Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/JJ41O9y8x1gpbU2DXNLkqquSMjc.roa
File: JJ41O9y8x1gpbU2DXNLkqquSMjc.roa (raw, json)
Hash identifier: 3fFhyMYR6izsGyLWItL24ORa+eFns/JPmhZH5u9BaeY=
Subject key identifier: 24:9E:35:3B:DC:BC:C7:58:29:6D:4D:83:5C:D2:E4:AA:AB:92:32:37
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 018CC26D5A7A6160ED1A9EB2C402CAC6E20D
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/JJ41O9y8x1gpbU2DXNLkqquSMjc.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197219
IP address blocks: 93.174.200.0/21 maxlen: 21
2a02:1720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5a:7a:61:60:ed:1a:9e:b2:c4:02:ca:c6:e2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=249e353bdcbcc758296d4d835cd2e4aaab923237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:f1:0f:7a:07:d0:eb:04:a5:73:47:28:08:
1a:68:2d:7b:f7:71:fc:5d:05:6a:9e:d8:b4:5d:44:
8d:64:55:d9:7a:cb:bb:27:89:1f:b5:5e:ef:91:a9:
15:9b:00:27:59:fb:76:87:33:41:15:74:84:f4:cc:
f0:cf:3a:d2:e0:81:80:dc:83:74:5a:6e:0d:fe:dc:
fb:e1:82:22:24:c0:ee:ab:78:69:94:3d:8b:7c:18:
11:5a:ee:ae:7a:6f:61:ae:06:d1:13:12:92:91:29:
0c:87:d3:c9:e1:3f:3b:0d:0e:e5:0f:f2:ba:8d:33:
89:2c:78:aa:8a:39:6b:cd:b1:4e:f1:a6:ad:4e:4e:
88:65:f1:c2:44:34:c8:5c:03:55:09:c9:7d:a7:9e:
f8:f7:44:0d:e3:e0:02:f6:88:6c:64:49:13:4e:43:
17:f6:d8:da:4d:80:2a:20:e6:cc:0d:78:9f:ff:4c:
aa:98:6f:4e:d1:b9:ce:07:47:a2:32:63:28:88:39:
fd:1d:30:d6:b9:f5:1e:25:9d:25:98:e0:49:08:5a:
5a:d6:ec:94:fa:9f:a8:fa:78:af:4a:b0:b4:f7:56:
5d:56:dd:50:e1:37:77:64:2c:44:c4:32:21:bb:5c:
be:17:4e:70:c8:fe:50:0d:fe:25:1e:45:b8:42:9f:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9E:35:3B:DC:BC:C7:58:29:6D:4D:83:5C:D2:E4:AA:AB:92:32:37
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/JJ41O9y8x1gpbU2DXNLkqquSMjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.200.0/21
IPv6:
2a02:1720::/32
Signature Algorithm: sha256WithRSAEncryption
7d:7e:e9:5b:71:81:88:f4:57:95:b4:51:e2:92:67:6e:0f:ea:
97:41:59:ba:d8:78:10:16:0a:c9:5a:d4:c5:06:5e:69:f9:96:
e3:48:71:a8:05:ba:75:e7:4a:73:9c:75:5c:8d:1f:9d:68:14:
fb:70:45:87:61:2f:54:c0:05:10:be:78:75:cf:a0:f0:50:00:
e0:c2:55:dd:81:e8:0a:00:6e:3f:ee:93:70:cf:c2:5a:83:2c:
91:2b:d6:65:59:c8:df:38:50:3a:8f:8f:8f:6c:e8:fe:78:14:
f7:88:f0:ab:c1:86:4b:a6:52:de:97:0d:7b:ba:63:d8:72:85:
ad:17:6b:30:82:ab:b1:42:6d:ad:07:2f:ee:d6:fd:e1:e2:a0:
13:39:9b:d6:ef:32:19:9d:a2:12:c0:93:bf:55:7e:2f:ed:4f:
88:ce:32:ea:02:1f:74:db:9a:5d:ed:5c:10:96:43:c6:59:8b:
4d:d6:a0:b8:32:8c:61:0b:fe:83:de:e0:a0:76:c7:2b:5e:6a:
86:75:d0:87:f4:bf:07:95:1f:a4:02:4b:5e:19:d2:ec:7c:08:
89:0c:a5:25:b5:3b:9e:c6:8c:47:47:bb:6c:02:56:0f:0e:49:
03:b9:25:b9:61:0b:b4:cb:ea:7c:b3:90:1c:e5:21:57:ff:d5:
78:14:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:43:59 2024 by rpki-client on console-fra.rpki-client.org