Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/9rcxzQtK9yzqaJiUI5dn3XlbqjE.roa
File: 9rcxzQtK9yzqaJiUI5dn3XlbqjE.roa (raw, json)
Hash identifier: uwhpyc+NVyRSIxHllCLSCWLQdJrDvgriuCvH3g+ixMg=
Subject key identifier: F6:B7:31:CD:0B:4A:F7:2C:EA:68:98:94:23:97:67:DD:79:5B:AA:31
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018FFE1E9351A7033E1E76344A9D4DE47435
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/9rcxzQtK9yzqaJiUI5dn3XlbqjE.roa
Signing time: Sun 09 Jun 2024 17:49:27 +0000
ROA not before: Sun 09 Jun 2024 17:49:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.217.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fe:1e:93:51:a7:03:3e:1e:76:34:4a:9d:4d:e4:74:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jun 9 17:49:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6b731cd0b4af72cea689894239767dd795baa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:9e:c1:de:57:3e:4d:92:c2:56:a9:ea:87:
1b:eb:e3:16:f3:3e:ec:38:85:d7:da:32:25:38:2e:
76:64:4a:9b:c8:fe:b7:4a:1d:b1:a2:42:fb:8f:74:
54:64:2b:fe:db:3e:82:9e:02:ca:b5:43:41:13:b5:
77:20:d3:12:ba:ab:21:6b:50:22:34:c8:1c:bf:2d:
d9:0b:23:ca:5b:d9:6d:cb:7e:84:bb:70:44:08:c5:
8b:d9:0e:c2:c8:04:98:98:40:85:18:4b:fe:72:df:
53:81:c1:7c:ac:be:fb:39:66:1a:80:05:96:00:1f:
af:55:69:85:b0:8e:0d:db:9f:c3:57:c1:1e:f0:97:
ea:ef:02:66:9b:9c:52:a3:48:6a:8b:cc:da:84:25:
ae:38:9b:68:e0:c5:3b:62:91:e4:5e:ba:e5:c7:38:
fc:5c:61:d8:40:57:e6:13:15:40:5b:2f:df:91:8e:
b6:a4:b1:6e:46:57:c3:62:66:9c:db:2e:7d:22:70:
6f:4d:07:f8:21:b6:f3:a6:e3:9b:8c:82:f3:4b:dd:
10:cb:4f:0e:71:16:56:44:90:39:51:6a:03:aa:aa:
b5:51:bc:67:3d:4f:32:bb:1f:8d:25:2a:88:8f:30:
99:6c:f0:64:b2:fe:f0:5c:47:83:e6:d2:97:fb:71:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:31:CD:0B:4A:F7:2C:EA:68:98:94:23:97:67:DD:79:5B:AA:31
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/9rcxzQtK9yzqaJiUI5dn3XlbqjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:60:56:5e:97:d8:b9:7d:87:d8:ee:5a:98:54:e0:25:15:89:
b2:86:4b:04:66:55:a5:e3:e3:d5:82:3d:3c:41:66:21:c9:3f:
18:0e:b5:44:79:db:c2:a6:65:6a:1b:c7:d2:1b:2d:b2:b7:fe:
af:89:0e:ca:a7:e0:8a:d4:11:df:2c:96:f6:71:32:ab:80:ef:
85:9f:11:7c:7e:00:ff:66:56:54:eb:cc:c7:ab:da:00:6f:47:
5c:42:35:a5:5e:dd:06:e9:c2:93:2e:28:ee:57:ea:c5:5c:09:
7a:24:b6:fd:4f:01:a3:a3:c7:45:70:a0:b7:f5:fa:18:0b:3a:
3f:43:5e:cc:6c:37:9a:60:4e:c3:d8:6a:fe:25:31:35:58:fe:
83:42:df:ef:2d:2a:b2:7a:26:96:ce:d4:64:28:98:81:f6:22:
90:03:9d:10:2f:14:5b:75:80:6e:a4:82:2f:08:8c:03:b6:d4:
0d:80:8e:eb:b9:55:66:2b:7f:56:17:51:ad:fb:8e:a1:bf:44:
50:84:4d:3e:c3:8f:8d:e2:b6:54:3e:43:1b:cd:2a:53:59:f6:
f1:f3:07:16:a4:b0:c2:e4:b3:5a:66:ec:5a:74:87:75:bc:09:
7d:59:89:c6:5d:3d:9f:1d:18:f9:8e:db:bc:13:fd:95:d1:9e:
01:ae:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:31 2024 by rpki-client on console-ams.rpki-client.org