Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JxP9I2tMRoNZ-gwdnWdV35J_YBg.roa
File: JxP9I2tMRoNZ-gwdnWdV35J_YBg.roa (raw, json)
Hash identifier: hJdeltkLEPBSlnL/hxV81MRjLvMWR7Hn4UtyrpPol68=
Subject key identifier: 27:13:FD:23:6B:4C:46:83:59:FA:0C:1D:9D:67:55:DF:92:7F:60:18
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018E4648E13D9F3F7962BB44E727F7B206CB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JxP9I2tMRoNZ-gwdnWdV35J_YBg.roa
Signing time: Sat 16 Mar 2024 08:02:45 +0000
ROA not before: Sat 16 Mar 2024 08:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48359
IP address blocks: 91.246.49.0/24 maxlen: 24
91.247.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:48:e1:3d:9f:3f:79:62:bb:44:e7:27:f7:b2:06:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 16 08:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2713fd236b4c468359fa0c1d9d6755df927f6018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:40:e8:81:ff:3f:27:3f:28:72:7a:49:bf:
8b:3c:ee:9f:5b:aa:22:47:6f:e1:9e:69:4a:19:f0:
b7:4e:51:f3:79:b2:7c:52:52:f9:82:93:b9:22:16:
03:1f:82:23:c9:47:39:3f:ba:72:ee:db:54:e3:14:
9f:6f:2b:20:8c:a1:31:e4:af:94:5a:53:29:d5:26:
e5:0d:44:49:4f:be:3f:01:42:4f:1d:6a:dd:58:cd:
70:36:7f:08:0e:a2:94:98:20:77:24:11:6a:b6:34:
eb:7c:3a:f9:a8:ff:5d:d3:a5:76:52:d8:82:ff:e9:
97:b2:3d:13:36:11:8e:11:da:31:fb:4d:59:3e:58:
b0:9b:39:99:a9:60:60:93:b8:ef:21:cb:02:98:a1:
e2:15:3d:5a:65:9b:4a:a0:67:c0:0e:50:8e:2e:48:
18:01:e3:62:ff:a2:5c:23:26:7c:5b:0e:06:87:61:
8c:ef:e3:09:5b:7b:f3:3c:3a:37:9c:90:f7:c8:3e:
9a:cb:9c:6e:d9:7b:ed:ea:b2:2e:3f:5d:cd:7e:e9:
28:07:ee:89:1b:a2:e4:76:6b:a8:a4:7e:72:7e:25:
a0:ca:1a:7b:1a:12:ec:ea:7c:03:d3:88:ef:fa:af:
b0:85:a4:02:6f:46:8b:a9:b6:51:6a:67:f1:9a:5c:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:FD:23:6B:4C:46:83:59:FA:0C:1D:9D:67:55:DF:92:7F:60:18
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JxP9I2tMRoNZ-gwdnWdV35J_YBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.49.0/24
91.247.177.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:41:44:01:2b:fd:d4:39:96:eb:ba:47:b8:91:57:7f:c1:53:
48:5e:4d:67:71:2f:cb:87:0a:ed:27:98:c6:93:53:1f:9d:f7:
cc:e9:9c:27:aa:af:79:d3:c8:da:18:b1:fc:82:7e:43:64:f2:
92:9a:a7:63:bd:3e:9f:51:0f:e1:89:08:3d:f2:f8:39:fd:c4:
2d:77:e1:f6:2b:2a:12:bf:ac:31:0a:39:16:67:27:02:37:c7:
59:3c:c7:73:7a:76:dd:26:fe:95:aa:1e:87:8b:c9:db:bb:b8:
a9:dc:0b:fc:a9:d7:27:35:ae:51:b6:bd:f1:0c:ac:6a:c3:39:
1d:44:62:d3:08:19:30:50:bc:b1:56:42:b7:4e:b9:ce:42:b0:
e6:ae:bc:aa:57:4e:03:da:e6:8a:e0:48:93:52:75:cc:7e:b7:
05:b5:4f:47:19:67:b1:0a:a0:d7:0d:70:47:3d:f5:b8:62:e1:
08:f6:e7:d3:af:3f:e6:0a:07:33:e0:82:43:bc:8b:48:db:03:
76:2a:46:67:ca:b6:d7:0c:59:0c:8e:e7:c1:fc:b5:cf:a1:e2:
99:e0:e0:cb:e8:ac:32:8b:e3:76:8a:30:6b:2f:e5:c5:ee:14:
4e:b7:77:6c:37:48:74:2b:cc:d0:32:00:61:09:74:c7:4a:ec:
8a:89:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:50:17 2024 by rpki-client on console-fra.rpki-client.org