Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/JnLaBS60AomoxP44MXpUDaNe3QI.roa
File: JnLaBS60AomoxP44MXpUDaNe3QI.roa (raw, json)
Hash identifier: RRaFI2QtOfJyHZRhQRx0pw6mVPjD5TGs/l9fHVu071A=
Subject key identifier: 26:72:DA:05:2E:B4:02:89:A8:C4:FE:38:31:7A:54:0D:A3:5E:DD:02
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC7274E02D655FC441901094005F3A476
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/JnLaBS60AomoxP44MXpUDaNe3QI.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 213.238.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4e:02:d6:55:fc:44:19:01:09:40:05:f3:a4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2672da052eb40289a8c4fe38317a540da35edd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:0a:b0:94:33:17:0c:6e:22:1c:2c:15:aa:
c0:0f:c9:fb:69:54:55:3b:a4:08:ab:90:08:21:48:
87:cc:21:46:60:aa:ff:e7:b1:7e:88:a6:56:5c:e0:
b3:08:8b:9c:62:48:c0:8f:72:1c:db:36:c7:f4:13:
30:88:fa:19:a9:1a:3e:ce:71:11:d0:48:4d:69:05:
e0:10:85:52:c3:62:99:f6:91:10:50:a5:d5:f1:eb:
7a:ba:81:3b:17:ac:d5:cb:e9:e0:c5:f0:ea:bd:e4:
30:13:1f:9c:6a:87:58:99:4f:35:47:85:84:bb:71:
86:f8:9e:eb:85:70:ef:9e:b3:d0:a1:b5:3f:98:2c:
78:fc:ba:aa:68:65:56:d1:a1:dd:8a:14:24:97:3f:
7f:0f:c9:5c:e0:7b:fc:7d:3f:a0:10:93:39:a6:5f:
e0:5e:99:53:82:a1:6d:6d:f4:88:87:51:1e:49:a8:
cc:9e:95:6e:a1:a6:09:b5:10:d1:49:34:f3:95:3f:
53:b8:2e:27:5d:9d:ef:51:d9:b2:02:e8:3b:61:e8:
99:52:c8:ca:29:62:a2:1d:70:5d:96:21:bb:6f:81:
48:ea:1d:33:7e:ce:b9:a4:f6:fc:0e:36:57:11:d2:
55:a0:ed:02:e8:b2:e5:48:f3:97:df:95:c3:50:9e:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:DA:05:2E:B4:02:89:A8:C4:FE:38:31:7A:54:0D:A3:5E:DD:02
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/JnLaBS60AomoxP44MXpUDaNe3QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.186.0/24
Signature Algorithm: sha256WithRSAEncryption
75:42:77:74:17:9c:02:e8:02:1a:4f:5d:d5:1f:c0:ee:2f:2b:
de:b8:24:7a:b7:91:0b:90:bd:0d:e4:a6:30:48:72:7d:cc:98:
3c:cf:f5:10:31:44:14:88:fe:eb:42:c6:d3:9c:97:0f:93:47:
84:0c:18:39:0a:33:d2:07:3d:0a:08:fb:62:39:e1:29:33:a0:
3e:78:fc:dd:df:52:ab:82:c4:b9:72:f8:47:a8:0b:1b:3d:3a:
17:dd:a1:6c:13:27:ce:49:07:15:24:c7:fc:37:7a:d7:48:4a:
97:79:96:54:7a:c0:4e:93:7f:46:8b:bd:72:28:22:56:c5:18:
01:47:d7:5c:da:1c:b9:51:e8:4e:3b:52:2c:67:bd:a8:92:0d:
31:1a:08:d2:94:58:39:0d:a8:f9:52:92:98:f2:6e:99:94:55:
3a:d1:93:5e:89:05:97:fd:52:cd:bf:58:64:4f:78:df:a7:3c:
a0:df:23:e7:75:ca:bc:89:78:d4:a3:9e:f9:27:0b:5e:d4:10:
6f:6c:57:61:af:93:08:5e:67:9a:98:3b:2f:70:78:a7:cd:3e:
7b:40:3e:4e:4e:d6:ff:d7:8e:83:fc:d5:c5:b3:cc:5e:ef:68:
5f:71:d9:fd:dc:2f:41:40:06:1d:88:ad:6e:6e:92:84:98:99:
52:13:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:29:37 2024 by rpki-client on console-fra.rpki-client.org