Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/OY7H-yzSL5V1AD3CoCxkVrLAaUs.roa
File: OY7H-yzSL5V1AD3CoCxkVrLAaUs.roa (raw, json)
Hash identifier: gE89JFnas0zbBoMSz9Bs/69C8MbeWFS7NY7fZoD0MaM=
Subject key identifier: 39:8E:C7:FB:2C:D2:2F:95:75:00:3D:C2:A0:2C:64:56:B2:C0:69:4B
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 018CC5DC2A49917056676FAF25F1F231E38F
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/OY7H-yzSL5V1AD3CoCxkVrLAaUs.roa
Signing time: Mon 01 Jan 2024 16:29:49 +0000
ROA not before: Mon 01 Jan 2024 16:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207199
IP address blocks: 91.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2a:49:91:70:56:67:6f:af:25:f1:f2:31:e3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=398ec7fb2cd22f9575003dc2a02c6456b2c0694b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:f3:24:3e:95:6f:44:9a:fc:60:7c:45:d0:
09:6b:be:6c:b8:94:c9:51:14:1f:3e:33:2a:f9:fe:
30:b0:6b:3f:31:e3:83:06:aa:9d:16:9b:44:f1:bc:
26:7f:28:ce:4b:ca:e9:e5:2f:23:07:e6:95:41:c3:
9d:ee:94:28:f9:df:ab:e4:73:3a:ca:93:00:44:32:
11:eb:4b:27:86:1c:8d:ff:86:bc:e8:60:7d:3f:3c:
6b:52:0a:a0:06:5c:32:1d:81:de:10:01:54:9a:a9:
28:c8:5b:02:a3:6b:eb:fd:bf:2a:e4:a1:22:b7:8f:
bf:25:41:8f:13:89:73:2d:fd:6f:2a:13:1e:ab:b0:
c5:c1:07:c3:58:c6:a0:2d:66:4d:a7:e2:ac:35:77:
99:7a:59:55:b4:48:3e:9a:06:d0:5d:4f:f3:9e:72:
ef:fa:ac:b3:57:d5:46:fd:4b:4b:ad:b7:80:b5:27:
0e:07:02:05:68:dc:40:ad:f6:6f:40:de:40:89:dd:
69:86:fa:b8:3f:34:cb:c1:ff:8a:62:2a:79:61:b7:
25:28:b1:f4:54:a6:69:67:ed:cd:ab:ff:b2:5e:e9:
b0:9f:1b:e6:04:ee:27:1c:31:83:a9:85:14:a8:14:
6f:5d:de:a6:8e:88:c7:9b:15:90:74:b3:74:4b:39:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:C7:FB:2C:D2:2F:95:75:00:3D:C2:A0:2C:64:56:B2:C0:69:4B
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/OY7H-yzSL5V1AD3CoCxkVrLAaUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f0:fe:d6:9e:09:7c:99:d9:c1:24:2e:4d:e6:27:e8:99:7a:
17:8b:c7:ed:68:11:38:1a:ad:9c:80:27:78:90:55:df:a0:4c:
dd:fe:90:be:8e:61:a6:d8:35:e8:35:dc:c2:ec:ac:fd:53:26:
25:4b:86:6c:a4:06:13:35:0d:e6:10:cf:f5:6b:a7:cf:12:b3:
15:62:59:ba:ae:81:9d:71:5c:49:62:dc:63:ed:25:52:4f:b9:
e2:59:ca:d1:bd:3e:b1:b5:5a:a9:48:f0:04:ac:f4:52:ed:90:
e5:2b:17:f9:1a:68:fe:72:05:39:98:a8:1f:bb:5c:b5:85:a3:
b5:57:25:5a:00:26:32:79:1f:10:79:c3:a4:66:06:12:72:42:
aa:07:6c:7a:2d:1e:b7:1f:51:d8:d4:7c:40:73:25:8b:41:ea:
82:6a:8c:e3:ea:cd:2c:50:40:ad:7d:77:3d:50:d3:62:b0:b6:
47:78:25:9f:33:69:47:aa:ac:b7:c4:98:e2:f3:00:51:66:36:
d9:85:75:c9:86:e9:80:f7:76:53:58:de:72:99:55:72:da:b7:
c0:87:6a:04:1f:71:e1:d2:43:8d:ac:76:c0:2a:ba:09:aa:02:
f4:14:10:7b:8d:83:ea:38:fe:55:29:32:3f:28:a6:74:c1:9e:
79:d0:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:14 2024 by rpki-client on console-ams.rpki-client.org