Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/24l6Op1CuHePBCuZy9Fr6KL083U.roa
File: 24l6Op1CuHePBCuZy9Fr6KL083U.roa (raw, json)
Hash identifier: PSJQ/iPEh2j19CGvuWVJ8+qvgiX2c2wpv2THmoMyg8U=
Subject key identifier: DB:89:7A:3A:9D:42:B8:77:8F:04:2B:99:CB:D1:6B:E8:A2:F4:F3:75
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 0192D76A66A320971FA644D10315A4316941
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/24l6Op1CuHePBCuZy9Fr6KL083U.roa
Signing time: Tue 29 Oct 2024 08:35:27 +0000
ROA not before: Tue 29 Oct 2024 08:35:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60175
IP address blocks: 91.212.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:6a:66:a3:20:97:1f:a6:44:d1:03:15:a4:31:69:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Oct 29 08:35:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db897a3a9d42b8778f042b99cbd16be8a2f4f375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:a7:94:a7:0d:e8:25:0c:25:2e:90:71:66:
72:cb:0c:1f:cd:39:1d:28:2b:3d:ea:4a:2d:b1:e6:
12:11:5f:96:6e:86:9e:35:22:ff:51:9d:8e:98:85:
af:c3:a8:85:ea:9d:f0:fa:ec:86:0c:aa:02:2d:79:
d4:7b:5f:3e:6b:c3:0d:2c:ea:b1:8f:76:c0:f3:69:
d4:90:6f:5d:a5:fd:d3:26:bc:24:4a:21:78:04:a8:
ba:dc:67:e3:be:44:4f:ab:c1:42:b0:26:8f:fb:42:
dd:51:6e:d3:a4:d0:06:7e:bc:ef:f4:8d:cf:98:95:
d7:c6:1a:3b:8e:5e:69:b7:09:1a:5c:0e:18:04:bb:
2c:61:a2:dd:b5:3a:b8:3d:58:12:d4:36:a0:7a:82:
46:fc:ff:05:e9:d7:72:76:48:c7:2f:79:f9:00:97:
ab:a9:72:f1:2f:e3:87:25:b7:0c:9e:5b:90:2b:09:
e0:fe:da:d9:a2:24:4e:1f:2d:43:e7:ad:14:7a:14:
af:c1:24:3f:b0:55:28:97:41:67:bd:bd:5b:c4:d1:
4a:da:c6:df:ad:91:53:31:65:89:8a:fc:c6:42:0c:
74:99:83:25:af:ae:32:1e:18:31:8c:2f:38:15:99:
7a:6a:7c:b1:9f:e5:de:c7:2b:3a:a9:e0:f7:d4:a6:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:7A:3A:9D:42:B8:77:8F:04:2B:99:CB:D1:6B:E8:A2:F4:F3:75
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/24l6Op1CuHePBCuZy9Fr6KL083U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2b:6d:a6:d3:d0:44:21:08:3f:da:24:64:ad:3a:b8:86:a9:
9e:be:ed:2b:6d:94:56:c1:f2:43:9a:dd:25:ae:db:40:87:0e:
71:00:b7:cf:36:a4:2f:8c:53:83:1c:6d:c2:26:56:28:b5:48:
3a:fc:ed:a6:30:12:8b:a4:3b:70:7b:e9:aa:95:22:a5:14:5e:
f5:6b:a1:e3:a0:e8:98:04:22:22:ac:ac:d2:70:10:23:76:b6:
65:d4:33:b9:e1:31:f4:34:3e:c2:9f:4a:51:67:9c:1a:1b:31:
86:73:39:75:e9:50:40:0e:2d:11:61:13:21:c7:28:40:c1:ac:
6c:4c:8b:5d:11:10:4c:3f:db:ad:59:98:d6:af:6e:1e:6e:35:
49:22:b4:b1:8b:38:c0:de:51:c3:60:c4:b0:20:a4:c7:db:dc:
0d:bf:c0:9d:f5:3d:cc:d8:16:21:d8:64:39:0e:1b:44:bb:58:
31:a0:5e:7a:31:ca:40:5d:bb:f7:9d:a1:ae:c8:8d:4d:fc:cb:
b0:97:63:c4:39:0c:88:ef:20:f1:b9:31:bb:02:18:70:27:10:
da:7b:0e:aa:18:21:8e:4b:09:3e:96:92:d5:9c:1f:dc:25:8a:
0e:47:4c:81:fa:7f:9e:50:ec:cb:d2:21:1b:fc:1b:ae:82:47:
d4:45:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:29 2024 by rpki-client on console-fra.rpki-client.org