Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/JhwUgwtLWVO3UZzw6YxK9nTi424.roa
File: JhwUgwtLWVO3UZzw6YxK9nTi424.roa (raw, json)
Hash identifier: E5hFc5oOSZPPENxpS1R+8/xdR9fMmigzOzlolhNZEu4=
Subject key identifier: 26:1C:14:83:0B:4B:59:53:B7:51:9C:F0:E9:8C:4A:F6:74:E2:E3:6E
Certificate issuer: /CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Certificate serial: 019017E3F7FA8F6793B59A0D74FE7BB0AE18
Authority key identifier: 06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/JhwUgwtLWVO3UZzw6YxK9nTi424.roa
Signing time: Fri 14 Jun 2024 17:55:34 +0000
ROA not before: Fri 14 Jun 2024 17:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 195.20.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:e3:f7:fa:8f:67:93:b5:9a:0d:74:fe:7b:b0:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Validity
Not Before: Jun 14 17:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=261c14830b4b5953b7519cf0e98c4af674e2e36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:7b:01:0a:ca:63:1c:d4:6b:82:cd:06:f3:
3e:26:b8:96:7c:fa:1f:82:ee:9c:ab:ba:96:8d:ef:
b6:05:89:fd:33:59:43:ec:68:a5:82:6f:5d:11:2c:
5b:a3:73:85:5b:b6:51:fa:7e:8c:26:e7:24:e2:35:
9a:ae:af:8d:a0:a3:33:9d:5c:33:0a:21:42:5d:bc:
05:91:74:f0:8f:a1:c2:19:01:58:3e:67:22:53:72:
3f:9e:b8:ce:4b:5c:d5:bf:ed:5e:e6:6f:27:8d:cb:
f9:bb:73:c7:9f:20:4e:df:f2:32:9e:c9:4a:43:f3:
ae:07:c0:4c:a9:d4:f0:21:e0:80:8c:18:01:ad:8a:
2f:75:5e:2f:0c:a9:f2:24:ca:c9:4e:44:a0:f8:4d:
4f:95:89:7a:40:56:2b:f3:22:b3:7a:7b:c6:27:34:
6e:da:5c:b4:8d:8a:7f:d9:9e:ba:b0:e0:5f:83:fd:
6f:ef:37:eb:7c:10:fe:50:03:ca:73:75:52:87:58:
f0:6a:7e:3e:37:fa:a0:a5:98:aa:b8:ae:d7:ef:61:
9f:70:f0:75:bf:3b:69:1a:8b:34:30:36:b7:da:fd:
e6:07:46:07:5e:ef:81:9b:c0:46:1e:19:31:ce:93:
4f:84:c0:27:de:50:4f:63:88:d5:21:90:c4:85:0b:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1C:14:83:0B:4B:59:53:B7:51:9C:F0:E9:8C:4A:F6:74:E2:E3:6E
X509v3 Authority Key Identifier:
keyid:06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/JhwUgwtLWVO3UZzw6YxK9nTi424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d6:7f:a5:bf:f0:1a:bd:41:b1:c8:73:fd:91:05:97:c7:8e:
dd:d9:e3:5a:0d:b7:1f:e6:ea:8d:f2:10:81:5a:ea:5d:0e:55:
c4:3a:de:29:07:5a:57:5f:5a:74:4c:1d:62:e3:ca:ae:8d:9c:
f8:d1:31:96:87:81:06:7b:9e:13:93:1c:a1:f6:65:35:7a:c0:
34:60:3e:1f:6f:f9:b2:8f:eb:6c:23:cc:95:00:bb:3a:7a:cc:
31:03:b5:e7:4e:bc:de:a9:de:44:9c:9e:bc:25:bf:01:78:41:
69:3e:b1:36:3b:31:66:aa:a5:a2:2b:1f:1c:33:a8:9f:b0:25:
92:51:63:a7:5b:38:91:e3:c2:2e:37:b1:58:f2:02:90:d0:f5:
03:b2:2c:2c:e2:b5:e7:68:8b:67:81:c2:6e:04:b8:7f:84:1c:
59:e1:12:00:65:c5:97:65:eb:88:b1:d5:1a:17:93:37:a9:30:
ae:cf:03:e8:24:68:4a:07:98:08:cf:31:85:8c:74:54:46:35:
c2:94:14:40:5b:a3:80:a8:f3:28:b1:1f:7c:81:8b:b8:30:b4:
00:21:bf:e9:84:bd:9b:77:3c:8e:69:51:2f:70:68:0c:f8:46:
25:14:44:f8:69:60:bb:4d:e9:47:c3:98:d9:97:d7:2a:ad:3a:
77:77:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:11 2024 by rpki-client on console-ams.rpki-client.org