Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fWvSg_pywAsZZZz7ElZu_TJB2bU.roa
File: fWvSg_pywAsZZZz7ElZu_TJB2bU.roa (raw, json)
Hash identifier: n/LqMW0C0XBImNApU/yBzggX+wfqaYCP4T4+jOkPySQ=
Subject key identifier: 7D:6B:D2:83:FA:72:C0:0B:19:65:9C:FB:12:56:6E:FD:32:41:D9:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01917027342D56082E3E692DE815407F7F66
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fWvSg_pywAsZZZz7ElZu_TJB2bU.roa
Signing time: Tue 20 Aug 2024 14:18:22 +0000
ROA not before: Tue 20 Aug 2024 14:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 91.92.27.0/24 maxlen: 24
185.221.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:27:34:2d:56:08:2e:3e:69:2d:e8:15:40:7f:7f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 20 14:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d6bd283fa72c00b19659cfb12566efd3241d9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:8d:bd:3e:04:08:37:01:27:b2:03:e9:8b:
bd:a2:36:cb:dc:34:b3:27:0c:b3:21:ec:dc:d4:f8:
44:f6:d0:ec:84:19:bc:4e:60:fb:c5:3e:57:7c:89:
ed:39:fe:76:18:a3:7a:52:49:e1:2e:3d:5f:41:fa:
47:c5:5a:86:3b:73:26:c7:92:c2:6c:a3:30:da:ce:
dd:bc:9f:72:1a:47:49:7c:af:1f:b6:8a:82:e0:ab:
e9:c0:4e:4d:74:03:e0:10:15:9d:85:78:a0:12:58:
d1:a1:89:0a:dd:4e:d7:e1:dc:c5:9a:1a:59:7b:d0:
aa:78:b2:50:a3:89:4c:4c:aa:08:2f:9d:0e:28:2e:
d4:d4:34:63:96:60:af:fe:3e:52:58:b7:c2:89:47:
cf:0d:69:bf:3a:c6:37:e5:30:8d:8c:76:3c:26:ac:
c9:bd:b2:f2:2b:01:ba:d4:cf:e6:86:10:fc:18:55:
35:9b:b1:06:c4:dd:e6:79:be:8c:4b:f4:b4:c4:d7:
8d:d7:47:3c:43:67:76:1b:6c:11:03:a8:e6:7d:25:
3f:2b:da:ef:70:2f:34:11:ab:27:42:3f:a9:d3:74:
f9:02:4d:13:f1:27:3a:8c:30:0d:70:2b:ef:f3:e5:
fd:dc:50:b0:34:b3:d7:fb:92:83:f1:8f:38:f2:de:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6B:D2:83:FA:72:C0:0B:19:65:9C:FB:12:56:6E:FD:32:41:D9:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fWvSg_pywAsZZZz7ElZu_TJB2bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.27.0/24
185.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9e:b8:3b:db:04:dc:b7:5a:c7:81:53:bd:d2:74:9f:2b:b4:
89:7e:74:0e:b1:1f:22:13:5b:3b:d7:e3:93:e8:1d:8d:5e:b1:
54:87:1b:a9:20:8c:8c:e1:31:cb:52:3e:e1:5e:cd:21:6d:26:
59:dc:80:b6:e1:d7:cf:d8:ea:38:d6:57:b3:50:c1:b9:35:38:
8d:fd:25:88:a7:b2:f9:1c:a7:79:ea:55:b0:ce:4d:48:8e:02:
bf:84:c5:49:f9:67:59:c0:3d:db:7f:ba:85:95:66:64:06:a1:
b7:4d:06:ac:a4:f9:ba:83:b8:f6:b2:d3:ad:79:87:32:2b:11:
8b:15:7a:2c:05:87:a1:b8:4f:72:d6:f1:91:34:68:05:5c:03:
a0:92:e7:db:b8:ec:f2:bf:ec:de:41:eb:e5:9a:a4:2c:db:da:
85:d6:2c:58:e7:4d:25:bc:fa:f5:38:68:c7:bc:17:36:2a:91:
35:17:59:b8:e0:58:b6:41:d6:7b:b1:2c:4f:d7:3a:9a:96:2a:
4f:8b:3a:48:39:04:2a:e9:09:68:1f:7b:1d:b1:79:7b:82:ca:
2c:9f:8a:a7:d2:ac:4e:8e:3d:95:f0:60:34:1e:a2:4b:f7:13:
d2:f0:1f:44:89:62:74:d3:25:c7:4e:72:00:e0:ac:eb:ca:9e:
b2:18:01:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:46 2024 by rpki-client on console-ams.rpki-client.org