Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/0zjm0X1f9odd0EroquIGaasGkQg.roa
File: 0zjm0X1f9odd0EroquIGaasGkQg.roa (raw, json)
Hash identifier: E1UtxlKRdlBzzNmNbycaSXg918XTDzal7gk3Cs/gQdQ=
Subject key identifier: D3:38:E6:D1:7D:5F:F6:87:5D:D0:4A:E8:AA:E2:06:69:AB:06:91:08
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018CCA29CD7A179B358F76CA8B2B88FFF8AF
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/0zjm0X1f9odd0EroquIGaasGkQg.roa
Signing time: Tue 02 Jan 2024 12:33:06 +0000
ROA not before: Tue 02 Jan 2024 12:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57152
IP address blocks: 91.102.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:cd:7a:17:9b:35:8f:76:ca:8b:2b:88:ff:f8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 12:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d338e6d17d5ff6875dd04ae8aae20669ab069108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:09:8c:80:cd:15:e9:b0:8d:32:25:79:f5:
f5:c8:9a:23:ea:4a:5e:66:6d:b0:53:e5:cb:45:cf:
86:b0:49:e1:db:ba:af:75:bb:26:f3:20:af:f9:db:
75:bf:77:3d:1c:46:ac:d3:ca:63:f3:0e:9a:e2:71:
ef:0a:88:d0:57:88:6d:d8:78:36:06:99:c3:97:d9:
33:8f:1b:c6:4f:87:e8:4b:16:b2:f4:85:94:88:06:
e4:8b:42:aa:ec:a7:e2:7a:bd:4e:ed:ff:44:eb:fe:
4f:ea:0a:d5:4f:1f:29:99:63:0a:24:35:37:ed:3c:
e1:43:e4:02:1b:2d:8b:54:ba:c7:41:4f:58:b0:7b:
f3:7e:ab:7e:84:f6:78:85:c0:02:1a:39:c4:14:5a:
87:b3:b2:ba:68:8f:29:a9:79:c2:7d:ec:9d:ff:6c:
83:a2:1a:e5:01:c0:d5:2f:3e:d4:b4:8f:ed:ad:07:
73:f0:62:3f:3c:e7:d6:ef:e8:13:5f:01:bb:81:8a:
7a:de:01:51:0d:28:f8:8d:a8:4f:cd:d3:a3:39:ab:
35:30:56:06:81:cb:46:7e:fe:ad:88:b9:ad:30:cf:
56:dc:cb:f2:7f:87:95:e2:f7:83:8c:33:3d:a7:56:
9a:70:aa:48:46:73:3b:7f:fc:9e:cc:02:1c:44:cf:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:E6:D1:7D:5F:F6:87:5D:D0:4A:E8:AA:E2:06:69:AB:06:91:08
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/0zjm0X1f9odd0EroquIGaasGkQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.163.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2e:aa:f6:74:e7:37:55:6e:5d:b9:87:19:10:ee:e6:58:81:
aa:dc:69:d5:d5:be:e7:b7:28:07:cc:cc:13:84:a5:9a:68:55:
63:1f:68:05:ac:f9:ae:76:50:35:15:b9:98:a5:ca:a2:e6:3c:
cd:bc:08:83:c6:ad:6f:e3:94:2d:81:07:a7:bd:48:ea:85:26:
5d:ab:55:6f:3c:63:84:cb:c6:e9:2c:c3:8a:f7:19:69:ea:8d:
1a:05:c9:76:4a:86:6c:81:48:b9:6e:03:ec:b0:e4:07:4a:47:
f1:b6:96:53:85:10:51:5e:5f:a0:b2:ed:1d:97:75:e9:3d:fe:
74:8c:50:22:c7:40:b5:5b:d0:b7:e9:ec:1b:19:56:fe:0b:75:
65:37:c7:f7:15:95:0e:71:74:fd:43:d8:76:04:0e:b7:03:79:
23:11:fc:09:05:eb:5f:4b:70:59:1b:57:c9:31:27:fc:20:7f:
47:18:a9:27:2a:8c:7d:7c:d0:65:5b:ad:97:91:dd:52:82:5c:
71:63:56:a2:6a:e2:08:1a:f0:6c:61:c6:f6:51:94:3e:51:cc:
ec:90:21:10:b2:e6:92:b4:b2:3c:33:1c:3c:1a:45:82:73:0b:
ec:7f:b1:a6:08:3b:75:73:3c:60:3c:c2:f7:06:9e:54:13:e8:
5c:d4:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:55:15 2024 by rpki-client on console-ams.rpki-client.org