Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/tGiTiDNnJSCNTYzGfgQrSiIaKz0.roa
File: tGiTiDNnJSCNTYzGfgQrSiIaKz0.roa (raw, json)
Hash identifier: +BJMKFJVarXS7hfcmGU0w1wmmECOQs9LgiuIFxzMRig=
Subject key identifier: B4:68:93:88:33:67:25:20:8D:4D:8C:C6:7E:04:2B:4A:22:1A:2B:3D
Certificate issuer: /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial: 018DD565648825F139DB71AA54BE519B2533
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/tGiTiDNnJSCNTYzGfgQrSiIaKz0.roa
Signing time: Fri 23 Feb 2024 09:56:48 +0000
ROA not before: Fri 23 Feb 2024 09:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51493
IP address blocks: 91.217.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:65:64:88:25:f1:39:db:71:aa:54:be:51:9b:25:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Validity
Not Before: Feb 23 09:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4689388336725208d4d8cc67e042b4a221a2b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:93:87:c4:41:29:d4:29:fc:c6:53:e4:bf:
a0:5a:39:8c:b0:c3:22:33:53:3b:6c:53:a1:8c:97:
eb:05:63:91:8f:84:df:af:7c:17:2c:fc:a4:32:c8:
29:d9:da:06:32:f6:0a:2f:a5:74:8e:5a:82:5a:ec:
9d:0e:0a:a8:43:f4:c8:dd:4a:6c:d5:25:df:60:fd:
8b:ad:f7:f4:6c:30:e4:ec:d4:31:e7:2a:8d:c9:cf:
23:5b:f9:84:f1:ab:3d:f6:bb:6b:cc:90:92:ac:6c:
1c:92:2e:4e:83:8d:01:c3:97:46:69:98:94:8b:14:
24:8d:1f:9b:75:2e:0f:be:26:33:90:f0:f7:f2:a0:
38:0b:25:6b:4b:2a:44:2f:b9:17:94:a0:ea:8e:62:
49:a5:a1:21:59:c1:66:94:4f:17:6d:02:f4:a9:39:
76:58:12:a3:78:be:be:7e:25:64:2d:19:2e:45:99:
07:45:5c:56:df:2b:b5:d3:16:32:bb:98:1b:16:09:
94:f0:3e:dc:57:6b:d6:4d:8b:5f:6f:20:45:4d:48:
e6:87:80:82:bc:a9:68:37:6c:06:68:bb:d9:fa:2b:
5c:30:c7:37:d2:da:46:52:94:04:11:e9:cd:f3:fe:
49:0e:6c:f9:6c:37:14:c8:46:a1:4f:67:52:61:34:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:93:88:33:67:25:20:8D:4D:8C:C6:7E:04:2B:4A:22:1A:2B:3D
X509v3 Authority Key Identifier:
keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/tGiTiDNnJSCNTYzGfgQrSiIaKz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.157.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a1:d2:ea:97:05:3f:15:47:2a:3f:c0:43:e7:87:07:b8:5b:
37:1e:f8:e8:8e:06:a4:af:97:37:f2:df:3b:2b:39:77:62:e6:
be:ea:71:2c:fd:0a:65:db:d0:4e:7e:9c:d2:04:a9:5c:18:6e:
3b:b3:e6:30:7d:99:97:7b:87:9a:16:32:45:5b:87:0e:32:50:
22:27:1c:51:08:8b:cf:a6:14:c3:a4:95:8a:a9:e4:2e:a3:cf:
49:58:5d:29:d1:c0:5b:e8:e3:8f:e4:d4:87:1d:c1:30:97:1a:
fa:ed:25:c4:ae:1b:b3:b7:21:3e:65:3a:04:68:5f:f1:d4:92:
a1:4f:2f:ea:09:c9:29:68:0f:d5:6e:6c:cc:f3:f2:cf:81:ce:
54:55:36:2a:c2:87:1c:61:81:9f:f9:57:49:bc:be:09:2d:3b:
01:87:8b:7c:85:7a:b1:94:97:d0:d6:5a:70:0d:5c:cb:86:13:
c9:1e:28:c4:eb:81:fd:86:a9:91:4d:3d:98:c7:bd:96:db:74:
53:40:82:20:d2:8e:32:f8:42:94:18:b6:63:b6:45:2c:c1:81:
50:bd:4f:0b:1d:b0:1b:0c:4e:54:96:f5:86:90:5d:8b:f6:2e:
0f:0a:a8:d2:01:7c:84:b4:19:55:a5:49:12:21:f9:84:f3:8d:
bb:02:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:53:37 2024 by rpki-client on console-fra.rpki-client.org