Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/D_gEajlXI-cAtXHR6LvwWyk_MIQ.roa
File: D_gEajlXI-cAtXHR6LvwWyk_MIQ.roa (raw, json)
Hash identifier: +abw+8Fx47XhM+5JU9kDQe0A5LjUt+/s9xylkLJ6+qE=
Subject key identifier: 0F:F8:04:6A:39:57:23:E7:00:B5:71:D1:E8:BB:F0:5B:29:3F:30:84
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 018CC94D8F82C4795E9F822C09EB9BCD38E4
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/D_gEajlXI-cAtXHR6LvwWyk_MIQ.roa
Signing time: Tue 02 Jan 2024 08:32:32 +0000
ROA not before: Tue 02 Jan 2024 08:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 91.238.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8f:82:c4:79:5e:9f:82:2c:09:eb:9b:cd:38:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 2 08:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ff8046a395723e700b571d1e8bbf05b293f3084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4d:da:e8:71:29:21:01:bd:9c:22:a6:c2:a4:
a1:c4:7b:63:c1:1b:a2:21:5f:20:a2:f7:e2:38:7f:
38:33:7c:15:74:35:d3:b3:50:d1:1d:14:c5:35:36:
37:20:fb:e8:76:06:7b:1b:0e:2a:7b:54:9d:84:72:
f6:b9:87:7c:e7:a2:f2:63:a8:47:bc:8d:89:44:47:
d2:dc:13:2f:36:2f:6d:c3:f5:25:c4:c8:95:80:10:
fc:1b:d1:6f:da:33:b8:b4:90:d2:16:36:3f:8d:79:
2e:90:e6:86:74:d0:a4:ac:6a:36:fe:ca:c0:3b:e4:
25:4e:2a:f8:9f:7b:55:0b:0a:9d:c6:ba:60:fb:59:
b7:2b:1c:2a:3a:4f:15:11:ee:f7:b4:3f:e4:8b:a5:
05:bc:1b:6d:8c:db:6d:65:08:2f:ee:0c:11:86:14:
0a:44:ae:d1:28:cd:0b:b6:cf:4e:d5:e7:28:5b:17:
1b:80:08:8d:54:63:b0:92:38:8b:87:28:52:d5:14:
5d:f5:9b:f2:3e:bb:18:23:b7:55:7b:7b:bd:45:d2:
d7:44:a6:6c:69:7e:6b:dc:99:aa:5d:33:ae:6c:62:
72:80:01:af:03:2c:fd:ce:bc:cc:ef:85:61:67:5b:
96:bb:23:89:5b:49:4e:78:f9:cc:60:8e:52:55:1d:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:04:6A:39:57:23:E7:00:B5:71:D1:E8:BB:F0:5B:29:3F:30:84
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/D_gEajlXI-cAtXHR6LvwWyk_MIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:06:b1:a5:93:aa:40:5e:54:37:88:19:fc:ca:aa:68:32:24:
f1:0f:c9:59:e9:be:c5:2d:83:25:6e:0b:67:ef:91:e6:ac:e5:
72:f3:5c:e1:1a:98:a8:66:04:8b:38:c7:c5:22:54:fa:b6:e6:
51:ec:f0:9d:98:5b:a8:f1:41:67:ee:38:1e:ae:bd:ce:d4:5b:
11:44:ed:50:fd:62:ad:26:8c:6d:30:b9:5b:a4:e7:51:75:d5:
1a:d8:7a:4e:bb:ea:46:da:51:3f:78:da:f5:0f:fa:32:de:85:
02:bc:9d:28:01:52:cd:36:d8:f1:10:56:8e:ce:b1:62:f9:8e:
1c:e1:9f:57:09:1a:36:e6:6a:88:6e:e2:52:15:a6:c7:07:8b:
d5:3a:93:e7:97:eb:98:62:56:21:74:ca:a3:e7:d7:53:36:66:
d7:44:22:df:af:63:bd:e4:5e:10:3d:a0:1b:ca:de:de:1d:a3:
06:6d:b5:40:f1:61:7b:d9:cd:a4:73:52:b4:09:6a:65:27:99:
83:ff:81:0c:03:e2:96:1e:d3:95:12:b9:65:3f:aa:ab:04:e8:
91:3a:37:3e:d1:aa:3a:3a:ad:b8:34:e7:79:71:9f:02:34:3e:
b0:a0:ad:78:91:47:e5:e5:03:db:06:1d:80:24:d1:b4:4e:9d:
12:66:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:09:22 2024 by rpki-client on console-ams.rpki-client.org