Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JtUg59b5Rl34Yf87PpPKEaMWrCs.roa
File: JtUg59b5Rl34Yf87PpPKEaMWrCs.roa (raw, json)
Hash identifier: jeDFyCiDVorB5tdDk6FM2BKTMLxNhbjRi7hqQPZRmQ0=
Subject key identifier: 26:D5:20:E7:D6:F9:46:5D:F8:61:FF:3B:3E:93:CA:11:A3:16:AC:2B
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018F1142E9400CA8036921EC64BEBA22C07F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JtUg59b5Rl34Yf87PpPKEaMWrCs.roa
Signing time: Wed 24 Apr 2024 17:59:08 +0000
ROA not before: Wed 24 Apr 2024 17:59:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 178.218.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:11:42:e9:40:0c:a8:03:69:21:ec:64:be:ba:22:c0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 24 17:59:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26d520e7d6f9465df861ff3b3e93ca11a316ac2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:fe:7a:7e:dd:36:43:d4:5a:15:65:99:1b:
65:9a:4f:7f:67:2a:0c:f6:1d:4d:a3:b2:f1:82:0d:
13:ab:70:79:a7:df:34:08:2d:a5:9f:21:cc:8e:0d:
31:90:91:fb:de:46:31:d9:1b:42:12:92:0e:84:0e:
0a:c0:6b:b9:31:a0:ec:ef:2e:a4:0b:dd:cc:f5:f2:
53:7a:80:62:62:8d:5e:cf:f2:b9:6f:07:b5:d4:ab:
21:cc:f6:6e:21:9a:d7:91:17:99:48:03:41:93:cb:
39:60:43:df:24:e0:fa:08:63:b7:f3:56:eb:5b:43:
04:94:e9:59:40:e1:70:74:31:ae:1b:b8:7e:0b:89:
9f:e0:3c:39:ba:dc:f5:dd:97:5b:4c:90:ce:94:96:
d9:77:4d:16:d8:45:ba:23:0d:34:6f:33:62:57:8e:
8d:34:56:89:a7:aa:d3:7f:be:10:cd:1f:e1:3f:f2:
da:6b:1f:9d:f0:cb:53:88:4d:77:5e:e7:65:c3:28:
5b:69:ed:ec:b2:57:1d:82:3c:66:7e:59:4e:e1:69:
de:99:a7:48:2e:fa:0f:df:36:84:f1:7d:b3:8f:e4:
81:9e:8f:3a:25:93:bd:76:c6:3d:50:dc:ad:6e:02:
e6:32:89:af:ca:c2:a9:69:f8:95:77:3b:00:1b:b3:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:20:E7:D6:F9:46:5D:F8:61:FF:3B:3E:93:CA:11:A3:16:AC:2B
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JtUg59b5Rl34Yf87PpPKEaMWrCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:36:18:f4:95:af:5e:66:90:57:73:09:ca:3e:2f:9e:c3:70:
1d:92:85:07:26:66:4b:31:14:56:72:7b:bc:c0:b8:b7:24:b8:
00:08:d8:93:be:97:8a:75:8e:45:12:db:a1:75:6d:f2:cb:b6:
ae:61:4a:10:23:26:aa:95:98:bf:f8:76:77:7c:65:8b:36:2b:
81:26:ac:2a:4e:a3:36:fe:86:d0:1e:2c:08:cd:36:a5:01:2a:
59:82:e8:c4:8e:e5:e0:c7:d8:3c:ed:1e:5b:fc:72:2a:46:ff:
85:8b:19:9b:79:3b:d0:81:23:3d:98:d0:79:2c:2c:f6:5e:d4:
e8:81:f6:09:8a:2b:e2:26:c2:b1:14:05:be:79:79:5b:7c:54:
22:c4:93:45:98:66:96:5c:24:29:03:3a:79:f5:bd:00:9b:5a:
4b:90:55:a0:df:a5:26:ec:2b:86:83:bf:3c:29:73:2a:3e:ed:
b2:1d:7f:a9:64:51:5c:f9:ae:ed:d5:a1:80:89:74:1b:b9:73:
d0:49:21:48:72:e1:4f:43:42:5e:80:d8:fc:bf:dc:41:25:23:
93:cb:bf:45:18:b9:9b:6d:24:e4:1f:f1:78:0e:5c:13:95:c4:
1f:cc:2a:e4:3c:8e:0a:70:73:e1:f8:cb:7a:29:65:16:0d:f4:
94:2e:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:58 2024 by rpki-client on console-ams.rpki-client.org