Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/JJJZnsU97Rb1c3V-hOlNhfWdg-s.roa
File: JJJZnsU97Rb1c3V-hOlNhfWdg-s.roa (raw, json)
Hash identifier: PfaifJ8hAbrHUrlES7CQQdME63koH4LE3hiL768vOpQ=
Subject key identifier: 24:92:59:9E:C5:3D:ED:16:F5:73:75:7E:84:E9:4D:85:F5:9D:83:EB
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 018CC80154E18DF4C7DC315ED23E7E6548DC
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/JJJZnsU97Rb1c3V-hOlNhfWdg-s.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 213.109.76.0/23 maxlen: 23
91.239.43.0/24 maxlen: 24
195.191.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:54:e1:8d:f4:c7:dc:31:5e:d2:3e:7e:65:48:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2492599ec53ded16f573757e84e94d85f59d83eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:a6:8c:c8:6a:5e:3d:6a:b4:c0:d7:e2:49:
84:f0:63:e2:6e:85:df:25:92:bf:cb:f0:26:4f:23:
21:c5:5f:50:17:f1:b0:b7:1b:b1:59:53:4c:02:f5:
73:8c:c0:83:e3:54:fa:fb:7c:3b:ce:6d:1b:bf:a6:
c9:c4:95:0e:38:02:df:5b:5b:82:db:d6:73:bb:16:
58:cf:9b:6d:2d:c1:7a:c6:a0:0c:76:66:0a:29:71:
71:6f:a0:95:47:70:ca:07:6e:35:b6:16:8b:1c:01:
13:d2:2b:a9:9d:99:87:f9:89:b0:e1:a0:b5:b7:b4:
9b:3f:d0:40:1d:8a:4a:60:7c:87:d7:f9:a9:ea:b3:
d3:51:f2:fa:7f:20:eb:b2:c3:f3:d9:17:62:11:08:
f7:32:5e:a3:75:84:d9:31:67:31:d5:81:4a:9f:4b:
72:58:95:5f:c4:fa:1d:ac:6c:05:67:d4:4d:8b:0f:
e7:b5:45:e8:49:18:59:0d:0c:ca:22:bb:f0:12:74:
86:c8:57:03:05:91:50:32:14:dd:10:eb:50:2f:6e:
ae:f4:2c:d5:13:75:28:04:41:c4:49:15:29:41:cc:
68:78:e1:46:fd:38:a3:0a:bb:c1:eb:37:4f:b6:a7:
4a:d2:b7:5b:02:a4:6b:39:ae:70:2a:74:97:ea:75:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:59:9E:C5:3D:ED:16:F5:73:75:7E:84:E9:4D:85:F5:9D:83:EB
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/JJJZnsU97Rb1c3V-hOlNhfWdg-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.43.0/24
195.191.65.0/24
213.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
57:5e:96:ab:6c:9a:4d:fd:b1:5e:75:bc:87:f5:90:41:fd:fb:
5c:e8:b1:d4:1b:91:ad:a8:55:37:f6:ba:f2:95:4f:13:e7:ca:
a1:4a:c3:ee:e2:6e:11:ac:18:7c:c1:f7:91:fc:91:6a:b5:a8:
9f:69:e2:05:df:e5:bd:45:da:d1:eb:3b:cf:4b:69:fb:a3:98:
a7:90:6a:99:65:42:5e:26:71:e9:35:bc:41:d6:62:5e:25:24:
08:ca:43:3e:17:29:19:27:0a:4e:70:06:21:a5:46:2f:37:bb:
4b:b2:7e:1d:27:ea:3d:d9:cf:79:a0:da:93:cd:1e:69:00:0d:
95:9c:16:58:97:df:0c:02:b8:b9:7f:ee:a8:ec:2d:a9:76:3d:
10:0e:0b:1b:f0:1d:f9:32:ca:ab:2e:82:ab:67:fc:4b:92:87:
a1:20:e2:d6:68:04:36:92:da:9f:b9:b2:41:ed:c7:fa:e7:a6:
63:8a:ad:21:45:16:5f:d1:06:6e:da:e9:ec:61:cf:d4:01:aa:
d7:e0:27:27:49:76:bb:e2:bd:47:fc:70:9f:f4:e6:f3:0b:55:
da:af:46:ad:7b:e6:e8:90:46:db:ce:da:5c:bd:b1:3e:d4:bc:
2f:4f:6e:9c:8d:80:16:e7:11:95:ca:7a:a7:8c:42:27:8f:19:
3b:ed:51:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:17:19 2024 by rpki-client on console-fra.rpki-client.org