Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/0OJ7Qu4Jyx7Xntnd4SaAQRweTto.roa
File: 0OJ7Qu4Jyx7Xntnd4SaAQRweTto.roa (raw, json)
Hash identifier: RIuX6m6UM7A9gxQybj15PH31/iGL7sX6qIz79N2AggY=
Subject key identifier: D0:E2:7B:42:EE:09:CB:1E:D7:9E:D9:DD:E1:26:80:41:1C:1E:4E:DA
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 018E79FBBDEE8B4D5324D5B77D96603A836C
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/0OJ7Qu4Jyx7Xntnd4SaAQRweTto.roa
Signing time: Tue 26 Mar 2024 08:58:45 +0000
ROA not before: Tue 26 Mar 2024 08:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 91.206.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:fb:bd:ee:8b:4d:53:24:d5:b7:7d:96:60:3a:83:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Mar 26 08:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0e27b42ee09cb1ed79ed9dde12680411c1e4eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:d5:08:94:8f:73:7a:a8:04:01:e7:60:ce:
dd:92:5f:78:38:18:56:5c:d4:12:51:cf:21:a8:27:
67:f2:2f:9f:04:31:44:e1:6e:a0:df:45:8b:6e:fa:
70:9c:fe:d2:4b:1c:ab:02:1c:81:bd:73:43:e3:43:
91:70:f3:07:6f:82:67:c5:b9:a7:01:96:0d:09:2a:
97:f8:94:63:e1:d8:5a:c0:31:ea:ab:69:c6:8d:6d:
b5:fe:f8:92:6c:44:18:59:eb:79:a3:55:72:58:6e:
62:bf:0e:11:7e:25:e3:aa:c2:e3:cf:90:15:cf:b4:
e9:87:b0:e3:ea:68:91:f0:a8:fd:f3:20:8a:83:e3:
86:27:29:84:b2:5b:42:30:02:cd:08:b6:4c:fa:bb:
76:0f:92:5a:59:e1:91:8d:1e:7e:b1:38:a4:96:6c:
bb:d0:74:e0:f4:54:fb:d3:1b:13:21:07:7b:c2:5b:
c1:71:67:5c:29:c2:69:f1:b7:ef:70:39:2e:35:37:
de:f2:9f:90:8f:bf:59:0b:83:21:d8:ba:b8:72:f8:
51:58:51:d7:cc:d7:27:de:fe:e0:34:d3:d0:54:0a:
08:56:e1:e7:91:ec:7d:aa:6b:59:5c:79:88:9e:3b:
d6:5d:51:69:64:4f:d5:5e:3e:44:73:7f:20:48:86:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:7B:42:EE:09:CB:1E:D7:9E:D9:DD:E1:26:80:41:1C:1E:4E:DA
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/0OJ7Qu4Jyx7Xntnd4SaAQRweTto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:dd:ba:b3:4e:93:83:4a:a6:88:f6:dd:29:3b:1d:96:1c:3f:
f6:fd:83:aa:06:84:f3:eb:75:0b:55:d8:dd:de:b1:79:69:2e:
d1:6c:32:1f:23:46:7a:e9:8b:ec:88:35:de:1c:86:0a:e0:81:
e8:4e:35:26:cf:99:d1:84:4a:c8:52:e5:61:eb:2e:7e:bf:f9:
bf:40:0f:4b:2b:d5:1d:99:9f:b5:ac:c8:ac:a1:03:7d:a4:2e:
9f:d9:d0:69:2c:01:cc:0b:01:5a:aa:ea:66:93:c7:bd:00:1b:
f8:5e:e9:5f:86:6b:ac:b6:2e:92:66:85:32:e3:51:a1:89:46:
db:22:6c:fb:14:5c:e6:68:ca:3f:04:ce:ce:57:ce:79:22:53:
b1:69:cc:58:db:23:8e:58:85:fb:d2:fd:3f:15:14:65:62:b6:
dd:f2:3e:fa:1e:66:43:7c:56:69:90:17:65:94:eb:bd:35:d8:
64:32:d1:10:3a:5c:c1:56:a8:e5:7d:ba:c1:f1:12:64:07:45:
22:5e:b6:ac:19:49:51:9f:70:48:cd:c9:84:92:9e:07:4e:55:
48:fe:37:ef:db:15:26:aa:58:bb:2e:33:1e:04:16:2e:4c:3d:
9d:4b:de:d6:02:9d:61:cb:b0:47:ba:21:2c:7d:c7:58:14:38:
ac:50:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:00:34 2024 by rpki-client on console-ams.rpki-client.org