5abb27f8d5a490fc67d95120a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:48:6b:9f:56:4c:66:c8:8b:5d:aa:b6:b8:
ef:fd:b2:2a:a7:69:57:03:94:10:f0:99:5b:e7:a8:
e4:0b:8a:cb:2a:68:e4:86:85:c7:47:88:c2:7e:60:
db:32:0b:3e:b9:39:0e:a9:91:a8:73:03:08:7a:2f:
0a:c1:cb:ae:45:89:b2:fb:18:00:90:15:84:0a:8a:
bb:5c:6d:b2:2c:07:af:a4:96:32:7e:b3:8a:aa:43:
26:1f:a0:e3:47:b4:ce:9f:ca:07:a9:26:70:b1:e7:
1a:b1:d9:ae:0e:37:68:e3:e6:80:17:c3:1e:b1:f3:
9c:a6:d8:b2:22:87:61:44:07:a6:40:7e:de:94:3e:
0e:da:93:3e:c9:5d:17:13:33:44:6c:88:bc:7a:6f:
4e:1c:cc:ba:c6:0b:52:4b:b0:62:79:84:ce:bf:be:
72:5c:24:8a:35:aa:0e:c1:47:20:60:04:f2:ed:91:
b7:e7:c7:a7:c7:5e:42:bb:12:df:03:8c:4e:a0:45:
45:6f:9e:cc:8e:c2:f9:b4:41:7f:30:97:9f:0a:f5:
a8:58:aa:7b:c7:f7:70:c8:75:71:9d:26:fe:58:3b:
3d:1f:8b:7a:90:31:c1:ff:c3:fe:78:17:7e:d3:6f:
1c:08:33:e9:fc:b6:ad:b9:1e:6a:b4:d6:8e:0e:2a:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:C0:69:B7:9D:68:C5:AB:B2:7F:8D:5A:49:0F:C6:7D:95:12:0A
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/jpbAabedaMWrsn-NWkkPxn2VEgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:fa:34:13:e3:40:27:fa:2a:80:31:1c:34:22:08:b9:77:d5:
b4:c4:d9:50:7a:3b:f6:5a:32:52:37:7c:7d:d8:b4:46:97:f1:
bb:78:c3:a8:e2:5a:b6:30:cf:f7:34:dd:a5:e4:a9:a1:0a:e6:
e7:34:54:c0:dd:db:8e:36:02:31:a2:d6:9f:fa:5d:0c:89:12:
6f:82:a2:f4:e3:15:29:21:b5:78:a5:7e:4c:97:df:ef:af:79:
75:e5:f7:e9:64:a7:63:df:8f:92:e5:1f:e6:84:e4:b0:72:bc:
1b:22:47:a7:83:73:6c:de:54:3b:6d:66:0e:1c:5d:14:ef:84:
87:02:2d:78:49:48:84:96:9a:9f:ca:3c:93:26:71:92:f1:fd:
92:61:9d:0f:37:f4:9e:ac:44:f2:4a:f0:c7:fa:52:3d:c1:d6:
f7:be:26:46:b1:85:c2:43:f4:31:8e:1c:38:20:01:31:46:c6:
30:20:dc:60:7e:bf:d1:ad:91:37:16:b9:db:5c:04:24:bb:bf:
98:e6:eb:9e:ef:4f:9e:e4:bf:28:19:ed:b4:51:39:cc:19:8a:
33:7e:b3:26:2e:93:91:26:7d:3d:89:b1:36:70:e5:da:35:92:
24:ea:53:09:7c:46:03:ee:73:d8:80:77:ef:7a:91:ee:7e:83:
d3:f1:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:36:55 2024 by rpki-client on console-fra.rpki-client.org