Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/iXv9aX4-SXfK8KZNxV9mqheynlI.roa
File: iXv9aX4-SXfK8KZNxV9mqheynlI.roa (raw, json)
Hash identifier: 4KCwHg40v0EiCvvjQ4P8gt7ga6sxekNWDA7RYhNFxO8=
Subject key identifier: 89:7B:FD:69:7E:3E:49:77:CA:F0:A6:4D:C5:5F:66:AA:17:B2:9E:52
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 018CC8DE66BE8AA21D8EC84DA16531D480CB
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/iXv9aX4-SXfK8KZNxV9mqheynlI.roa
Signing time: Tue 02 Jan 2024 06:31:07 +0000
ROA not before: Tue 02 Jan 2024 06:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.209.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:66:be:8a:a2:1d:8e:c8:4d:a1:65:31:d4:80:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jan 2 06:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=897bfd697e3e4977caf0a64dc55f66aa17b29e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:7e:5e:4a:22:6a:1d:2d:ec:e4:69:ff:5d:
c8:34:a2:95:bf:dc:aa:94:21:94:8e:42:36:26:5b:
64:a0:68:45:b1:4b:e3:5a:23:6a:63:07:85:86:4b:
02:96:de:a4:92:40:61:b7:69:4e:15:9f:3c:05:dc:
38:6c:56:13:c6:ce:8f:42:dc:03:8e:67:b0:17:c7:
22:ac:14:fe:60:80:6a:da:3c:36:cc:f4:05:c8:d0:
d3:3b:0a:3d:8e:db:0a:28:e2:7f:e9:4a:a0:48:d2:
21:a7:f6:21:e0:4e:29:c1:5a:7d:89:31:f7:ea:08:
ae:df:ac:37:a6:11:29:99:17:6f:c3:3d:8f:5e:0d:
83:3f:8f:44:91:44:24:ff:37:d9:3a:57:ee:df:c4:
59:d0:c2:de:90:ed:38:c6:95:86:b7:8c:21:a6:d1:
87:26:12:23:4b:61:02:bc:07:80:62:bf:96:f7:f8:
d1:52:8f:1d:37:6f:71:9c:e4:c4:26:49:be:d6:b8:
48:5d:6c:4e:9d:3a:c3:7e:b6:76:e9:05:a1:7d:10:
11:a4:09:6a:6d:69:1e:c2:fb:56:b0:d5:4c:bf:a2:
94:7a:c6:74:85:08:70:4c:38:27:67:cc:0e:67:93:
8d:ac:71:d1:62:41:ce:4f:89:6d:f6:c7:27:08:ec:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:FD:69:7E:3E:49:77:CA:F0:A6:4D:C5:5F:66:AA:17:B2:9E:52
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/iXv9aX4-SXfK8KZNxV9mqheynlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:70:98:44:c9:97:e0:cb:e7:69:81:ad:f6:75:8c:0c:5d:fa:
99:65:1e:99:3b:32:e0:89:39:ee:39:2a:f1:48:0d:7d:8a:c3:
e2:35:d7:a5:ff:c8:cd:91:56:ef:ed:7e:67:ac:d9:f9:0e:ce:
df:d2:ae:a5:55:02:84:9a:57:3e:6a:35:d9:db:63:47:30:6f:
41:5a:e5:be:56:17:da:e0:5a:d6:5f:6b:c8:80:f5:84:53:bb:
85:4e:e0:2f:bd:ed:cc:2c:75:5c:00:33:63:54:73:05:22:0c:
50:8a:2b:53:05:cb:c6:47:0b:47:85:de:b0:88:49:8f:fe:d3:
37:4d:99:69:0c:68:48:3e:0f:3b:7d:49:ea:b3:fc:5d:5c:28:
4f:e9:a4:a3:d3:25:01:02:aa:a6:0b:c0:5d:52:96:0a:aa:07:
04:5c:4b:5b:0a:be:43:e8:a6:1a:4a:59:c4:ca:57:a4:b1:28:
39:02:63:ab:e8:a6:13:97:4b:b7:d1:78:1e:38:53:f0:50:78:
ce:d1:6e:bd:25:e9:33:b5:57:21:90:fd:19:15:f1:f5:37:73:
d1:6a:a1:17:30:1e:f4:b9:13:5d:f0:1e:03:56:a1:05:ad:27:
46:4c:a3:5d:8a:92:64:73:d8:3a:6b:d5:ab:1b:2f:f1:02:5e:
93:5e:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:08:55 2024 by rpki-client on console-fra.rpki-client.org