Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/n2CuodfCPouCM-L8tkR8INHGBBo.roa
File: n2CuodfCPouCM-L8tkR8INHGBBo.roa (raw, json)
Hash identifier: 4aG9zfFYHww+QPfySp0aMy9HYPnNpJulVWw5gYLv2uM=
Subject key identifier: 9F:60:AE:A1:D7:C2:3E:8B:82:33:E2:FC:B6:44:7C:20:D1:C6:04:1A
Certificate issuer: /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial: 018CC349626F7E0BB67FD584C7D835817B02
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/n2CuodfCPouCM-L8tkR8INHGBBo.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47993
IP address blocks: 91.208.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:62:6f:7e:0b:b6:7f:d5:84:c7:d8:35:81:7b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f60aea1d7c23e8b8233e2fcb6447c20d1c6041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:39:95:28:45:45:67:61:52:a7:09:60:76:
88:71:75:23:43:a1:e4:3c:6e:2d:4d:5b:7c:99:7e:
73:02:92:0e:21:44:bc:9b:ac:4f:e2:50:e8:a5:98:
47:94:ca:a1:26:be:8d:37:04:63:b5:73:1e:e4:c8:
a8:79:e4:c0:5a:bc:be:09:6a:91:1c:97:3b:f1:a3:
25:4b:4b:1d:eb:e7:90:01:a4:dd:e9:54:6f:93:a6:
d7:b9:3c:6c:78:28:3a:69:6a:2c:26:51:16:02:da:
63:6d:a8:6e:24:9f:51:92:29:5d:aa:af:44:7a:ce:
1a:97:30:bb:c4:44:10:5d:c7:85:57:03:0e:df:02:
7d:2d:f6:ba:67:f6:ff:dc:04:7d:a5:47:83:37:76:
be:52:e9:bf:b2:fa:28:92:66:be:e7:f4:a1:99:46:
c0:a3:b0:21:bc:13:b9:9a:a3:47:60:62:b8:6b:98:
d8:b7:d6:6f:31:28:ca:9b:c3:91:eb:a5:aa:71:ae:
8d:43:4b:6f:c1:1f:68:d4:69:31:77:2a:bb:a9:d8:
9d:37:6d:3d:90:88:b9:5c:a3:f8:e0:73:9d:99:d2:
c2:60:3b:b3:5e:c4:91:12:7a:d5:91:28:99:a5:a2:
4f:2e:33:33:97:ad:0c:3a:73:09:16:de:cd:35:00:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:AE:A1:D7:C2:3E:8B:82:33:E2:FC:B6:44:7C:20:D1:C6:04:1A
X509v3 Authority Key Identifier:
keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/n2CuodfCPouCM-L8tkR8INHGBBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.168.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bd:54:65:06:e0:72:f7:95:18:3e:16:6b:2f:cb:f6:f9:50:
ae:14:77:12:66:55:3b:0a:50:b7:cf:af:11:cc:5c:4b:36:88:
bf:43:92:c8:b7:74:58:e6:6f:54:3d:d8:bc:5d:8e:d6:89:10:
f8:c5:5a:fb:da:d7:86:52:3b:9c:23:fa:96:be:d7:4c:f3:a5:
16:ac:2d:7b:c5:1e:fc:bf:36:80:16:75:fb:e5:35:5d:b7:7a:
c8:e6:2f:ab:87:ac:fc:19:90:7b:8e:e4:ae:2f:fa:31:72:26:
7b:b6:eb:ed:eb:93:3e:70:a2:6b:f9:57:8b:40:0d:81:e8:86:
28:d4:bf:fe:c8:8c:1b:c0:52:a0:1e:48:40:44:7c:7a:6e:df:
9d:4d:0b:e0:03:0e:f7:0b:f4:cb:12:a3:a1:4e:28:13:1e:c0:
7d:7a:5f:a5:63:39:6b:fb:37:0a:05:66:6f:a8:ba:c3:29:8d:
7f:ad:04:10:81:93:2d:b5:e7:c7:80:bc:b9:38:f0:4a:a0:03:
a2:17:49:78:e2:23:a4:94:01:d1:9e:da:30:81:72:4b:ef:88:
89:c7:fb:2e:11:68:21:d3:42:8c:69:c3:a6:f8:0f:5a:0d:cd:
25:c3:9b:6d:4c:4f:44:a7:9e:72:53:c7:68:83:72:8f:52:4d:
43:59:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 12:47:09 2024 by rpki-client on console-fra.rpki-client.org