Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/hETc_Noo1DXEAJOSc1FgCfY8aNQ.roa
File: hETc_Noo1DXEAJOSc1FgCfY8aNQ.roa (raw, json)
Hash identifier: shMhgBKLTZH8Y1ZVurt3sV3vlLkOWcaP23XrlyZpHR4=
Subject key identifier: 84:44:DC:FC:DA:28:D4:35:C4:00:93:92:73:51:60:09:F6:3C:68:D4
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0191C125249CAF6BFF6796CBFD6730B990BA
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/hETc_Noo1DXEAJOSc1FgCfY8aNQ.roa
Signing time: Thu 05 Sep 2024 07:45:22 +0000
ROA not before: Thu 05 Sep 2024 07:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199058
IP address blocks: 91.221.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:25:24:9c:af:6b:ff:67:96:cb:fd:67:30:b9:90:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Sep 5 07:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8444dcfcda28d435c400939273516009f63c68d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:eb:5f:84:45:e7:71:b4:28:9c:ad:a9:1a:
1a:e2:0f:8d:8c:90:7b:f4:22:35:0b:d7:f0:69:5d:
2e:79:5c:64:8a:7f:e8:5b:3a:c3:62:d9:3d:ee:6e:
81:53:7f:47:ff:fd:69:8e:66:82:17:89:d2:94:97:
5b:6b:43:09:fd:be:6c:42:d8:b2:37:37:14:42:c7:
8c:3b:9c:4c:fa:43:58:97:be:d8:9a:77:3c:10:9f:
ed:a8:19:84:58:5d:32:2c:7a:52:2c:4b:a7:cc:54:
ac:82:89:df:28:b0:1c:eb:25:73:a5:ea:37:6e:e9:
5e:02:f7:29:e6:71:18:95:b0:d6:a8:4a:99:2f:2e:
a5:6d:46:1d:25:27:75:15:83:2b:53:48:33:21:a7:
ae:d8:bf:25:e7:93:e1:b0:dc:16:74:5e:11:44:1c:
bd:73:1c:86:4a:98:cc:95:cf:82:ff:11:67:e2:01:
47:61:14:59:f8:40:05:ba:ff:29:7c:77:f9:e0:4e:
b4:c9:bd:58:94:21:a6:67:35:b4:96:f4:f7:13:9e:
4f:20:9d:aa:23:97:b8:d1:91:a7:73:29:53:f0:e9:
d8:ee:9e:b4:71:15:95:fa:33:bc:07:58:53:24:3d:
33:bd:2c:ba:86:88:84:e5:fe:93:02:07:d2:e9:9d:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:44:DC:FC:DA:28:D4:35:C4:00:93:92:73:51:60:09:F6:3C:68:D4
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/hETc_Noo1DXEAJOSc1FgCfY8aNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.232.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3c:9d:ac:2f:8d:cf:11:07:42:9e:9d:46:cc:54:70:d7:66:
96:72:44:f0:7c:87:93:45:0b:94:c6:0d:54:3f:8b:dd:97:9f:
20:18:1b:5f:be:91:fa:50:7f:5e:d0:fb:ae:1b:42:de:63:c2:
f4:d6:73:5d:92:bc:3c:83:21:da:ee:af:41:02:36:95:c1:5f:
0b:e2:5e:72:e9:b1:9f:02:b7:8c:e4:ff:50:51:6b:b6:a6:91:
30:03:f4:95:cc:4e:cf:07:e6:d1:d5:70:a5:1d:f9:ed:4b:1d:
b6:7f:69:4d:c3:02:c3:ba:c8:a8:5e:55:db:10:82:a1:31:b2:
73:de:cc:e4:4a:8a:94:36:cf:4e:a1:65:37:5f:fb:3b:11:6a:
09:e9:de:72:47:63:ef:2d:0c:82:dd:6e:1d:00:59:56:91:da:
f7:3e:df:26:96:1c:f4:69:95:1b:73:3a:5c:d3:de:7c:81:2b:
b9:99:1c:ea:31:42:6a:22:5e:8e:9b:07:bd:7b:16:83:3f:c7:
32:66:73:9c:dd:8b:7c:5c:75:0b:0f:30:24:5e:c9:97:92:8c:
24:eb:f2:94:32:97:31:c1:82:26:78:f9:80:b2:b7:41:19:d2:
05:ae:15:48:d8:aa:0f:a6:23:0d:23:1a:fe:d3:69:12:d3:fd:
71:ef:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:08:03 2024 by rpki-client on console-fra.rpki-client.org