Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/ebtSkTRhcNrg6fjQlLuaim39rvI.roa
File: ebtSkTRhcNrg6fjQlLuaim39rvI.roa (raw, json)
Hash identifier: //p6Wwp3Hc++0kr/P6qygLfPfw31gf0vtgZVVvZxFeI=
Subject key identifier: 79:BB:52:91:34:61:70:DA:E0:E9:F8:D0:94:BB:9A:8A:6D:FD:AE:F2
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 019188E5E31EE5C297F0341772F7E24F3724
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/ebtSkTRhcNrg6fjQlLuaim39rvI.roa
Signing time: Sun 25 Aug 2024 09:37:32 +0000
ROA not before: Sun 25 Aug 2024 09:37:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62290
IP address blocks: 91.193.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:88:e5:e3:1e:e5:c2:97:f0:34:17:72:f7:e2:4f:37:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Aug 25 09:37:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79bb5291346170dae0e9f8d094bb9a8a6dfdaef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:ed:d7:7b:34:79:6e:ef:47:b3:4c:57:e4:
d7:ee:e4:8d:ef:d6:c2:1b:3b:b6:fe:b8:53:3d:85:
da:f7:15:7c:9a:fc:33:16:b1:ff:5a:a3:e6:6d:0d:
2a:3d:fb:b3:3f:86:c1:ba:79:61:0d:2a:dc:07:59:
77:ac:11:33:33:a1:ec:33:5b:83:80:a7:95:06:50:
27:0c:8a:65:cd:64:e4:6c:d5:4f:5d:f4:d0:7c:36:
1b:b7:87:cc:4f:c2:c0:35:f2:ef:60:64:43:38:ce:
9d:0d:5c:11:02:5f:fb:8e:a1:94:95:1e:51:52:ca:
22:34:9c:03:98:2d:b3:ea:e7:1d:8c:9b:32:d5:76:
27:1a:2a:3e:80:16:5d:68:4d:ad:91:55:51:31:10:
f6:5f:f9:72:a1:7b:e4:ba:e7:66:6a:b2:4a:75:74:
b4:aa:71:35:cc:4a:a6:8a:bc:ae:06:cb:11:5b:f8:
47:74:0e:13:f1:06:ad:46:af:77:46:f5:51:67:9c:
7c:f6:39:fa:aa:d1:27:71:93:e8:fc:38:d1:81:9f:
a5:01:10:90:d2:d1:c5:70:41:66:f5:a9:80:92:a3:
f7:c2:ea:94:7e:80:40:a2:51:77:a1:6c:f5:f9:ca:
e4:72:15:85:fa:1a:82:9a:e1:9c:9d:f2:f5:74:26:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:52:91:34:61:70:DA:E0:E9:F8:D0:94:BB:9A:8A:6D:FD:AE:F2
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/ebtSkTRhcNrg6fjQlLuaim39rvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.54.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9d:86:b2:64:02:2a:3d:08:b4:e5:1f:83:21:20:f5:6d:89:
63:48:c1:a6:f8:9e:cb:94:c1:cf:f8:78:07:54:38:cf:f2:ac:
db:78:aa:80:ad:4e:1d:95:f7:53:63:92:ed:a7:65:f3:10:c2:
48:f7:df:82:48:a6:f7:8d:5d:70:fa:43:11:b0:19:4e:30:56:
b1:1c:71:df:36:35:90:c5:76:46:7c:c6:66:b9:24:92:8c:55:
d5:a8:77:95:30:6c:32:81:20:78:7b:cf:5e:64:c1:2b:5a:d2:
f9:da:af:1e:37:9a:3f:04:b8:47:ac:f0:1c:2e:9c:19:26:ab:
2f:35:3d:a1:86:11:14:6f:ef:6b:72:43:e4:db:c2:68:6a:9a:
cc:9a:d0:21:43:1b:4c:7c:ad:7c:5d:1c:2d:d6:23:ad:b9:8e:
2b:c6:08:51:a3:61:24:07:9b:7e:4f:f7:fa:dd:11:d6:9f:d1:
c1:2b:7a:9e:61:91:08:36:5d:2e:db:8b:eb:ba:5c:04:9a:2b:
c1:9a:62:0c:c9:eb:ee:28:1f:7d:23:22:c8:e3:6a:10:ad:e4:
a1:cc:eb:55:c3:02:b8:62:4a:fd:c4:12:48:60:7a:d1:e5:a0:
cb:19:b1:90:49:55:06:52:1e:4d:5d:8a:cf:5c:db:ec:b9:fa:
ba:5f:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:43:44 2024 by rpki-client on console-fra.rpki-client.org