Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/RrMFTWRUJmS1qeLeZWlsfimrlRo.roa
File: RrMFTWRUJmS1qeLeZWlsfimrlRo.roa (raw, json)
Hash identifier: UOYVXAJiFHF/wBzmyQr1M1ihfqaqOdMpRUovpjaHOjo=
Subject key identifier: 46:B3:05:4D:64:54:26:64:B5:A9:E2:DE:65:69:6C:7E:29:AB:95:1A
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 018CC500B53984BF5A07B0F64191C71D26A3
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/RrMFTWRUJmS1qeLeZWlsfimrlRo.roa
Signing time: Mon 01 Jan 2024 12:30:07 +0000
ROA not before: Mon 01 Jan 2024 12:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58004
IP address blocks: 91.237.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b5:39:84:bf:5a:07:b0:f6:41:91:c7:1d:26:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Jan 1 12:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46b3054d64542664b5a9e2de65696c7e29ab951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0e:1e:50:9f:77:05:90:2e:a2:7b:47:e4:a5:
c3:98:21:38:8e:23:c0:66:1a:ee:6f:42:93:90:83:
82:f0:e4:1c:cc:a9:ff:3a:fb:0f:70:20:38:37:8b:
4c:d9:ab:f8:bc:a3:ae:bf:16:0d:bf:b8:57:ad:51:
67:0f:dc:27:46:6a:2e:ef:e1:86:2a:4b:f1:b1:71:
3d:7f:5f:a7:9b:0b:83:d2:4a:10:43:af:90:fe:17:
49:0a:c2:c3:4b:3f:12:fb:c5:a9:04:19:e9:ce:3d:
d7:60:72:69:b7:b2:b4:09:ce:6e:1c:8a:68:ce:8e:
03:1c:d1:69:ce:2a:0c:15:be:5a:67:07:6a:bb:a9:
d1:00:35:38:7f:bb:18:1f:b8:6d:56:19:78:27:fd:
d6:18:98:33:d4:55:2c:33:63:f0:a4:00:e7:a2:e6:
07:36:2f:2d:da:da:06:ac:d9:33:1d:20:3f:49:58:
fb:66:80:dd:4d:b6:45:5d:83:f8:92:ed:5d:ae:3f:
d0:da:a9:d5:3d:da:12:40:cd:85:50:29:db:af:31:
32:81:2a:26:36:77:00:13:8c:d1:88:a4:b4:8e:df:
6b:f4:98:63:50:80:51:3e:f6:8f:b8:d0:32:3d:0d:
08:41:cb:4a:ce:82:df:ba:9c:65:4a:38:56:6e:45:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B3:05:4D:64:54:26:64:B5:A9:E2:DE:65:69:6C:7E:29:AB:95:1A
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/RrMFTWRUJmS1qeLeZWlsfimrlRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:15:62:62:90:19:79:66:7e:3a:e1:f7:ec:af:83:a7:a3:49:
d2:d8:9e:25:d6:64:57:08:7d:2c:bd:13:60:c3:43:00:11:94:
5e:09:88:3d:5d:e0:b9:d6:04:7d:d8:dc:a0:fd:a3:d4:1f:65:
10:f0:ac:52:fe:84:65:a1:30:11:ae:67:7a:74:8f:34:c2:06:
00:11:35:47:d1:ea:84:82:ef:f6:b9:b3:20:b5:40:b1:f4:01:
4b:0b:1a:9c:32:74:0c:c0:22:5d:bf:22:68:d7:d8:fa:a9:72:
25:20:ed:56:f3:1c:96:3d:32:8a:2c:fd:b1:4f:94:30:92:bc:
f4:33:8a:fb:4e:ab:a1:f2:dc:f3:c9:ef:69:78:fe:4e:88:06:
52:44:f5:ab:f2:6b:fa:c0:28:61:ec:e7:19:68:9d:1c:3d:f4:
aa:1b:f5:4c:db:ad:3a:8a:82:bf:28:d4:a3:62:d2:7d:de:47:
a4:91:0d:bc:6e:52:36:df:71:08:29:bf:6c:8a:08:28:52:b6:
64:7b:2d:7a:31:5b:06:82:35:95:79:de:3d:03:17:28:33:89:
9b:02:d1:03:20:97:7a:85:08:03:9a:12:31:55:d9:9e:53:27:
3c:64:86:2c:a3:fb:19:31:a7:71:b4:a0:8f:7d:07:90:eb:3e:
f1:41:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:09 2024 by rpki-client on console-fra.rpki-client.org