Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Js1EYww86bO65ndFPtyIz_an9bo.roa
File: Js1EYww86bO65ndFPtyIz_an9bo.roa (raw, json)
Hash identifier: HyTXLU878spFv9T8BRowWTDO0AZ8HNdK8EUjUeMi1iw=
Subject key identifier: 26:CD:44:63:0C:3C:E9:B3:BA:E6:77:45:3E:DC:88:CF:F6:A7:F5:BA
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E43414A1BB5455703C6901B24A9B
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Js1EYww86bO65ndFPtyIz_an9bo.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206466
IP address blocks: 194.209.31.0/24 maxlen: 24
195.65.142.0/24 maxlen: 24
194.6.170.0/24 maxlen: 24
194.6.173.0/24 maxlen: 24
194.209.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e4:34:14:a1:bb:54:55:70:3c:69:01:b2:4a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26cd44630c3ce9b3bae677453edc88cff6a7f5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:b0:ed:3d:af:a2:67:ea:92:b4:ec:ef:b0:
d8:17:a7:f3:1f:85:4d:27:8d:86:a5:4f:33:07:9a:
04:4b:15:23:b8:f6:3d:d4:bb:00:f7:18:02:a1:43:
09:fc:cc:8d:75:00:26:0f:8d:67:04:c7:87:ca:c5:
54:d0:f0:d0:2a:57:65:25:11:b9:ae:1b:b1:db:ba:
f0:a3:03:48:c7:ec:b0:24:c7:d5:0e:2a:61:1e:64:
9b:e2:b9:64:ae:35:e4:1c:25:76:59:fe:86:65:86:
7c:ab:ee:01:c7:2d:17:d8:b0:1e:b6:2d:27:f7:04:
84:ce:d1:fb:43:06:8c:fb:08:52:5c:ed:c3:03:a7:
0b:fc:4c:24:49:1c:7f:86:9d:d0:08:cc:ab:30:ab:
50:c6:ec:cd:bc:e6:52:e9:6f:4b:25:02:a6:39:a6:
ee:d8:70:e9:d1:c9:18:e1:64:57:ac:84:12:8d:a5:
05:7e:cc:34:b5:89:b5:50:b6:d7:7f:a3:db:a1:16:
80:6d:aa:fa:7a:18:6d:b1:6a:27:49:b1:3d:6a:96:
86:33:7f:7a:5a:1f:0e:71:7a:1b:e4:4b:76:4d:35:
be:c6:fb:36:a6:3a:4a:b7:05:69:ec:8b:c9:7d:5d:
3c:dc:4d:23:18:31:89:70:a1:cd:19:70:4d:a9:c9:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:44:63:0C:3C:E9:B3:BA:E6:77:45:3E:DC:88:CF:F6:A7:F5:BA
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Js1EYww86bO65ndFPtyIz_an9bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.170.0/24
194.6.173.0/24
194.209.31.0/24
194.209.199.0/24
195.65.142.0/24
Signature Algorithm: sha256WithRSAEncryption
38:91:fe:bb:bd:b1:07:88:bf:35:ac:f8:ca:5f:fb:de:51:24:
17:64:14:c2:31:60:d2:d6:77:6a:cb:88:dd:dc:89:21:8e:57:
1b:7a:65:90:bb:24:51:9c:33:c2:da:31:64:7b:b4:ae:43:96:
2f:9a:83:a6:be:f6:e1:0c:4a:49:fa:82:bc:97:f9:2c:69:ce:
d6:d5:0a:99:a7:01:33:6f:87:30:94:c3:53:62:be:01:52:ef:
9b:ed:1c:c6:ba:b6:5d:e5:f6:85:80:e4:79:18:b2:ec:12:4d:
aa:ca:54:3e:e9:1a:09:86:a0:49:18:cb:dd:bd:45:47:51:3a:
2a:6a:06:41:75:52:2c:f2:77:f4:12:39:cd:85:45:b6:28:f9:
70:8d:40:d1:18:8a:2e:08:81:59:ef:51:68:9f:33:56:72:fd:
b1:f3:a7:24:01:34:56:42:9d:08:dc:9c:51:8e:5f:fa:54:4c:
36:f7:3b:83:43:ea:e2:18:c0:ab:ef:84:52:3d:62:bb:ab:3a:
34:30:42:39:e1:05:01:88:9f:88:42:b9:ea:59:7d:af:64:62:
59:d3:4c:3a:1a:2c:fb:f2:97:84:9a:94:4a:1b:7d:4a:7e:2f:
87:62:78:20:54:4f:98:a1:3f:c5:d5:36:3a:d8:12:0c:97:13:
8f:eb:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:54 2024 by rpki-client on console-fra.rpki-client.org