Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-dvKt40ll1cIp1trtY_JrFckVtE.roa
File: 1-dvKt40ll1cIp1trtY_JrFckVtE.roa (raw, json)
Hash identifier: Uzmw6nPvRdM8va26r7y7HisL6qg94iXQNxzVrMu2HSs=
Subject key identifier: F9:DB:CA:B7:8D:25:97:57:08:A7:5B:6B:B5:8F:C9:AC:57:24:56:D1
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0191F449285C5FDB6C30885BB42FC72EACC2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-dvKt40ll1cIp1trtY_JrFckVtE.roa
Signing time: Sun 15 Sep 2024 06:05:20 +0000
ROA not before: Sun 15 Sep 2024 06:05:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58232
IP address blocks: 91.246.49.0/24 maxlen: 24
91.247.177.0/24 maxlen: 24
188.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f4:49:28:5c:5f:db:6c:30:88:5b:b4:2f:c7:2e:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 15 06:05:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9dbcab78d25975708a75b6bb58fc9ac572456d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:dd:d9:94:40:66:65:07:0f:45:2d:a6:17:
50:01:5a:64:ac:b6:cb:1e:b8:2d:9d:8b:64:ce:72:
14:3b:32:fa:73:8d:07:9f:5c:57:2f:41:39:9d:c7:
04:38:09:06:23:be:b9:a1:76:3e:06:af:23:bc:e4:
56:53:93:c0:e7:25:fc:62:c2:b9:db:98:de:35:a3:
4b:09:b7:38:fd:f8:65:7c:df:43:08:88:37:76:5c:
89:69:76:e6:ec:dc:09:c3:8b:07:fa:50:b4:d8:37:
95:f8:df:d3:69:b4:85:c2:16:bf:aa:97:1b:75:91:
2c:42:6f:93:d2:fb:4a:22:70:de:3f:ce:4f:22:36:
34:b0:01:15:51:ab:6a:30:f4:ed:47:3c:b1:28:49:
5f:72:ec:20:d9:bf:09:9a:8e:97:4c:21:4a:fc:a4:
d9:09:f6:8e:44:fe:03:8e:30:f3:b5:64:aa:a0:0b:
2a:3c:4c:6a:44:38:e7:4e:c8:b6:9a:86:89:f3:2e:
51:b7:56:fa:8c:99:8b:b5:aa:58:71:35:51:80:f2:
0b:a7:a9:96:56:8d:44:59:ad:bc:16:ba:7c:35:58:
f0:4e:55:a2:2a:60:f9:1b:cc:a5:86:1a:71:98:1b:
e2:69:ce:7d:5d:ff:90:94:cb:b2:eb:b7:aa:f3:bf:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:CA:B7:8D:25:97:57:08:A7:5B:6B:B5:8F:C9:AC:57:24:56:D1
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-dvKt40ll1cIp1trtY_JrFckVtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.49.0/24
91.247.177.0/24
188.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
55:76:12:5f:22:01:cb:0e:0c:13:fd:85:dd:af:bc:a7:03:9e:
e0:96:37:d0:83:45:e7:9b:38:2c:17:9b:b4:c2:47:bf:5e:0b:
c6:32:1a:48:9e:1b:44:ab:24:c0:37:1f:7b:88:b3:fd:85:88:
16:a6:4c:18:73:6c:e6:7f:d2:a6:b1:dd:00:5e:0e:83:2d:1d:
1a:21:06:b3:25:28:bd:6c:dc:6c:6a:ff:ca:59:82:d4:b5:70:
2e:68:81:b7:a5:e3:8f:11:e8:c2:99:34:88:aa:fe:01:3e:5e:
ac:0d:bc:99:16:4c:b5:fc:d6:9a:de:f1:1b:cd:d1:c7:66:9c:
86:89:6c:74:a1:92:25:84:3c:05:7f:9a:0f:0c:c7:14:09:ec:
33:e1:d0:99:27:48:d7:bb:8b:23:a3:6f:5b:34:02:1b:95:06:
af:d6:bf:cb:c1:d6:d7:a3:8d:82:83:06:ba:81:68:80:7c:b8:
c1:af:bd:7c:4a:80:e3:1a:0d:08:18:25:1f:4f:3f:91:f6:7c:
5a:6a:e6:6d:54:c5:e6:51:f0:e9:26:c1:4b:62:90:e7:17:59:
fd:bc:b8:ab:ef:5b:bc:a6:d4:1c:53:cf:b0:7d:04:60:a3:80:
54:6e:89:c8:e4:89:d2:b4:9a:1c:70:b1:4b:ec:cf:53:bb:1e:
19:e0:e3:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:10 2024 by rpki-client on console-ams.rpki-client.org