Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jm57qkSogoJ02693Rwykk88nCko.roa
File: jm57qkSogoJ02693Rwykk88nCko.roa (raw, json)
Hash identifier: GwrMHyWbP8CiqiPGns6jvEDZEGRgiL+xCxKkRB5obHs=
Subject key identifier: 8E:6E:7B:AA:44:A8:82:82:74:DB:AF:77:47:0C:A4:93:CF:27:0A:4A
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B7287103536341C5CC742ABD874FC3
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jm57qkSogoJ02693Rwykk88nCko.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2286
IP address blocks: 193.251.192.0/22 maxlen: 24
193.251.196.0/23 maxlen: 24
193.251.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:28:71:03:53:63:41:c5:cc:74:2a:bd:87:4f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e6e7baa44a8828274dbaf77470ca493cf270a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:6a:9d:ad:74:78:5b:a2:aa:e8:2f:66:22:
9d:c0:cb:85:0c:b6:12:f3:6b:bb:85:dd:62:4f:97:
48:51:8b:8f:fc:f2:94:56:ff:89:f0:0c:0d:d0:9a:
1f:f9:ba:47:d7:d9:67:19:a2:e8:b7:a5:ef:64:14:
27:34:18:35:4d:ab:4e:a9:9f:9b:e9:9b:78:b1:6a:
c8:eb:41:ca:b8:ea:5e:90:0b:cc:83:20:f7:45:7f:
fc:c7:87:99:c9:3e:47:e8:87:5a:09:04:99:48:67:
16:a7:47:35:7a:a4:51:2f:5f:21:c0:42:68:15:00:
63:e1:06:6b:2b:a5:59:25:31:98:8d:d4:e9:55:7b:
4b:f4:81:01:0c:ad:3e:9a:6b:cb:e1:0e:55:be:1b:
7e:3e:bb:20:07:67:dd:7e:b8:6b:6d:b4:3b:4a:6e:
96:76:fa:91:e4:56:97:cc:91:ef:ee:15:da:68:33:
8e:58:6b:37:e9:14:d6:08:6b:d2:7b:e8:a2:fb:80:
cf:66:6c:e0:03:4f:c1:09:97:dd:66:b6:4d:67:ad:
a3:7e:ac:65:0b:00:d7:cc:5c:e3:53:85:d6:9c:01:
0e:8a:9e:8d:c8:5f:45:59:b5:79:a8:c9:ee:19:82:
38:87:b5:65:fb:04:48:9e:e3:28:1f:b0:e0:67:a6:
bf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:7B:AA:44:A8:82:82:74:DB:AF:77:47:0C:A4:93:CF:27:0A:4A
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jm57qkSogoJ02693Rwykk88nCko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.251.192.0-193.251.197.255
193.251.224.0/22
Signature Algorithm: sha256WithRSAEncryption
14:81:a0:9d:8e:9a:2f:92:fe:ed:45:ee:aa:7d:ab:17:8a:da:
e9:53:1b:83:6e:24:df:af:04:e0:64:dc:a9:d3:22:a3:50:e4:
bd:76:54:69:44:61:33:91:5a:2d:fc:cf:1e:75:a8:08:c7:c5:
f0:c0:35:67:81:ad:7c:b5:5e:15:54:d3:00:fa:65:8e:1d:0f:
28:7a:82:4b:a2:96:99:4d:8c:00:e9:5f:4c:ee:11:fd:66:fe:
fd:81:9e:29:3c:e0:ab:a8:85:6e:0e:20:7c:ca:f4:e2:8b:d7:
27:fb:30:be:fe:69:82:69:80:a5:8a:69:f0:09:4c:e6:c8:04:
2d:f4:a2:9e:0b:2e:cc:b8:53:f9:12:7a:48:23:ab:f0:7f:b8:
dc:0b:56:a7:24:b5:f5:ed:bb:dc:3e:a5:27:26:38:92:70:d8:
01:80:47:04:28:ff:3e:9f:7e:3b:3c:93:e0:1d:0d:e9:c6:10:
95:2c:48:02:d9:8e:00:f9:02:38:94:1f:3e:e8:22:0a:91:c5:
38:0d:9a:e4:8b:11:d7:8f:4f:fa:20:4e:db:f4:aa:7e:aa:cc:
47:de:c2:1b:28:89:c9:b4:10:19:32:21:4e:a9:6a:2d:1b:93:
da:7f:3e:c2:dc:87:08:ec:d6:fd:1d:96:5b:31:0e:4c:f3:30:
78:2f:fd:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 20:40:49 2024 by rpki-client on console-fra.rpki-client.org