Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Jn7TU60tFXuelCkmwGFu7MUrRd4.roa
File: Jn7TU60tFXuelCkmwGFu7MUrRd4.roa (raw, json)
Hash identifier: UB97Aoe/9yJbPboC6I7c1gI5UNO1RpsWxuV0LW/9KPE=
Subject key identifier: 26:7E:D3:53:AD:2D:15:7B:9E:94:29:26:C0:61:6E:EC:C5:2B:45:DE
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB3207E8788561C5B7495E0EF895AF
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Jn7TU60tFXuelCkmwGFu7MUrRd4.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202943
IP address blocks: 91.242.82.0/24 maxlen: 24
91.242.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:32:07:e8:78:85:61:c5:b7:49:5e:0e:f8:95:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=267ed353ad2d157b9e942926c0616eecc52b45de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:0f:85:09:df:15:28:52:9d:e5:b6:ff:4a:
ac:37:47:f8:34:d9:af:21:07:69:51:6b:9a:dd:1a:
95:2a:02:ad:d2:3f:53:72:1f:fd:51:bf:eb:d0:f1:
75:0f:68:93:3f:36:3a:5f:34:55:e7:55:b0:4f:b6:
dc:4f:6c:61:59:77:14:39:f9:b2:8c:b9:50:70:83:
f4:ad:67:71:80:fa:27:b1:20:71:37:82:8d:3a:18:
c5:11:0d:92:76:6f:7f:35:ef:13:1b:31:05:43:a7:
fa:2c:32:8c:fb:5b:76:ff:a8:f3:b4:1c:07:43:7f:
65:3a:46:60:13:16:19:19:2b:d9:f0:81:52:09:ec:
2e:b8:31:9d:37:47:bf:bb:83:21:70:14:93:89:6d:
e4:4d:f2:a2:87:c2:55:2d:99:a6:62:99:68:e2:14:
09:d3:20:77:5b:25:53:77:78:2c:a0:58:03:76:06:
9e:0a:9a:61:5f:ae:8c:8a:6d:e1:5b:35:22:4b:b9:
82:d0:44:48:2e:52:9f:90:7a:79:44:3d:da:66:58:
9e:d3:34:fa:19:2d:75:c2:b7:e4:fb:5e:8d:c0:20:
93:52:b4:39:f6:db:cd:e1:e9:10:93:f9:f6:2c:5f:
3c:d5:83:cd:eb:fb:ed:0e:58:64:ee:a6:31:a8:b9:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:D3:53:AD:2D:15:7B:9E:94:29:26:C0:61:6E:EC:C5:2B:45:DE
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Jn7TU60tFXuelCkmwGFu7MUrRd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.82.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:ba:1d:b1:ed:08:9b:71:da:d9:99:83:a0:e2:b7:84:7b:75:
84:e6:08:45:c6:5c:08:fe:71:b0:e6:44:96:ce:0a:7a:ab:02:
c3:4f:3f:c5:0a:7a:26:b4:46:bf:2b:03:9a:b3:b9:ad:93:aa:
9d:77:66:6e:31:75:cd:4f:4c:a4:cd:76:ae:59:b6:cf:49:24:
ba:39:d0:22:88:37:7e:fa:02:a0:6e:28:86:64:46:39:25:6b:
97:91:26:4e:3e:f3:8f:f8:34:3e:3c:da:09:bb:91:7f:9b:e7:
5e:f0:ce:8f:61:d5:ae:89:e4:dc:e0:b7:56:09:85:87:1c:1b:
b3:eb:cd:49:3e:8d:83:65:00:ed:ca:ee:3c:e5:4f:15:18:c2:
4a:2a:18:16:79:8a:b3:ac:28:3b:56:3c:c2:af:ec:00:be:a9:
db:fd:7f:e3:55:27:27:e5:40:3f:8e:6e:ff:77:c9:cb:12:3a:
95:9c:13:13:9d:b5:21:f8:14:51:78:84:be:cc:d3:e6:79:69:
b9:3d:66:d3:a2:d1:4f:78:07:60:f1:ac:46:f9:72:d6:ae:f7:
78:b8:b5:da:fd:1a:c5:0f:db:92:cd:3f:af:6e:ec:c8:10:0e:
10:0e:bb:22:fc:32:6b:66:02:eb:fd:9a:0b:74:d2:46:cb:e2:
6e:c7:49:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:31 2024 by rpki-client on console-ams.rpki-client.org