Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/myyBpowF_dIMqdeZA8jOYddQHxA.roa
File: myyBpowF_dIMqdeZA8jOYddQHxA.roa (raw, json)
Hash identifier: yOD5e46EzMbWMmmSFZvoA5C2RzIcrFtOWimzNofTibA=
Subject key identifier: 9B:2C:81:A6:8C:05:FD:D2:0C:A9:D7:99:03:C8:CE:61:D7:50:1F:10
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 018CC649D1E0A96015E7C0F29B2987C62166
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/myyBpowF_dIMqdeZA8jOYddQHxA.roa
Signing time: Mon 01 Jan 2024 18:29:35 +0000
ROA not before: Mon 01 Jan 2024 18:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43397
IP address blocks: 91.194.230.0/23 maxlen: 24
2001:67c:d04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d1:e0:a9:60:15:e7:c0:f2:9b:29:87:c6:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jan 1 18:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b2c81a68c05fdd20ca9d79903c8ce61d7501f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:9d:13:fb:5f:8a:2f:32:90:07:86:0c:82:
86:7e:25:45:24:fd:5c:9f:f2:db:4d:e5:8a:ec:13:
10:2f:c1:f0:fc:05:d5:ce:45:aa:7f:df:ed:39:07:
a5:08:b2:2c:e5:36:bc:3d:fd:bb:e5:b1:04:19:64:
b4:5e:5d:a0:71:88:d5:d6:88:8c:5a:57:65:1f:46:
7b:b3:06:ec:48:bd:12:af:3f:c6:ce:6b:2e:ae:5e:
13:ce:ae:40:5f:95:54:fb:96:e2:7c:90:a4:69:40:
cf:65:6e:0a:05:0a:a4:41:44:61:24:1f:04:33:a3:
fc:19:29:3e:ae:29:b1:88:72:70:c5:98:f4:dd:2d:
e1:f5:4f:f3:a8:77:cd:e8:a2:f4:74:d4:7b:b3:b5:
a2:29:4d:47:95:3b:01:26:11:d3:39:35:58:79:78:
8a:1d:4f:24:4f:68:46:31:c2:3a:5c:97:ff:81:75:
0b:0e:14:43:aa:5d:73:ef:2e:dd:7b:36:d4:1c:05:
34:8f:29:9b:4b:37:c4:89:e8:05:68:40:95:19:4f:
a0:80:ef:54:c3:5a:d7:28:19:67:57:2a:a6:bf:bb:
a1:6c:b2:19:df:a5:bf:8c:15:5c:e9:1a:45:c2:cd:
18:41:c1:fd:69:03:9a:7d:97:28:ab:41:92:f3:86:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2C:81:A6:8C:05:FD:D2:0C:A9:D7:99:03:C8:CE:61:D7:50:1F:10
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/myyBpowF_dIMqdeZA8jOYddQHxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.230.0/23
IPv6:
2001:67c:d04::/48
Signature Algorithm: sha256WithRSAEncryption
51:6c:f1:45:36:46:1c:c1:2b:36:ea:4a:e5:9b:52:3a:a0:3e:
73:b6:f5:41:4a:54:40:3b:80:b1:c4:5b:e5:5c:02:16:30:31:
1e:e1:67:14:fd:bf:a4:e9:62:3f:66:4f:52:d0:26:cc:a4:86:
57:c7:b1:71:3a:57:b4:08:05:1e:81:11:87:2d:4d:bb:2a:35:
bb:4a:77:51:d5:99:cd:b6:d9:be:93:57:36:c7:71:62:b4:85:
21:5f:0d:cd:30:80:ab:3f:05:94:38:e1:d1:e8:92:94:88:5b:
10:ff:ad:d3:07:69:9d:8e:65:e3:1b:1a:f1:3a:af:e3:b8:2e:
9c:07:7a:c8:63:d5:7e:c2:06:ff:9f:cc:2d:0e:9a:5c:57:9e:
af:56:2f:15:10:d1:d0:84:1d:2f:49:19:7b:3e:19:35:4d:74:
a8:bb:80:6e:1a:f4:f0:d5:a8:0a:49:d4:87:32:80:d2:f7:e2:
d5:b2:7c:37:3b:b8:39:89:c1:16:4b:6b:d8:a9:e0:4d:e2:44:
ec:6b:39:7d:6c:0c:7a:25:84:a4:f7:fa:fe:86:c1:a6:f9:2e:
90:b7:a7:e3:70:95:b1:ce:fc:44:03:4e:1f:94:58:38:0d:21:
e0:3a:70:08:0a:f9:be:f4:c1:9a:3b:e3:11:b2:a3:19:45:43:
99:76:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:21 2024 by rpki-client on console-ams.rpki-client.org