Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/JhVskeGfAEuflDVwrZsWzExy2eA.roa
File: JhVskeGfAEuflDVwrZsWzExy2eA.roa (raw, json)
Hash identifier: dJnUPBGyhjI5ihUMoeW0Gt3yoAsP3Jz9d2pm4QXvBVY=
Subject key identifier: 26:15:6C:91:E1:9F:00:4B:9F:94:35:70:AD:9B:16:CC:4C:72:D9:E0
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 018CC5DC0E583CE2D9191797DF5861E9E95C
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/JhVskeGfAEuflDVwrZsWzExy2eA.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211345
IP address blocks: 193.36.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0e:58:3c:e2:d9:19:17:97:df:58:61:e9:e9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26156c91e19f004b9f943570ad9b16cc4c72d9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:81:2d:4a:04:ed:b2:fe:c4:bb:cf:8d:5b:78:
a3:6f:b1:b6:06:19:4b:0a:7b:51:43:df:0a:76:d3:
c2:34:dc:1e:f3:22:6f:44:c6:1c:b1:9a:28:27:d4:
f8:57:bf:9a:d6:52:f1:f8:85:60:44:df:99:41:55:
61:ff:93:e1:dc:16:fe:8b:56:7e:c2:cc:e9:2c:83:
28:15:c4:bd:75:99:74:81:ab:d5:73:41:25:d0:ff:
67:0c:3f:35:84:8f:f8:37:71:48:93:3f:cf:1c:bf:
13:28:f1:8c:06:0b:29:49:2c:c7:7f:a3:01:04:ea:
2d:4b:8d:d0:ac:5a:32:22:e4:d4:5e:49:11:cd:66:
87:7f:df:5c:3c:ce:24:8b:98:af:20:83:54:83:94:
35:66:06:a7:63:0d:f3:24:4f:e5:87:b5:63:84:96:
34:e6:08:63:53:76:7e:96:d7:13:c8:c3:0f:d1:34:
51:84:71:99:fa:93:a5:be:29:37:75:6d:6c:10:76:
4e:53:f8:74:34:7d:33:66:dc:17:40:ce:92:ad:b5:
4d:2c:ac:d0:48:5c:d2:47:05:69:39:c5:04:7b:86:
53:f8:e7:10:2c:ea:54:4e:47:0a:44:ef:0d:e7:63:
f3:a5:0e:fa:2c:ec:e7:53:8c:78:40:fb:b7:69:1f:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:6C:91:E1:9F:00:4B:9F:94:35:70:AD:9B:16:CC:4C:72:D9:E0
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/JhVskeGfAEuflDVwrZsWzExy2eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:db:3a:b3:42:84:3f:c1:d7:28:c7:c8:4d:5d:f6:09:a8:f7:
ef:0e:b3:b0:8d:f7:7f:d1:7a:d7:9e:fb:2a:c9:da:6b:eb:39:
f4:82:d8:42:d0:f7:49:8c:52:69:2f:35:57:f4:0e:44:f0:f3:
9e:95:6b:41:00:5b:fd:34:d5:01:4b:9c:40:d3:42:f9:4c:27:
af:99:4e:68:21:08:3b:43:50:6e:be:ff:b6:9b:0a:a4:0e:a0:
5c:fd:19:7c:0f:aa:cc:6e:4d:64:68:f5:2e:8e:e6:74:8c:b0:
d6:fd:4a:96:63:86:f1:c3:e5:40:45:9c:91:cc:ca:62:26:81:
29:4e:48:68:30:eb:6d:ce:6f:fe:5c:7d:cb:ea:e0:8a:47:63:
31:05:05:9f:6b:bf:41:8a:fe:06:56:43:41:08:7a:92:cf:31:
f7:01:ca:0e:f3:22:e7:17:8b:6c:8e:63:29:29:4c:a5:dc:bd:
f9:c6:eb:95:0d:6a:40:53:80:b4:e4:f2:46:c1:1a:f6:f3:ab:
41:8c:7c:89:69:97:5c:f2:76:0e:5e:64:48:9c:84:30:70:9b:
ba:30:18:42:0b:4a:3b:4a:8a:54:97:c5:ae:7c:93:bc:01:52:
5d:45:81:45:7c:92:e4:72:5b:c5:31:bc:78:d6:8b:bc:9c:c0:
cb:03:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:42:11 2024 by rpki-client on console-fra.rpki-client.org