Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/JKkSE0foxUNiGA-TlEf2VdsH5hg.roa
File: JKkSE0foxUNiGA-TlEf2VdsH5hg.roa (raw, json)
Hash identifier: WlfiwlQLkeyvgPwDcXhEi+E3socqLbKJ/x1dCRTTn8A=
Subject key identifier: 24:A9:12:13:47:E8:C5:43:62:18:0F:93:94:47:F6:55:DB:07:E6:18
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 018E318469181399F340175636DDA3E3290B
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/JKkSE0foxUNiGA-TlEf2VdsH5hg.roa
Signing time: Tue 12 Mar 2024 07:15:45 +0000
ROA not before: Tue 12 Mar 2024 07:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:84:69:18:13:99:f3:40:17:56:36:dd:a3:e3:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Mar 12 07:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24a9121347e8c54362180f939447f655db07e618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d1:b9:cd:ed:59:bb:a7:7c:15:32:37:f9:26:
55:8b:ac:f6:e2:c7:76:ea:4e:0d:62:4a:b9:8f:d3:
07:cf:73:c2:b5:39:fb:36:77:a0:c4:0d:16:e0:f1:
65:24:3c:bf:cc:4c:af:c7:84:46:6b:d5:32:3b:f5:
0a:ae:e9:68:09:bd:1c:be:dd:8a:87:24:b1:ef:fd:
b9:9c:f1:29:f0:14:dd:c2:14:60:e7:31:d4:ed:fa:
7a:6a:b2:13:14:2d:49:2f:c7:8c:9e:11:59:49:25:
58:9d:f8:44:c5:9d:d3:b3:00:0e:90:c9:d1:83:99:
12:23:93:41:a6:3b:eb:eb:48:84:85:f4:aa:02:63:
08:52:a2:9d:07:2c:aa:a6:9c:a8:a6:8a:c5:88:80:
31:6b:28:14:9a:7c:f9:ae:45:ab:c0:e1:89:a3:20:
d6:07:cf:e2:34:64:f2:51:77:69:6f:07:30:cb:e2:
a6:99:2c:22:25:37:64:ac:a0:56:fa:ca:5a:a8:6b:
ae:61:1f:6e:bc:26:1c:af:3c:7a:98:1e:94:93:0c:
93:74:75:f5:bb:30:c4:e3:a6:a6:d5:e0:03:a0:43:
ce:b4:b8:5b:12:a3:35:d9:f8:80:e5:cd:3a:60:44:
10:7f:f1:d4:6f:18:8f:28:f2:bd:a3:89:91:94:00:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:12:13:47:E8:C5:43:62:18:0F:93:94:47:F6:55:DB:07:E6:18
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/JKkSE0foxUNiGA-TlEf2VdsH5hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5f:d7:3f:1e:ba:83:2e:af:2d:49:20:72:df:70:a3:65:db:
98:c6:0c:66:81:24:fd:fa:34:21:8a:64:94:a5:b7:d2:20:90:
9b:4d:86:e7:eb:52:a6:9b:82:1d:f8:ff:2d:bc:41:83:0e:ba:
38:38:53:34:d0:a9:28:a0:0c:70:81:b0:ab:aa:3b:4b:5a:ab:
62:4a:f4:97:12:4a:73:3f:ed:54:bc:21:cd:3b:32:33:74:28:
98:4c:e6:19:be:4a:a1:bd:a1:f3:13:fa:a5:f3:81:1c:cb:90:
c6:55:e6:f3:f0:3e:ff:23:cd:4c:c3:6a:71:56:95:ec:6f:ad:
58:8a:7b:57:c1:b2:6b:e0:59:f8:a8:ef:41:8f:cc:34:15:f7:
c1:0a:f6:a7:ed:69:88:7d:ac:84:b4:af:98:34:16:5c:0b:d0:
7f:22:05:de:af:d3:40:b8:49:02:eb:1a:ed:db:46:6f:0a:b8:
b2:54:9b:11:40:9a:e2:17:f0:cc:51:60:1a:39:96:dd:d9:95:
af:a4:02:c5:9d:be:39:79:d2:88:34:2f:d2:2e:9e:a1:6e:10:
71:4f:fa:1a:23:23:39:66:9c:81:be:68:9a:3e:0d:74:47:6c:
ab:98:39:cc:d5:21:30:6a:00:7a:42:d6:f9:cb:b3:6a:ec:61:
5c:df:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:18:23 2024 by rpki-client on console-ams.rpki-client.org