Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/JN3PG7EcRJa44sBeEU2c7qGp6Zk.roa
File: JN3PG7EcRJa44sBeEU2c7qGp6Zk.roa (raw, json)
Hash identifier: aDO2L0T1EVWkwdSO1I9X8RqjLoRNoy3ZIBJqrt6J9bc=
Subject key identifier: 24:DD:CF:1B:B1:1C:44:96:B8:E2:C0:5E:11:4D:9C:EE:A1:A9:E9:99
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 0192C2C7A588E5A72AFC77AC0BE421201471
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/JN3PG7EcRJa44sBeEU2c7qGp6Zk.roa
Signing time: Fri 25 Oct 2024 08:25:16 +0000
ROA not before: Fri 25 Oct 2024 08:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29518
IP address blocks: 193.26.17.0/24 maxlen: 24
194.145.172.0/22 maxlen: 22
2001:67c:2968::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 18:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:c7:a5:88:e5:a7:2a:fc:77:ac:0b:e4:21:20:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Oct 25 08:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24ddcf1bb11c4496b8e2c05e114d9ceea1a9e999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:1a:0d:35:a6:2b:98:5a:38:ea:e1:6e:bc:
c5:85:74:de:c2:9a:69:e6:b1:3f:90:e4:5d:d4:2b:
0f:f9:8d:26:3e:a2:38:df:4e:6f:2b:00:a4:78:f0:
43:ff:46:3c:6e:df:3e:ae:38:e8:d9:48:b2:75:e2:
70:e4:37:b6:15:a4:e5:aa:5f:47:da:13:65:ff:2a:
4a:c3:5f:28:49:c2:a6:e1:b4:76:99:08:b2:4c:64:
82:f8:25:a3:59:16:ec:78:62:2f:25:18:31:f3:01:
a3:9b:ee:87:ef:ae:b2:e8:30:30:af:1f:0f:c7:a4:
34:c7:bd:87:a5:89:83:55:70:fa:d8:25:a7:af:a4:
88:b3:9c:96:12:76:7d:36:bf:72:e3:74:19:03:65:
3e:8d:a2:18:d5:50:fc:0b:dd:f5:60:a3:23:78:4e:
6a:64:c6:b3:85:4e:6b:0d:84:98:b5:d2:20:cd:e6:
32:75:73:62:4d:fe:bf:28:25:51:6d:8c:f8:d8:ff:
1b:ea:89:b9:e9:40:75:17:11:ba:90:0d:22:3d:72:
27:ca:65:da:bb:0f:19:48:21:98:e8:bb:38:05:e5:
83:ef:29:76:98:ce:b7:c8:ea:e9:57:92:cc:c4:a5:
2d:10:dc:03:10:7e:95:6a:c9:eb:7a:96:18:60:00:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:CF:1B:B1:1C:44:96:B8:E2:C0:5E:11:4D:9C:EE:A1:A9:E9:99
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/JN3PG7EcRJa44sBeEU2c7qGp6Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.17.0/24
194.145.172.0/22
IPv6:
2001:67c:2968::/48
Signature Algorithm: sha256WithRSAEncryption
75:93:68:fa:3b:33:3f:8e:2e:5a:69:54:da:48:62:fa:25:d1:
52:b8:3e:67:85:23:f0:4a:b8:b7:b9:2f:1e:7c:dd:5d:8d:ef:
32:02:04:b9:27:e7:cb:33:bc:1d:11:32:f8:7a:df:71:35:80:
80:71:a6:14:17:89:c0:80:70:4d:9d:73:6a:71:d5:25:ab:dd:
1b:6b:f9:f0:f8:aa:7a:4a:5d:15:ac:76:c7:40:ec:70:45:6f:
da:7a:46:25:c1:4d:23:93:72:57:03:0d:14:04:06:16:f9:9f:
4d:27:30:7e:58:25:1d:84:10:c7:6f:cb:e5:46:92:b1:a0:4b:
ee:21:d0:0d:f4:f7:49:cf:2f:75:8b:f9:06:34:b3:82:57:68:
d5:04:95:0e:5f:cf:a8:26:5e:37:47:cd:31:39:d6:e8:bc:82:
7f:2c:b5:df:b1:f9:96:e5:7a:0a:b0:ad:16:20:9e:2d:a2:ca:
c7:20:aa:15:68:90:08:e2:32:26:c6:79:9f:c4:82:94:32:76:
a2:40:27:d5:fc:e0:ba:57:27:26:da:22:a0:7a:c0:8c:4f:9a:
c7:65:72:43:ad:5b:cb:6c:f5:d8:a6:cc:b7:c5:f0:d7:da:f8:
cc:3a:10:3f:f5:8d:7b:69:a7:95:76:df:4b:57:41:4a:fe:9d:
ef:c2:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:27:18 2024 by rpki-client on console-fra.rpki-client.org