Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/esx1Dq9RqrL_U3kT_Atcd0KoG1Q.roa
File: esx1Dq9RqrL_U3kT_Atcd0KoG1Q.roa (raw, json)
Hash identifier: IDmmifIGgle+1CDckJ0rRIQkmBPgZBID+HP6Ii80FXk=
Subject key identifier: 7A:CC:75:0E:AF:51:AA:B2:FF:53:79:13:FC:0B:5C:77:42:A8:1B:54
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 018CC64B60AEC3F3D6D6C1EF7AEA229CD7B4
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/esx1Dq9RqrL_U3kT_Atcd0KoG1Q.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 91.205.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:60:ae:c3:f3:d6:d6:c1:ef:7a:ea:22:9c:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7acc750eaf51aab2ff537913fc0b5c7742a81b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:c2:3c:48:10:c2:89:0e:ab:6e:b4:2e:05:
7c:1f:ac:7a:62:e0:07:db:26:1e:1b:62:7b:6e:83:
63:ca:bc:2d:3f:22:2a:a7:29:10:da:5e:fd:ee:e4:
89:8b:c1:1a:06:aa:80:9d:a0:37:6e:dc:b4:40:9e:
7c:7b:32:06:21:56:b1:c8:0a:47:84:58:ac:0e:59:
da:09:23:fe:cd:d1:6a:96:f0:60:a7:fe:0a:d7:15:
a0:2a:0d:be:90:73:40:13:9f:51:0b:61:2f:68:ae:
ed:e7:a9:33:c7:7d:f0:c1:e9:25:e6:63:bf:55:48:
72:18:af:a7:aa:f8:53:0a:17:b9:7c:a3:37:bb:db:
4e:c6:30:b1:5e:89:6b:b1:92:eb:f4:ef:a6:86:bb:
b3:f7:6b:03:75:30:32:34:50:c1:d3:a1:b6:df:4b:
53:c8:79:67:e9:04:2e:24:0b:8e:8c:89:26:4c:7e:
71:eb:87:9a:f5:77:f1:52:12:df:49:c7:ae:38:ad:
bc:60:63:f9:fe:4a:3e:fd:95:d6:d9:7d:c3:61:d8:
cc:58:96:bf:de:66:5a:14:04:69:6a:a8:cb:8e:d1:
5f:e8:73:e3:68:59:8c:2b:e6:d2:1c:e7:2c:d9:1c:
48:c7:46:cf:d6:72:82:a7:c1:36:3d:dc:c8:18:d2:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:75:0E:AF:51:AA:B2:FF:53:79:13:FC:0B:5C:77:42:A8:1B:54
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/esx1Dq9RqrL_U3kT_Atcd0KoG1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.221.0/24
Signature Algorithm: sha256WithRSAEncryption
68:75:ea:7e:9c:19:15:67:23:14:b8:1a:b1:c2:0c:75:69:54:
88:3b:c3:5f:f4:00:0e:7e:3e:a5:03:5b:e3:8a:60:ac:b4:bd:
8a:a8:cb:9c:4b:18:83:f2:c9:b2:59:6e:7c:67:fc:6e:f1:c3:
57:a1:86:d4:38:30:dc:d1:00:8e:f2:da:28:54:4c:2f:9c:fe:
14:47:2e:d9:24:68:12:12:92:ae:d3:56:25:4c:ab:b6:83:87:
fc:a8:e8:82:d6:ad:9e:14:7e:33:d3:65:e2:9f:3f:d8:d5:bf:
b7:73:d7:5f:19:38:6a:40:a0:5b:71:dc:f7:d7:4d:85:9d:72:
7f:33:da:91:a4:ff:63:b2:2f:d5:3c:1f:92:39:70:5e:08:6f:
c1:5d:64:57:39:5a:5e:ab:ef:63:42:11:b7:37:9d:08:df:71:
88:05:2b:48:ec:2b:2d:93:7c:66:24:e3:bf:f1:cb:33:68:a7:
1e:1e:e3:b4:70:b2:9b:67:8b:5e:2d:2a:94:d7:20:e7:5d:b9:
2a:3f:9f:d6:8f:10:84:ce:61:d2:90:19:27:f2:bb:71:65:49:
9b:d2:e3:3d:12:6b:16:00:d8:e3:dd:98:3a:f6:f3:cc:c8:5a:
c8:d8:a2:cf:17:45:7c:9c:85:68:64:dc:52:48:a2:89:a3:16:
9d:63:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:21:08 2024 by rpki-client on console-ams.rpki-client.org