Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/JuyHFQYb0JfbbaPuJt8fWyuI164.roa
File: JuyHFQYb0JfbbaPuJt8fWyuI164.roa (raw, json)
Hash identifier: H5nQrEI1WNfYMuAh/IWyiq2O4TnEV89jGpqA4D7HqMs=
Subject key identifier: 26:EC:87:15:06:1B:D0:97:DB:6D:A3:EE:26:DF:1F:5B:2B:88:D7:AE
Certificate issuer: /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial: 018CC6B8D8D61ABF00FA64CD4DBB449BFA5E
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/JuyHFQYb0JfbbaPuJt8fWyuI164.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41131
IP address blocks: 91.245.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d8:d6:1a:bf:00:fa:64:cd:4d:bb:44:9b:fa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26ec8715061bd097db6da3ee26df1f5b2b88d7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:9e:4d:bb:13:fe:e1:5a:26:4e:0d:c3:18:
03:48:ba:cb:ed:6f:ba:d7:d7:de:8e:53:9c:1a:59:
79:de:11:2a:93:89:00:df:b9:47:57:9b:f6:87:f8:
39:be:64:cf:b9:a1:5d:fb:85:b4:38:38:5e:8f:e3:
41:b4:a0:08:3f:8a:0b:5c:22:89:d9:59:74:62:0f:
64:83:64:9f:10:80:21:c3:9e:6c:a5:87:24:21:cc:
4e:ba:1e:e0:e4:22:b6:2e:81:0d:39:21:27:10:e8:
1e:72:4b:20:b2:2a:bf:e9:d7:28:87:26:60:f7:b4:
80:22:80:8f:b6:0e:e8:23:95:44:7d:54:71:1e:d1:
63:2c:f6:f7:f9:15:ad:22:6e:ba:2e:0f:2d:0b:5f:
64:e7:f6:03:5c:37:cb:51:ae:35:98:82:5e:dd:0d:
18:b0:70:70:b9:dc:0a:21:d9:9b:a2:de:9b:49:0d:
05:ed:da:81:f2:55:5b:2a:c1:b4:ee:4c:ab:f5:cc:
42:b4:aa:4f:ca:17:02:cd:1b:87:85:4b:5b:3e:0f:
0b:e7:86:3b:af:fc:35:07:85:63:19:6e:86:2b:a8:
8b:aa:c1:f7:00:17:83:9f:ec:b3:9b:73:a8:16:5c:
f1:b6:e2:56:1b:4f:cb:1d:88:cd:3e:f4:fd:f4:83:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EC:87:15:06:1B:D0:97:DB:6D:A3:EE:26:DF:1F:5B:2B:88:D7:AE
X509v3 Authority Key Identifier:
keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/JuyHFQYb0JfbbaPuJt8fWyuI164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.208.0/24
Signature Algorithm: sha256WithRSAEncryption
60:44:a5:10:f5:6d:f1:f2:8a:cc:d8:7c:9f:49:9d:0e:33:52:
a8:80:47:a6:94:d0:df:23:da:ce:26:c7:d3:18:25:2e:3d:53:
c0:63:8a:e6:ef:dc:c2:0a:90:4e:38:75:23:72:cd:80:67:1e:
33:c5:de:ef:4f:40:76:b1:6f:20:7d:6e:d8:6f:76:9a:e9:c0:
4d:98:a5:08:41:ee:da:55:22:e9:29:f6:7e:1b:5c:65:9f:81:
eb:f1:0d:54:6c:b3:06:6c:20:cd:46:48:72:22:b7:80:e5:3d:
8f:ca:3c:ef:61:8a:7d:ed:27:11:a8:be:a3:99:3c:45:f5:5b:
e8:1f:da:f2:1d:96:44:a2:f5:7e:3a:36:06:d2:45:fb:87:ab:
20:f7:3d:d4:3c:1f:20:cd:8e:af:b0:8b:ff:e8:ea:7f:84:05:
25:bc:31:9c:68:eb:fb:1f:05:94:b0:73:f4:84:07:13:83:a4:
f5:31:61:da:d6:5d:9b:e7:41:c5:fd:57:59:4b:1b:dc:ea:fd:
0c:01:3f:c9:11:42:31:4e:1b:04:51:8c:c2:de:60:74:25:a6:
d1:34:b6:b6:22:6a:a6:b0:f0:cf:3e:a0:ae:19:d3:3d:a9:32:
4c:0f:88:25:83:07:1e:a8:83:80:b6:b2:16:b2:1c:72:8d:31:
05:2b:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:17:47 2024 by rpki-client on console-ams.rpki-client.org