Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/9j_ee3U9FBaZbZc8RTI9MVWAOio.roa
File: 9j_ee3U9FBaZbZc8RTI9MVWAOio.roa (raw, json)
Hash identifier: 7+IZNwet3B7U1xmgk/UB5UOobZ0vvUJ/wNxu6vDv5Ek=
Subject key identifier: F6:3F:DE:7B:75:3D:14:16:99:6D:97:3C:45:32:3D:31:55:80:3A:2A
Certificate issuer: /CN=bd611e1cabe0db5643a5d2945160f45ed84a807a
Certificate serial: 019276B4A15A4E731F06E2F2325080D21107
Authority key identifier: BD:61:1E:1C:AB:E0:DB:56:43:A5:D2:94:51:60:F4:5E:D8:4A:80:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/9j_ee3U9FBaZbZc8RTI9MVWAOio.roa
Signing time: Thu 10 Oct 2024 13:53:21 +0000
ROA not before: Thu 10 Oct 2024 13:53:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 91.227.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:b4:a1:5a:4e:73:1f:06:e2:f2:32:50:80:d2:11:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd611e1cabe0db5643a5d2945160f45ed84a807a
Validity
Not Before: Oct 10 13:53:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f63fde7b753d1416996d973c45323d3155803a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:a5:0c:17:9c:4a:ab:80:e5:30:a5:51:65:
73:f1:f0:5f:64:a0:e4:86:3c:c3:3f:43:fd:92:cd:
bd:ae:b5:f1:0b:7e:70:9a:c9:f3:b3:c8:74:bd:3a:
92:3d:a5:f4:20:8d:51:93:de:98:cf:0c:0b:59:18:
ee:31:22:f9:7a:a4:78:3b:ea:be:72:e9:6e:31:90:
7d:aa:34:9a:c9:8b:33:f3:41:ee:56:e7:d4:3d:de:
11:1a:41:51:4c:59:93:e0:94:42:4c:90:08:a9:5c:
29:7c:e5:17:2d:21:82:0f:7d:08:fd:e8:84:10:c0:
4e:cd:85:05:91:02:0f:48:65:81:ac:5c:8e:5b:f4:
af:68:30:1c:0c:ba:da:31:d9:63:51:6c:c2:32:de:
27:69:ef:50:e7:d6:02:dc:8a:6d:78:f0:d2:f7:7b:
83:1b:50:46:07:d3:e8:26:f8:e6:37:bf:5e:9f:19:
2b:95:a4:eb:9f:a5:18:bc:b1:f3:57:f6:b6:3a:88:
f9:2f:3e:6a:09:86:cd:ff:4c:35:88:68:b6:a3:54:
b2:a9:f6:69:fd:1b:b4:d3:a4:f9:c1:f5:d0:9a:ee:
d8:de:02:ee:99:29:73:3f:f8:94:c9:eb:a3:a1:b0:
8f:ee:8d:b2:90:38:ce:4c:7b:41:7b:bb:0b:84:a9:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3F:DE:7B:75:3D:14:16:99:6D:97:3C:45:32:3D:31:55:80:3A:2A
X509v3 Authority Key Identifier:
keyid:BD:61:1E:1C:AB:E0:DB:56:43:A5:D2:94:51:60:F4:5E:D8:4A:80:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/9j_ee3U9FBaZbZc8RTI9MVWAOio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.49.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:87:9e:81:0c:93:e4:c2:02:60:a1:3e:4a:f6:46:8d:ff:2a:
60:55:85:52:52:8b:9b:d0:e3:92:07:af:d7:b7:1f:35:1c:ee:
ae:5b:e7:cc:68:14:a1:7e:bf:3f:f6:15:08:ea:21:62:de:f5:
17:84:d9:f1:cc:9e:3f:dd:eb:1f:b1:ab:1c:db:db:0a:35:e0:
1e:c6:07:01:34:e5:75:e8:d8:5c:a4:29:40:ff:d0:39:3c:3b:
31:87:be:4f:62:b5:54:46:7d:d5:cc:2e:07:3e:96:51:c4:93:
8e:0c:fe:e9:df:43:2b:e4:d2:fc:e9:5e:d4:58:f6:0c:8e:3e:
c7:cc:1f:3f:65:9f:19:c8:d0:c7:66:10:f4:15:df:66:34:e5:
d4:23:a0:b2:3f:1c:6d:a8:d9:76:73:8b:e6:c4:9f:6f:2e:63:
48:87:2b:34:82:90:22:c9:09:7b:39:7b:01:42:f3:a6:ff:2f:
1d:cb:c4:e4:80:49:c5:98:a0:7d:3d:39:ac:7d:0b:e1:2b:aa:
dc:f7:9d:85:05:35:52:7e:0b:61:c0:c8:cc:08:30:79:33:16:
aa:c1:8f:92:af:68:85:d3:86:7d:45:91:59:35:42:6a:62:3b:
dd:2f:34:fd:62:be:35:dd:9e:65:6c:11:16:95:b4:8c:4f:22:
0a:4e:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:06 2024 by rpki-client on console-ams.rpki-client.org