Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/esxcU4tAq5ae85DzY22MVJMLovY.roa
File: esxcU4tAq5ae85DzY22MVJMLovY.roa (raw, json)
Hash identifier: sNpZmcNQ+S3KbbB+0RafSl8FpcJ1EwfwB/oUrqsihns=
Subject key identifier: 7A:CC:5C:53:8B:40:AB:96:9E:F3:90:F3:63:6D:8C:54:93:0B:A2:F6
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 01930805DA40E493CF12709CBC73B8ED3459
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/esxcU4tAq5ae85DzY22MVJMLovY.roa
Signing time: Thu 07 Nov 2024 19:07:01 +0000
ROA not before: Thu 07 Nov 2024 19:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15992
IP address blocks: 91.207.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:05:da:40:e4:93:cf:12:70:9c:bc:73:b8:ed:34:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Nov 7 19:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7acc5c538b40ab969ef390f3636d8c54930ba2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:eb:d1:55:89:9b:a9:d1:5d:b6:65:47:28:
a5:e2:6d:b4:ff:1f:37:8b:74:5e:7b:d8:66:fb:49:
b1:19:1a:93:62:12:a0:cf:f9:f1:21:ad:3d:12:cf:
f8:bc:7c:fa:d6:c6:2b:01:5d:e9:97:ae:a8:42:eb:
0e:21:ca:be:f3:6e:f5:5a:d4:37:b3:78:1f:bd:ce:
42:7a:88:cf:93:c7:8d:82:f8:63:9a:20:8c:68:df:
d5:61:65:78:a9:33:f9:f2:75:a0:88:7b:a6:96:2f:
33:2f:fb:f4:b0:07:9a:a0:8b:23:9e:88:d9:8f:10:
24:fd:ba:d3:43:4f:1c:e2:6f:80:2d:92:7d:08:35:
ca:2a:bb:e6:4f:c7:ee:e0:f0:2a:38:a5:7d:51:43:
2b:e3:af:47:48:80:71:f7:bf:d9:7b:63:8f:c9:99:
a7:32:53:aa:7a:9a:a9:75:40:1a:bb:33:af:f1:36:
c8:58:d7:20:41:6c:38:79:71:ea:1a:c0:36:e5:45:
bd:23:2f:2b:ab:c0:d8:6b:b9:69:05:00:53:f5:b0:
fe:95:04:cd:30:43:96:fc:58:8e:f9:30:2e:84:20:
e0:69:e2:bb:05:bc:6b:be:c3:8f:f3:76:37:40:7f:
7a:3b:44:71:c3:95:a3:55:18:9a:bb:3d:9b:cd:90:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:5C:53:8B:40:AB:96:9E:F3:90:F3:63:6D:8C:54:93:0B:A2:F6
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/esxcU4tAq5ae85DzY22MVJMLovY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.192.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:44:e9:1a:54:98:ea:d9:4a:87:30:25:96:2b:83:2b:a6:f0:
cc:24:a7:0b:0c:9a:c4:8a:98:26:90:58:6d:74:1b:04:86:fb:
ea:2c:4b:ea:94:02:90:b9:d0:7c:3f:53:e6:f9:54:49:85:a3:
36:99:9e:a8:43:47:1a:82:7c:35:b0:80:60:0e:92:e7:0b:dc:
b9:56:55:bf:92:3c:f8:6f:4e:83:c0:88:c3:db:53:2c:32:68:
23:51:f5:07:30:b8:8d:b1:32:c9:76:9a:92:cc:07:88:0e:eb:
28:61:31:9e:c3:38:4c:95:62:e5:3a:b2:b1:ac:54:26:e1:32:
a4:15:52:71:e6:53:5f:55:34:c9:22:41:22:8e:24:4a:ba:7b:
f3:1b:af:7e:93:5d:db:19:1d:9c:44:50:fb:6e:e8:95:3f:d4:
f6:c5:75:fa:30:f5:04:ce:e9:99:61:9a:1f:1f:15:b2:22:97:
f9:d3:54:24:83:83:1c:b8:b6:a4:f1:19:15:e3:9e:62:b4:f3:
10:c2:3d:be:12:e8:b9:ee:ee:cc:3f:44:31:da:66:16:62:fc:
33:a0:99:6a:9a:75:bc:a4:23:c5:b7:0a:ec:36:23:8c:bd:ef:
3d:91:1a:4f:61:a2:a4:eb:3a:70:73:6c:aa:10:41:aa:ba:92:
79:9c:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:05:48 2024 by rpki-client on console-ams.rpki-client.org