Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/R2y_DeVkpkDvwEkOFd0P3ZHYGVQ.roa
File: R2y_DeVkpkDvwEkOFd0P3ZHYGVQ.roa (raw, json)
Hash identifier: /rfbmBWhOSme2aElNSCGiojtGVvi0L44BMgtFUKta1w=
Subject key identifier: 47:6C:BF:0D:E5:64:A6:40:EF:C0:49:0E:15:DD:0F:DD:91:D8:19:54
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018CC64B6B11360499D1008653B5A93292AC
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/R2y_DeVkpkDvwEkOFd0P3ZHYGVQ.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 91.217.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6b:11:36:04:99:d1:00:86:53:b5:a9:32:92:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=476cbf0de564a640efc0490e15dd0fdd91d81954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:dc:a3:0c:06:00:52:b5:31:11:94:18:17:
6e:72:1d:db:63:27:17:83:89:89:5f:27:ac:72:cf:
d2:eb:86:c3:ff:41:da:dc:31:64:fe:bf:1a:92:f6:
fa:9b:96:c7:2b:e4:f5:df:0f:03:eb:b6:03:8f:6b:
e1:bd:7f:b3:61:63:3f:a6:e6:e8:a2:b4:4c:4b:c3:
68:89:b7:0d:a6:05:4f:2a:a9:a3:14:c0:a0:0c:8f:
87:6a:78:b6:c3:b8:6f:c4:03:72:7e:ab:ee:c5:c9:
54:08:5d:13:99:b0:b7:3f:63:26:b1:89:11:51:cd:
36:cb:e7:89:4c:db:b7:71:cf:fa:ac:16:47:4c:22:
4d:79:79:c1:81:55:b5:44:69:f3:bb:f0:f8:0a:7a:
62:e0:c4:bc:41:fe:06:86:aa:ce:a9:f1:c7:2f:b8:
65:ec:40:9f:51:3d:7f:25:d8:ed:d5:8b:05:31:95:
19:5c:91:b1:ff:51:4a:6d:29:a4:85:8c:c1:b3:c2:
ce:08:bc:87:8b:97:6a:93:a0:58:7b:fc:4b:fd:62:
34:6d:11:82:aa:2e:58:c7:1f:51:ac:80:ab:0e:3e:
5c:a5:0a:4d:86:5a:c9:d3:b7:91:dd:d8:00:b7:28:
79:36:1e:d7:31:b6:ee:3b:d5:c3:3a:3f:c8:fb:9c:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:BF:0D:E5:64:A6:40:EF:C0:49:0E:15:DD:0F:DD:91:D8:19:54
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/R2y_DeVkpkDvwEkOFd0P3ZHYGVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ea:3d:88:d3:e9:66:99:02:3f:d6:4a:97:04:ae:c4:e9:fa:
e7:ab:52:6c:ab:91:12:0a:b1:b2:4e:51:4c:62:04:a5:50:61:
61:a9:90:5e:fc:8d:f1:21:8e:24:13:6d:00:61:8e:ef:2d:9f:
81:4b:55:58:bc:2b:5a:da:38:2f:84:8d:cc:79:13:2c:55:73:
96:89:28:64:79:51:95:3a:b6:d8:26:14:e6:24:f5:55:8b:6c:
bd:16:48:ce:3d:d2:48:67:34:44:d4:fd:19:06:66:45:49:b0:
93:82:68:a3:f6:99:ad:96:18:df:2b:d2:04:cb:2b:e9:e9:8a:
eb:ec:64:30:5b:b4:8f:48:3a:06:68:13:2d:f9:92:fe:f2:96:
81:84:e6:40:b3:f1:bf:7a:d8:d7:09:90:f5:7b:fe:f8:dd:5f:
89:e7:6c:bf:5f:a6:e2:98:12:26:fe:35:9f:33:69:c8:cf:0f:
14:5a:69:16:38:3f:4d:d6:b3:58:e7:b4:67:df:9b:c5:7c:19:
33:a7:e3:d3:8b:fd:47:36:ed:81:be:5e:6b:20:7b:31:f5:9f:
18:e1:ec:94:a3:dd:18:3a:a0:89:b3:1b:17:b8:95:6b:bc:fd:
d0:72:56:80:16:96:37:55:8f:cc:48:6f:d5:84:63:1e:05:c7:
a5:d6:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:11 2024 by rpki-client on console-ams.rpki-client.org