Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/JnCeM_UrHxSagSWeEYKuxVT_RsE.roa
File: JnCeM_UrHxSagSWeEYKuxVT_RsE.roa (raw, json)
Hash identifier: Nqc0kLRKWhdceFL4S+WkkPQoNAcD+SOL0v5npMpEC18=
Subject key identifier: 26:70:9E:33:F5:2B:1F:14:9A:81:25:9E:11:82:AE:C5:54:FF:46:C1
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 018CC8DF3AD9183EB35C2AD45C76ECADA4D6
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/JnCeM_UrHxSagSWeEYKuxVT_RsE.roa
Signing time: Tue 02 Jan 2024 06:32:01 +0000
ROA not before: Tue 02 Jan 2024 06:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199834
IP address blocks: 185.141.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:3a:d9:18:3e:b3:5c:2a:d4:5c:76:ec:ad:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Jan 2 06:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26709e33f52b1f149a81259e1182aec554ff46c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:38:34:b0:61:cf:d0:9f:3a:5b:69:1f:6c:
d4:84:b2:30:e4:c4:8e:66:78:11:a1:df:74:c5:4a:
dd:d3:ea:50:9a:46:25:58:89:df:dd:44:6f:91:8f:
6f:cd:f0:95:d5:7a:a5:9b:eb:e1:ae:4c:12:bb:67:
2d:05:eb:72:8a:5c:aa:4f:63:8c:df:8a:3f:78:22:
5e:c4:91:d2:6a:69:0e:d4:d2:c4:26:13:35:77:45:
6b:4a:db:44:5a:5e:67:1b:85:91:65:c6:04:da:5c:
ea:43:b1:71:80:97:ca:c8:15:6f:25:ce:c1:35:a1:
a9:43:2d:46:ed:e9:1e:69:ba:20:bf:d6:32:9b:e5:
62:a7:ce:0b:4b:36:3d:b4:d2:5d:e6:44:77:b7:17:
c8:e8:0e:8c:8c:ee:bc:25:d9:8d:b5:e8:87:ba:87:
a6:1a:da:1e:46:11:1d:a2:8a:dd:27:dc:6e:45:c7:
a6:92:b7:c9:e0:e9:80:25:71:62:00:a8:46:af:4c:
08:0b:82:93:f3:1c:78:e9:06:4b:4c:79:22:29:61:
1c:34:df:3a:3d:6c:0a:04:40:29:0d:ca:7f:c0:62:
97:78:cf:a4:7f:a6:58:0c:45:8a:b0:82:20:26:c0:
6c:41:52:2b:91:44:0e:b6:08:c2:3e:ba:25:82:51:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:9E:33:F5:2B:1F:14:9A:81:25:9E:11:82:AE:C5:54:FF:46:C1
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/JnCeM_UrHxSagSWeEYKuxVT_RsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.26.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d9:62:ac:31:9d:a7:15:07:c3:72:6d:ac:c0:58:92:8e:d5:
eb:ce:9c:43:52:62:5b:b1:f3:15:20:4d:61:71:f8:7b:04:15:
3f:98:b9:ad:4d:a3:11:92:cc:b4:4a:6f:da:f9:58:b0:1b:17:
5d:8e:e2:6e:f7:89:94:21:34:b5:9a:14:ac:65:99:c3:a6:95:
50:12:dc:c9:99:cb:04:cd:0d:de:93:6e:1f:2d:7b:30:5d:8e:
fc:e3:fd:6b:92:14:1e:76:52:10:98:22:2b:02:18:a3:b9:86:
a9:c4:e0:16:fb:56:0f:0e:8e:d0:fb:41:d2:86:d8:3a:58:27:
f0:5a:d9:aa:5f:d2:0f:1c:4f:33:6a:69:3d:6a:96:bf:3e:e3:
ce:bd:ca:4d:46:92:76:a1:c9:44:ae:ad:fb:9c:15:54:bd:0c:
09:e2:06:73:df:23:cc:e8:d8:41:4e:5a:fc:f1:1e:05:2c:a7:
dd:64:92:85:32:bf:14:71:f5:cb:ed:4b:9a:61:17:00:9f:e2:
20:29:2c:df:12:aa:7a:a8:ff:bb:ad:d6:cf:2a:8c:ca:a0:22:
01:09:ed:08:f9:22:d7:96:d3:1f:d5:f2:8c:0d:fb:65:54:5c:
d6:df:ca:4a:47:e2:e0:cf:61:9d:8c:31:99:de:e9:13:b6:b1:
e4:ac:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:35:15 2024 by rpki-client on console-ams.rpki-client.org