Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/3M4pfb9w_Ih8Um-7dDYb749XofI.roa
File: 3M4pfb9w_Ih8Um-7dDYb749XofI.roa (raw, json)
Hash identifier: CI1/gWetxm/dmFK2wzXzeALW+di8gLgAFQT6cFnlGtY=
Subject key identifier: DC:CE:29:7D:BF:70:FC:88:7C:52:6F:BB:74:36:1B:EF:8F:57:A1:F2
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018E604085AD3CAFC5E9098E1E60EF2D7502
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/3M4pfb9w_Ih8Um-7dDYb749XofI.roa
Signing time: Thu 21 Mar 2024 09:03:45 +0000
ROA not before: Thu 21 Mar 2024 09:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.221.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:40:85:ad:3c:af:c5:e9:09:8e:1e:60:ef:2d:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Mar 21 09:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcce297dbf70fc887c526fbb74361bef8f57a1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:13:05:4c:86:ee:40:97:80:ef:c7:35:dc:b9:
13:3e:c1:68:07:ca:6a:ed:fd:34:05:3d:28:b9:85:
e9:fd:59:ab:f5:eb:92:21:43:4b:a7:d0:1c:a8:39:
f5:8b:cf:cc:a6:2e:25:40:fb:ef:0c:ea:43:4a:54:
42:af:e5:a9:99:a7:c5:18:aa:a1:c0:31:a5:20:fe:
f6:7f:5f:95:74:00:aa:05:94:d8:71:9b:be:6d:dd:
72:ed:f9:ba:92:43:f2:77:54:41:5d:e2:e4:6c:47:
f3:69:4d:3e:a8:c5:28:56:b9:a3:ee:8e:72:8c:34:
fa:1b:e4:9d:0a:b1:c2:23:50:ee:f0:ab:1d:49:3c:
0a:65:cc:fe:2c:d4:72:5e:c1:93:2d:dd:68:fd:06:
38:d7:31:3c:26:d6:f8:fd:07:b4:b2:6b:04:dd:6a:
7b:72:72:b2:a2:7f:2d:bd:34:59:1b:bc:81:9b:b2:
ff:91:7c:6d:cd:e5:85:81:2d:6b:18:19:f5:4a:17:
29:13:43:eb:97:aa:76:8f:b3:3e:49:14:b9:f3:d3:
59:d0:44:26:a0:91:cb:3a:db:58:48:73:27:ee:81:
2c:be:19:60:f5:78:1a:05:d0:5b:8e:f7:c3:b3:82:
31:f9:c9:ca:40:e7:8e:dd:c8:69:de:e8:d8:90:1b:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:29:7D:BF:70:FC:88:7C:52:6F:BB:74:36:1B:EF:8F:57:A1:F2
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/3M4pfb9w_Ih8Um-7dDYb749XofI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.232.0/24
Signature Algorithm: sha256WithRSAEncryption
97:79:b6:ac:fd:df:0d:99:f1:36:7a:fd:2d:d5:21:15:18:a2:
4e:65:73:80:a6:ee:ad:2a:c4:02:6d:68:31:df:44:d6:63:14:
d7:f5:c7:d1:92:cb:fd:c5:c5:11:05:fe:26:ae:81:d4:10:1d:
c4:7b:69:73:72:7d:56:c5:d5:96:95:93:d1:94:25:df:ae:4f:
65:f1:94:29:0f:da:36:f1:4d:09:70:f7:1e:97:72:0c:bc:1f:
12:37:54:44:50:56:4f:e0:67:a8:b3:7b:90:3b:da:f0:93:21:
db:ec:0a:31:da:08:9e:ab:6a:af:85:98:25:e1:81:74:80:7d:
1e:77:e8:41:75:2f:95:bd:52:f5:d1:1f:2c:44:37:cf:84:4d:
a9:39:47:9b:d5:9f:8f:00:30:44:78:4b:e7:79:6b:30:d4:c0:
83:1b:c3:fa:7a:5f:34:8c:1d:ad:81:1f:8a:9b:36:3d:ec:7a:
4d:9b:4f:6c:d1:07:50:34:15:86:7a:93:5e:f0:28:b7:b0:c2:
87:b8:71:96:96:7c:76:50:ac:76:ba:a2:44:de:3f:6a:14:24:
4d:4b:8a:4a:f2:46:0e:94:9c:ec:67:7a:5e:69:78:b3:cc:7f:
16:3e:71:a0:f1:7b:66:34:7d:81:e6:ab:23:02:6a:f8:ef:9e:
61:e2:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:05:14 2024 by rpki-client on console-fra.rpki-client.org