Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/JIO_GIxQfrHcfxX2ttN5HTjyDRo.roa
File: JIO_GIxQfrHcfxX2ttN5HTjyDRo.roa (raw, json)
Hash identifier: wyemcSOJvrNwXXncJgCsyxTCv+io1kr1OpaufGa6y7U=
Subject key identifier: 24:83:BF:18:8C:50:7E:B1:DC:7F:15:F6:B6:D3:79:1D:38:F2:0D:1A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018ED1BE34F4408AF633DCE126DA5FE346AC
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/JIO_GIxQfrHcfxX2ttN5HTjyDRo.roa
Signing time: Fri 12 Apr 2024 09:58:07 +0000
ROA not before: Fri 12 Apr 2024 09:58:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61302
IP address blocks: 91.236.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:be:34:f4:40:8a:f6:33:dc:e1:26:da:5f:e3:46:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 12 09:58:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2483bf188c507eb1dc7f15f6b6d3791d38f20d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:ac:ef:69:c6:5d:f9:b9:17:59:67:86:a9:
c3:ca:8a:35:a9:f9:7a:e2:4a:b0:ba:39:0d:1a:be:
2f:21:b4:23:6a:02:64:57:53:b1:f4:65:2c:dc:d3:
f1:83:d8:c0:43:2a:d4:97:98:9b:95:ae:df:ce:22:
db:eb:12:3b:8b:a0:44:d5:a5:b7:22:b0:58:ec:df:
43:53:a3:34:7f:54:e2:61:92:7d:b4:6e:5e:52:85:
33:50:76:a7:95:79:f1:21:81:50:70:a4:3c:35:a5:
1e:87:85:48:00:01:1d:a0:26:e2:e2:1e:7f:0b:e3:
bb:4e:c1:12:b3:09:bd:8d:bc:50:44:16:f7:0e:8b:
5a:23:95:f3:07:e9:35:de:e4:f2:10:ac:ab:e8:fd:
50:14:67:af:0c:fe:5a:9b:d4:e0:1c:27:41:75:54:
26:6f:86:86:94:fb:f2:75:e5:bd:a3:0f:db:af:f9:
6c:4a:6f:5a:9f:4b:df:b4:fc:c8:d6:8f:62:f4:cf:
2b:3a:1e:96:6c:fe:7d:dd:9f:d7:e8:c0:c2:92:07:
cb:bd:62:b8:28:0e:5f:f3:0b:b2:a5:f6:3e:b7:00:
5b:ee:79:98:7c:92:2d:88:ad:fb:c1:08:a8:ef:b6:
0b:43:8b:f9:ac:a1:a6:7d:bc:25:04:53:eb:20:9c:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:83:BF:18:8C:50:7E:B1:DC:7F:15:F6:B6:D3:79:1D:38:F2:0D:1A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/JIO_GIxQfrHcfxX2ttN5HTjyDRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:dd:31:0a:9e:90:5f:6c:4e:33:ff:93:a9:9e:da:0b:d8:c9:
d2:fb:05:c1:76:3d:f4:de:0e:2b:f9:ef:75:77:94:c1:94:bf:
67:90:7d:dd:7e:30:d3:16:ed:5d:66:ca:75:ee:74:94:c5:6f:
dd:28:b4:71:fc:e1:b7:94:0d:75:a9:18:c0:9b:95:e8:11:0d:
ab:da:ce:2b:02:af:80:3d:d9:da:df:20:3f:36:4e:92:0c:b9:
12:cf:31:d1:a2:40:73:b4:1e:53:06:45:3b:e1:48:e5:c2:71:
3b:12:f8:fb:45:98:e6:73:2e:cb:42:99:36:d9:d1:1c:6e:be:
2a:64:04:6b:7f:9d:04:b6:1c:bc:88:cc:e1:74:a1:5a:cc:b2:
d9:9e:a1:6d:86:84:48:93:a9:ee:c7:e9:39:9a:ee:32:45:af:
3c:57:a1:ea:32:ad:36:d3:17:c3:99:c8:47:87:ac:c3:e2:e7:
fb:9d:03:c5:fc:e4:92:a8:75:2d:d7:35:31:41:37:72:31:ec:
4f:9d:5b:3a:a4:d9:cb:94:db:2e:7e:25:4a:4c:c6:d6:94:e3:
cd:10:05:87:f1:e3:3d:55:00:7a:35:f3:51:db:9e:89:b2:b9:
bf:8b:49:8a:38:82:d6:c5:e7:e0:e2:6e:82:03:3e:0b:39:0d:
b3:67:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:45:48 2024 by rpki-client on console-ams.rpki-client.org