Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JJZ2yx-1PRgTdj807MD-arbJnz0.roa
File: JJZ2yx-1PRgTdj807MD-arbJnz0.roa (raw, json)
Hash identifier: 7uiAmtWFxhchN9WjZcgdV8TyPpDhf9t1ebZQfgLnxNw=
Subject key identifier: 24:96:76:CB:1F:B5:3D:18:13:76:3F:34:EC:C0:FE:6A:B6:C9:9F:3D
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BC0267641DC61CCF1B5FF25674037
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JJZ2yx-1PRgTdj807MD-arbJnz0.roa
Signing time: Tue 02 Jan 2024 12:35:13 +0000
ROA not before: Tue 02 Jan 2024 12:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201908
IP address blocks: 212.91.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c0:26:76:41:dc:61:cc:f1:b5:ff:25:67:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=249676cb1fb53d1813763f34ecc0fe6ab6c99f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:cd:89:29:f0:fa:17:ff:69:f1:f2:29:33:
7f:87:a5:8b:c2:9b:cf:1e:16:a5:72:9d:ca:9c:ab:
47:6e:01:d4:d9:06:9c:0a:be:66:ba:7c:e5:1a:15:
8d:5d:7d:41:20:89:1c:d6:e9:d9:e2:0f:d1:fb:b4:
95:88:7a:29:b2:cc:72:49:ea:eb:71:10:83:4a:e8:
70:47:03:74:c7:28:57:94:a3:6d:ff:39:c8:23:3c:
32:cb:c9:10:95:f3:f0:95:b1:97:3c:58:da:2e:42:
d8:e3:8b:1a:4b:01:01:f7:c0:ec:fb:59:c2:46:06:
86:64:46:4f:e9:59:8b:be:50:c8:79:5f:c8:b6:67:
a2:5a:ef:da:bc:8c:ad:ab:95:60:e7:7b:0d:23:57:
db:d9:20:84:0b:02:42:d1:c9:cb:99:9c:55:12:65:
f9:43:dd:9a:12:10:f2:5f:f5:e6:80:fc:e0:1a:16:
be:c9:a8:b4:12:f1:79:a5:58:f8:72:9a:52:c6:79:
7c:64:e2:2f:81:e7:cb:37:12:76:2b:29:18:3a:f3:
0e:34:60:11:71:85:3d:83:a4:4f:30:8d:92:3b:85:
82:9a:81:1b:d8:6d:8c:72:e0:1e:4f:fb:c7:90:9b:
e6:ba:3e:97:b8:a5:ba:6f:24:48:e1:62:ce:7d:26:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:96:76:CB:1F:B5:3D:18:13:76:3F:34:EC:C0:FE:6A:B6:C9:9F:3D
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JJZ2yx-1PRgTdj807MD-arbJnz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.30.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:7c:e0:ee:a7:82:30:79:b6:91:19:2f:4f:f9:77:29:ff:f0:
76:3c:7e:68:4b:f7:6f:93:8f:d2:0a:f3:6d:e3:cf:8f:2d:92:
04:74:d8:53:a1:03:03:e9:d9:c4:87:97:09:50:b8:3d:82:ba:
26:e1:7f:59:17:b5:89:51:c6:fe:b6:47:8f:10:5e:40:4c:0f:
c3:2d:9d:e0:d5:b2:3d:ab:f6:c7:e7:f7:9d:76:4d:f6:85:7a:
a1:05:19:4d:ac:4e:2d:bb:d4:30:63:58:eb:15:13:22:c1:7d:
5e:c0:92:6a:28:f5:b1:08:eb:af:af:2a:4e:10:22:80:de:36:
aa:45:2a:75:89:7c:56:95:c0:de:9b:97:c7:28:b3:f5:3c:18:
27:62:31:0c:44:70:05:dc:86:ad:8e:07:b0:70:d2:fd:ec:cb:
c0:4b:7a:ac:54:9a:ac:01:4e:5b:9b:da:3a:9d:2e:18:5f:34:
70:d5:7e:64:ff:97:b2:67:ff:f9:0d:94:a9:26:3d:2f:c1:33:
87:05:6c:bf:78:8d:f5:77:07:5d:57:6b:e0:35:56:89:9a:48:
31:1f:37:36:1c:87:d8:31:37:86:76:8f:13:3a:dc:aa:6c:5d:
f5:db:a0:8c:9a:5e:e0:9f:78:30:ab:a9:83:aa:c3:a7:ff:30:
92:9b:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:09 2024 by rpki-client on console-fra.rpki-client.org