Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/JEG24t_ROkkEri4q85tDmQ_XZ9k.roa
File: JEG24t_ROkkEri4q85tDmQ_XZ9k.roa (raw, json)
Hash identifier: jei55YG4iXpjSOLS9dsv3DcoLavDPlCMDuJp69zdKfM=
Subject key identifier: 24:41:B6:E2:DF:D1:3A:49:04:AE:2E:2A:F3:9B:43:99:0F:D7:67:D9
Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial: 0192512AE5B73D440261099297A9BF18731F
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/JEG24t_ROkkEri4q85tDmQ_XZ9k.roa
Signing time: Thu 03 Oct 2024 06:56:58 +0000
ROA not before: Thu 03 Oct 2024 06:56:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58282
IP address blocks: 193.3.234.0/23 maxlen: 23
193.163.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:2a:e5:b7:3d:44:02:61:09:92:97:a9:bf:18:73:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Validity
Not Before: Oct 3 06:56:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2441b6e2dfd13a4904ae2e2af39b43990fd767d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:6c:53:b8:77:9e:3a:a5:79:a4:f7:6a:d5:
8b:4a:2c:7d:6f:64:4d:0c:28:8c:e0:b7:ca:09:77:
c2:15:3f:3a:34:d0:a3:16:ef:6d:25:38:69:8b:ea:
30:df:4a:ad:fe:11:6c:2c:11:a7:03:a8:15:ba:65:
ed:05:09:fa:9b:2c:be:cc:c2:c9:1c:c8:b2:2f:cb:
90:53:2e:f3:9f:e3:85:3f:58:00:9b:df:f1:08:df:
4e:6b:05:5f:ad:ea:3a:53:46:02:ac:44:8d:dd:94:
5c:b5:c6:41:28:06:6c:a3:1c:7c:0a:62:15:8c:bc:
b1:ed:7e:5c:64:67:1d:b9:0c:d0:ea:6b:8c:87:e8:
f9:c5:46:29:ae:db:c5:05:18:4f:27:1e:0f:c1:61:
04:2d:89:00:2f:16:8f:b6:9d:2c:53:97:1b:0a:1b:
f5:93:ce:4f:b1:c3:10:86:3d:f7:05:d1:42:f8:4d:
88:fd:8a:32:b8:b7:f8:39:3e:48:d7:21:71:28:3d:
04:ee:5f:65:b6:53:09:63:75:47:57:e3:e0:7d:d2:
96:8a:45:07:04:0f:fc:7b:18:8c:65:8e:65:04:96:
a7:7e:fa:20:92:d4:84:cf:f2:f7:08:b9:03:6c:d9:
21:1f:d8:38:a6:47:a9:8c:e1:a6:d9:78:60:e4:c2:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:B6:E2:DF:D1:3A:49:04:AE:2E:2A:F3:9B:43:99:0F:D7:67:D9
X509v3 Authority Key Identifier:
keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/JEG24t_ROkkEri4q85tDmQ_XZ9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.234.0/23
193.163.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ec:20:92:c3:54:e8:49:4f:6e:8e:ac:c7:28:7f:50:d8:29:
a9:23:29:1c:4d:f1:22:ad:ef:22:5d:0e:e7:44:f1:92:ac:1a:
a8:53:a5:7d:55:76:e1:96:7a:85:64:c9:b3:83:34:a4:fa:63:
ae:5e:55:c1:0d:5b:52:61:c9:69:96:24:78:f2:10:d8:99:64:
ee:75:f6:67:91:0b:7d:6d:4a:9a:89:98:ba:d0:2e:d7:71:23:
58:f7:a3:0d:5b:10:bb:aa:bc:66:cd:a1:a8:19:4e:cd:30:51:
df:8a:6e:01:68:bb:db:19:f2:28:27:16:42:3e:5d:55:08:7a:
5f:7a:65:36:35:75:f8:59:86:8d:e9:19:e9:8b:ee:d5:f3:a7:
5f:2b:42:89:4b:dc:89:d0:e5:de:9f:be:a7:21:ea:8a:cc:e2:
a3:a3:ce:85:df:ca:b0:cd:15:14:a6:ff:85:ec:03:e6:23:d9:
e3:0d:eb:e8:de:36:56:6b:ca:83:7b:19:a4:49:11:e9:33:e0:
52:d0:b1:8f:81:9e:56:a5:0f:fe:cd:a2:fc:5f:e2:5b:a2:3d:
c5:fc:5f:cb:6c:f5:1c:d9:b6:21:77:1e:a6:07:8f:f3:35:99:
70:1a:bf:04:f9:4c:ad:4c:1e:26:29:9f:60:cf:c9:85:70:52:
21:31:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:13 2024 by rpki-client on console-ams.rpki-client.org