Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/Jr-kcr-gaRi5J9xMRfB2x4R6aSg.roa
File: Jr-kcr-gaRi5J9xMRfB2x4R6aSg.roa (raw, json)
Hash identifier: de2XAZn6WEIpiJNbiO7COB2x1CovMfiKEyCmWkaQNGU=
Subject key identifier: 26:BF:A4:72:BF:A0:69:18:B9:27:DC:4C:45:F0:76:C7:84:7A:69:28
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 018CC5DC6FCAE543A8451C71AA8DD820ABC9
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/Jr-kcr-gaRi5J9xMRfB2x4R6aSg.roa
Signing time: Mon 01 Jan 2024 16:30:07 +0000
ROA not before: Mon 01 Jan 2024 16:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34393
IP address blocks: 91.218.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6f:ca:e5:43:a8:45:1c:71:aa:8d:d8:20:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26bfa472bfa06918b927dc4c45f076c7847a6928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0d:9e:7c:01:6f:da:3b:a3:16:1d:33:e6:e1:
7e:7c:66:71:fe:f1:6a:c4:3e:a4:0c:06:78:28:91:
1f:61:cd:b8:10:7b:b5:c7:39:1b:ef:c1:36:0d:c6:
da:a1:28:49:83:a4:a4:7e:1d:4d:9f:0d:7e:32:11:
eb:5d:aa:cd:f9:d2:f8:51:0f:3c:b0:1d:99:99:5c:
63:8c:82:67:95:ec:3e:1e:06:34:43:0b:74:4e:ea:
c9:f8:05:18:6e:9b:ef:ba:ad:32:66:4f:1b:36:d9:
a1:80:aa:0b:53:89:36:1e:e6:b7:89:25:89:13:b9:
91:ad:bc:41:08:b6:e4:d9:64:3d:ad:f3:24:08:05:
35:26:c0:51:07:c1:7f:20:52:82:4c:0a:2b:b0:5b:
a4:76:2f:a3:14:d5:f7:13:e0:56:3f:fb:7e:23:60:
00:6a:35:7f:74:e5:4a:ed:f3:38:7d:35:20:d7:34:
fb:45:30:00:6a:ef:48:7e:43:1d:8c:bf:ce:92:19:
a4:23:e2:a2:88:d9:9d:86:35:48:08:1a:ff:c6:4b:
b3:70:43:95:f8:ab:3a:a1:cf:57:bc:da:ee:69:91:
24:14:19:fd:38:dc:0b:69:24:e5:7b:c2:77:3d:11:
23:a7:04:f7:c2:e8:5e:a4:56:80:e3:e8:8f:1b:45:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BF:A4:72:BF:A0:69:18:B9:27:DC:4C:45:F0:76:C7:84:7A:69:28
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/Jr-kcr-gaRi5J9xMRfB2x4R6aSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.241.0/24
Signature Algorithm: sha256WithRSAEncryption
32:79:5c:e0:68:20:08:d2:7d:46:81:79:e6:2c:c2:05:80:f0:
0e:77:7c:01:12:d8:5e:aa:12:d9:06:3f:64:e6:68:89:8f:1e:
76:85:cd:a4:7a:1f:bf:33:20:df:ee:d9:1d:1d:b0:b4:30:9c:
bc:41:b6:87:92:55:b9:95:df:01:15:a5:ca:c3:f0:d6:1d:8b:
32:27:ed:3e:59:d6:30:0f:a6:41:56:5b:a5:c6:52:7f:e7:42:
13:dc:bd:25:4b:26:d5:e1:b7:de:ee:b9:28:fb:e2:4d:bd:1b:
50:f6:07:54:a4:40:d2:52:6d:09:6e:aa:da:dd:65:31:e4:69:
05:c3:e1:ee:8a:52:91:8f:c9:2b:55:20:2e:71:74:9d:35:0b:
1b:f7:d1:8b:4d:0e:d1:d3:cc:1e:a5:a6:85:90:a9:c1:fa:5f:
2b:b8:e9:aa:98:0e:c3:9e:a8:59:14:3c:e7:1d:15:e5:14:10:
f7:3c:df:ca:9e:b3:44:8b:81:82:80:8a:6d:83:ef:9a:fc:40:
04:a7:d9:8c:74:ec:7c:ad:cc:ba:12:91:8a:9e:3d:b9:c3:d1:
82:7c:69:66:4f:55:2d:50:15:17:63:25:9f:50:62:04:4e:64:
ea:f1:9c:84:33:21:e6:32:60:98:9e:7c:16:69:6a:4a:cc:22:
f1:5f:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:04:00 2024 by rpki-client on console-fra.rpki-client.org