Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/t_jedIQ_9yEyCw3SHE1FvHryQvE.roa
File: t_jedIQ_9yEyCw3SHE1FvHryQvE.roa (raw, json)
Hash identifier: rHLF8QmDgho/dD+jOY7cOM5/0PmeXm3yFoG4SSTPlJ8=
Subject key identifier: B7:F8:DE:74:84:3F:F7:21:32:0B:0D:D2:1C:4D:45:BC:7A:F2:42:F1
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 018CC8DCDE47CD3F75F25F9BA88EBE92ACA0
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/t_jedIQ_9yEyCw3SHE1FvHryQvE.roa
Signing time: Tue 02 Jan 2024 06:29:27 +0000
ROA not before: Tue 02 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43663
IP address blocks: 91.198.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:de:47:cd:3f:75:f2:5f:9b:a8:8e:be:92:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Jan 2 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7f8de74843ff721320b0dd21c4d45bc7af242f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:21:f4:41:51:27:37:8e:58:50:dd:40:51:
16:e1:df:eb:16:a7:0f:a4:91:f1:7c:52:87:f9:ac:
75:6c:e6:56:95:32:1f:72:fe:fa:44:b3:6d:15:31:
4a:b6:c4:19:e8:10:15:6d:7b:0d:e5:a3:7a:8d:32:
53:10:c5:e3:d6:dd:b6:82:55:04:13:a4:7b:cc:36:
77:42:83:f4:90:ee:21:15:a7:c2:e8:56:66:ba:3f:
08:1f:a3:18:2a:a3:f8:ae:2e:35:ad:17:f5:72:d2:
6e:5a:66:61:54:36:e0:c4:ab:6f:2c:bc:ae:ee:e4:
ed:2d:a1:f7:69:a0:ad:e8:26:52:90:5d:69:f2:36:
54:7e:e1:ac:4b:86:3b:9c:69:42:28:a9:02:b4:8b:
79:42:4f:96:7a:37:38:11:c1:8c:60:f8:44:ae:3f:
66:44:ac:bd:08:9c:c7:68:24:dd:83:f1:f4:00:9d:
ba:2f:3e:80:c2:99:20:a0:7c:49:9c:8d:77:7f:26:
0e:1e:a6:f2:64:20:bb:99:f1:5c:13:94:8b:7b:56:
58:3e:b9:52:8e:03:18:fc:49:c0:9d:54:34:ab:82:
02:4e:37:08:54:e9:12:a4:97:69:37:06:b0:29:90:
32:46:33:40:e5:bb:58:d0:7a:d1:67:5e:68:b6:15:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:DE:74:84:3F:F7:21:32:0B:0D:D2:1C:4D:45:BC:7A:F2:42:F1
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/t_jedIQ_9yEyCw3SHE1FvHryQvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.96.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7b:1a:2a:67:0c:cc:1e:1d:3f:f2:ed:11:ed:ae:a7:1f:b2:
09:65:89:e0:7c:b8:17:c0:53:eb:c8:b0:bd:f9:0b:5a:07:4b:
5b:a2:31:27:09:62:0d:72:08:cd:5a:c2:94:70:c0:92:a6:02:
e1:7c:68:68:92:a8:25:3d:2f:9d:17:ed:35:a2:c4:b4:90:df:
99:2d:31:43:ca:87:dc:3d:ef:26:5e:e7:1d:37:bd:2f:12:1a:
1f:ae:d0:6d:1f:11:c4:9e:15:34:20:c4:46:04:d5:14:49:82:
2f:13:c5:2a:26:2f:97:49:d8:96:93:50:6a:ce:9c:3d:9e:92:
5b:45:47:3c:85:82:e7:76:2e:72:0b:cf:2a:4c:8d:7a:ce:e3:
53:28:f7:bd:1c:86:14:dd:7c:bb:4a:ad:a9:97:48:cf:87:ac:
88:8a:ae:50:24:ec:4d:74:e5:40:34:98:34:12:ef:3b:39:76:
e1:36:69:3e:f8:a9:36:92:86:92:53:f2:06:ea:ff:e7:24:a7:
b1:19:e5:a0:99:68:8a:82:e9:b7:d8:74:48:b0:18:76:ee:b5:
c1:c3:41:00:42:8b:ec:8a:65:99:68:15:75:cd:06:b2:dc:62:
ac:88:b9:63:42:5b:27:56:1e:9c:b9:1f:6b:89:e3:7f:28:b6:
57:37:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:10:04 2024 by rpki-client on console-ams.rpki-client.org