Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/JtDJk75Xn5v4cr3SS9eWr0pC1Ns.roa
File: JtDJk75Xn5v4cr3SS9eWr0pC1Ns.roa (raw, json)
Hash identifier: XTArYEkh6zQthwv8NUzk6PaWqGFkr6QZn5H1lrrZNFE=
Subject key identifier: 26:D0:C9:93:BE:57:9F:9B:F8:72:BD:D2:4B:D7:96:AF:4A:42:D4:DB
Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial: 018CCA96CDBB2BBEB0AD5C2D7B1D84C3DB46
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/JtDJk75Xn5v4cr3SS9eWr0pC1Ns.roa
Signing time: Tue 02 Jan 2024 14:32:09 +0000
ROA not before: Tue 02 Jan 2024 14:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47760
IP address blocks: 91.208.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:cd:bb:2b:be:b0:ad:5c:2d:7b:1d:84:c3:db:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Validity
Not Before: Jan 2 14:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26d0c993be579f9bf872bdd24bd796af4a42d4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:86:49:00:09:1c:2e:a2:72:88:81:f9:43:
bf:28:57:bf:39:4b:bd:ff:cc:ee:5b:5a:6d:37:8b:
c3:ad:83:54:64:8c:d2:c8:cf:28:42:65:15:69:49:
7c:8b:03:8a:1e:26:0e:31:f7:3a:db:94:f7:96:1c:
bb:93:25:5c:45:e9:02:e0:36:23:9d:5e:69:12:84:
32:2e:60:82:ca:fe:ea:cc:7b:45:72:c1:29:77:30:
1f:c1:06:04:e8:45:4c:4f:51:3d:cf:4c:92:5b:a6:
a9:a6:d3:d3:08:7a:88:29:51:f6:d9:d6:24:7e:49:
5a:df:3e:ad:aa:24:3f:48:11:80:2b:30:7d:96:f8:
11:69:f3:1e:7a:d9:1d:b0:d2:04:f5:0e:e5:f0:e7:
49:fe:6a:7a:96:7b:51:96:c2:98:d9:b4:9f:c8:ca:
c6:74:8b:5b:5c:a4:4f:0e:1d:2a:c1:27:98:bf:00:
14:4e:d8:da:c6:91:a6:54:e1:5c:7e:50:40:5b:6a:
9e:76:c6:bf:73:c7:28:22:da:fb:08:a7:32:e1:45:
da:da:21:4a:17:2f:7c:74:aa:78:f8:c7:2d:08:cb:
74:b6:ca:a3:a2:49:7e:9d:a3:3d:14:1f:4f:c4:f5:
0f:fc:d0:85:31:65:a5:67:f2:25:52:20:ce:66:8c:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:C9:93:BE:57:9F:9B:F8:72:BD:D2:4B:D7:96:AF:4A:42:D4:DB
X509v3 Authority Key Identifier:
keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/JtDJk75Xn5v4cr3SS9eWr0pC1Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2d:55:ed:49:56:48:b8:50:44:ab:a2:a7:b9:99:57:84:fa:
9b:fd:18:db:86:6c:99:94:06:1e:7c:cc:b1:e3:88:35:c4:69:
78:60:26:54:d6:c4:c3:dd:a5:83:fa:3f:07:a2:7b:84:df:65:
4c:62:c9:3f:52:2a:f2:e6:61:19:bf:57:a7:ed:51:39:cc:04:
0b:e8:75:2e:f0:2a:5f:1f:5a:6a:5f:8e:0e:84:09:8b:e7:c7:
97:e2:d7:ee:19:85:74:2b:e8:6c:7e:44:02:c9:27:9e:75:4e:
69:0d:3b:78:97:02:9b:b6:3c:ff:b2:74:35:95:1c:24:c3:cb:
7c:81:6f:36:64:a4:e1:78:a1:b7:de:e1:21:a5:e1:aa:57:a3:
14:ef:64:e0:1e:2f:bd:65:9b:28:06:67:1e:be:0e:10:aa:1d:
a8:e4:14:73:2c:23:cc:d6:cd:77:ad:da:5f:0f:e6:dd:34:8b:
0a:be:e9:03:a9:0a:23:80:be:a4:29:0a:f6:1a:e9:d0:e3:3d:
20:5b:6c:91:58:5c:df:6b:d5:92:fc:40:43:30:ae:a9:4e:4c:
cb:5a:34:86:de:45:c9:95:56:08:21:bd:f2:7d:db:9c:d3:f6:
99:09:f8:47:2a:e0:09:fe:07:96:6b:ea:46:0d:84:3f:a2:91:
19:bd:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:49:04 2024 by rpki-client on console-ams.rpki-client.org