Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/1G4zvP3SQViurdfsYA-Kc5SZbXw.roa
File: 1G4zvP3SQViurdfsYA-Kc5SZbXw.roa (raw, json)
Hash identifier: 7AHnBLFVuG2bQbX+ykAsknDBzgrhf7RdyR1Sl19/tBI=
Subject key identifier: D4:6E:33:BC:FD:D2:41:58:AE:AD:D7:EC:60:0F:8A:73:94:99:6D:7C
Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial: 018CC8715FDB34B0600668BF3E7E56F5C8ED
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/1G4zvP3SQViurdfsYA-Kc5SZbXw.roa
Signing time: Tue 02 Jan 2024 04:32:02 +0000
ROA not before: Tue 02 Jan 2024 04:32:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209467
IP address blocks: 91.217.175.0/24 maxlen: 24
2001:678:93c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:5f:db:34:b0:60:06:68:bf:3e:7e:56:f5:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Validity
Not Before: Jan 2 04:32:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d46e33bcfdd24158aeadd7ec600f8a7394996d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:53:1c:11:8d:2e:75:4c:b1:dd:68:f6:53:
73:ce:ad:49:09:a8:bb:a5:13:41:20:19:ad:45:29:
3e:0a:e4:87:73:17:ae:0e:5f:fc:0c:72:ae:f0:eb:
f5:ff:60:b0:7a:62:cb:18:3b:9a:07:91:bc:b1:ec:
76:2d:98:fd:3e:97:bc:f8:5d:c5:05:78:3e:6f:68:
fa:72:48:40:90:9b:6a:a7:4e:26:d4:a9:4e:3f:92:
83:49:b7:a0:5e:5c:c4:bf:36:ca:2c:85:7f:84:9a:
72:64:5f:ab:ec:96:8f:bf:b8:83:e0:4a:98:be:d5:
c1:a4:8b:09:1d:4c:f6:fe:f9:f8:76:a9:ee:a2:c4:
d3:8c:d1:dc:57:3b:96:49:f9:00:c8:3d:85:1c:14:
cc:00:f0:7d:44:5c:62:ac:7b:76:6c:ad:ef:b5:53:
68:bb:8b:bd:28:f3:8c:ee:b1:50:07:ca:80:4c:4c:
92:71:82:fa:7e:9d:60:5a:78:6d:65:36:7c:3c:1e:
a9:2b:ed:5c:70:4a:ce:3e:ce:8b:16:56:d9:3e:93:
be:87:68:a0:84:dd:e1:dd:1e:82:78:3a:b4:17:f0:
f2:db:77:28:6e:cc:92:c7:b4:ab:50:a7:fc:fb:23:
7c:d6:2a:98:20:c0:ba:cf:ce:2e:b3:04:4f:97:4f:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:33:BC:FD:D2:41:58:AE:AD:D7:EC:60:0F:8A:73:94:99:6D:7C
X509v3 Authority Key Identifier:
keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/1G4zvP3SQViurdfsYA-Kc5SZbXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.175.0/24
IPv6:
2001:678:93c::/48
Signature Algorithm: sha256WithRSAEncryption
67:73:d7:10:3d:b1:a8:00:b6:83:1e:c6:9a:22:da:3a:5e:99:
8b:3c:3b:4d:a3:33:41:f2:08:50:bb:eb:10:7c:0c:d9:ed:62:
fc:8c:4f:1e:8a:90:40:54:d5:73:73:1e:09:98:8b:43:90:fe:
4f:0e:ba:c8:3b:28:51:02:7c:c9:43:89:bd:22:87:56:2e:8e:
ed:55:04:61:7e:13:17:b7:65:39:0a:71:64:d6:b3:41:97:bb:
5a:10:1f:75:fd:f3:ff:c4:0c:47:55:d4:d1:c1:57:4f:4f:e9:
fc:93:76:04:df:c8:62:16:c2:50:63:5f:ee:91:f4:28:3f:21:
57:c0:97:17:dd:83:b0:31:0d:c9:0d:02:9d:18:29:f3:e1:f0:
98:80:31:2c:30:bb:8c:16:d0:fd:8e:aa:23:fe:3b:be:56:eb:
2d:e7:37:8e:42:aa:23:79:38:a9:ff:d8:d3:3c:29:9b:1f:13:
13:06:7a:97:0d:fe:c6:80:26:6f:7e:35:ff:97:3e:68:ae:84:
7b:72:bb:f8:ae:74:30:09:91:1d:92:2d:16:c2:32:0b:7c:8d:
6b:f3:c6:06:4f:ec:17:25:2a:75:65:ae:53:e7:a3:b9:d9:cf:
8b:56:2e:ee:20:8b:4d:e5:37:b1:e1:e5:ae:30:f4:9c:9c:8e:
96:b1:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:38:43 2024 by rpki-client on console-fra.rpki-client.org