Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/JG6S1TbKenqMlHIvvP_hUs9fL7U.roa
File: JG6S1TbKenqMlHIvvP_hUs9fL7U.roa (raw, json)
Hash identifier: /PPy5b3fj0mbRIV64NNb/EtcTgZW9/kCakhPMI4goho=
Subject key identifier: 24:6E:92:D5:36:CA:7A:7A:8C:94:72:2F:BC:FF:E1:52:CF:5F:2F:B5
Certificate issuer: /CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Certificate serial: 018E581ECBA319E335EA7280F8D2A84CA1CB
Authority key identifier: 73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/JG6S1TbKenqMlHIvvP_hUs9fL7U.roa
Signing time: Tue 19 Mar 2024 19:09:56 +0000
ROA not before: Tue 19 Mar 2024 19:09:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51114
IP address blocks: 193.138.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:1e:cb:a3:19:e3:35:ea:72:80:f8:d2:a8:4c:a1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Validity
Not Before: Mar 19 19:09:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=246e92d536ca7a7a8c94722fbcffe152cf5f2fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:2a:56:09:61:1a:9b:f9:d0:34:fe:cc:1e:
d2:85:63:1d:34:73:76:d3:31:92:29:ea:1c:39:41:
45:b8:d3:4e:76:d1:6b:96:35:dc:cb:2e:e7:a8:2b:
40:c1:95:74:0c:b2:0d:17:ff:8e:57:20:2f:18:63:
10:f0:05:d8:03:f6:4c:45:99:32:fd:7d:49:f0:cb:
4a:53:57:cb:45:6e:fc:a1:67:c1:88:8d:c0:e3:0a:
50:94:2c:16:df:78:a6:39:9d:8e:dd:94:08:e2:a3:
0d:a7:bb:9f:90:1b:c0:6d:5c:8d:c1:f1:1f:e1:cd:
c0:73:28:f8:7c:ff:4a:ca:f0:f6:f5:e5:aa:18:2e:
e8:2d:43:45:28:a8:e3:43:1d:a7:f2:b6:97:3a:88:
91:5e:69:e4:f0:12:01:6a:c2:94:1c:2c:52:5c:46:
59:ba:fb:7f:fa:44:b7:3f:72:65:65:34:be:a9:e5:
f9:13:8b:18:76:95:c1:fc:4f:0e:63:fa:12:ee:f0:
bc:ca:54:7b:65:61:fe:1f:27:e1:f0:99:f9:9f:91:
a0:c0:d4:b8:1a:bf:9e:3a:b6:c4:48:dd:1d:a9:9c:
64:56:64:8f:96:9f:b1:64:08:8e:82:59:e2:df:95:
3a:5c:0c:49:eb:60:29:4d:53:c1:28:73:43:5d:d8:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6E:92:D5:36:CA:7A:7A:8C:94:72:2F:BC:FF:E1:52:CF:5F:2F:B5
X509v3 Authority Key Identifier:
keyid:73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/JG6S1TbKenqMlHIvvP_hUs9fL7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.104.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b4:08:3a:5e:9c:17:c6:5f:4e:b2:94:46:b6:b7:26:03:84:
bd:18:26:74:32:f4:58:d9:ec:4f:eb:ac:9c:99:0a:92:c5:8e:
58:88:a6:b1:c4:5f:1e:72:54:cf:29:3c:1a:1d:6f:a5:9a:0f:
80:cb:d0:2e:51:4e:c4:9c:13:a1:d0:98:b4:9f:6b:ce:81:98:
c2:97:6d:b1:43:e9:15:77:9e:6f:9f:55:94:69:9d:cd:01:13:
5a:90:80:a9:75:ca:44:5a:d0:ee:9d:21:fb:86:00:b5:37:d5:
4b:b1:06:6d:e6:50:d6:86:8b:40:3f:a9:98:94:3e:1d:28:4f:
d4:62:7a:ce:a7:ca:95:37:54:60:83:3e:d3:3c:eb:90:d5:14:
51:d0:5d:ce:34:ad:6d:fb:01:4d:b7:39:61:fa:66:6a:17:53:
f6:ba:88:22:fb:8d:72:4d:75:45:94:51:f8:4f:ea:c7:45:8e:
8c:3d:48:b3:82:84:c2:9f:01:33:28:44:fd:51:3a:53:d0:16:
a0:a1:08:ab:4d:60:52:18:a4:a0:0b:19:d9:9c:1d:54:a4:24:
b2:0c:fc:8e:1d:ad:2a:54:c1:8c:dc:1f:bc:0f:94:87:b2:8c:
c2:f4:44:3c:74:6d:1d:82:89:c8:ce:51:3d:e2:32:e0:f8:e5:
59:49:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:30:29 2024 by rpki-client on console-fra.rpki-client.org