Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/8TNLJfWAWsG-pHCwnJQraNFAkrM.roa
File: 8TNLJfWAWsG-pHCwnJQraNFAkrM.roa (raw, json)
Hash identifier: jrzkDcw4NO8Zzf6948qgRJxXsHD6z7uBcnU9vJmUHT8=
Subject key identifier: F1:33:4B:25:F5:80:5A:C1:BE:A4:70:B0:9C:94:2B:68:D1:40:92:B3
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 018CC7950D61BC4B0C7024016795E3452D2A
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/8TNLJfWAWsG-pHCwnJQraNFAkrM.roa
Signing time: Tue 02 Jan 2024 00:31:23 +0000
ROA not before: Tue 02 Jan 2024 00:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197266
IP address blocks: 91.217.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0d:61:bc:4b:0c:70:24:01:67:95:e3:45:2d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Jan 2 00:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1334b25f5805ac1bea470b09c942b68d14092b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:3a:32:62:67:20:c3:1a:1e:f6:d2:63:ea:
ca:df:05:ce:38:68:45:13:11:73:23:06:fb:95:44:
3a:d8:dc:36:f5:a6:10:74:8a:fa:5f:db:90:b2:e7:
8f:09:a7:62:6f:e2:d1:62:8b:8c:c1:4a:d4:c8:75:
c3:0e:da:70:c0:82:b9:4c:16:10:13:01:0a:43:67:
ab:27:c8:d6:d1:7f:ae:ae:d3:c4:cb:1c:cb:9c:b7:
0b:8e:55:6a:89:a5:2b:4b:28:4a:c9:20:dd:0c:1b:
25:19:59:d0:5e:04:54:cb:7a:a6:5d:5d:d0:e0:c5:
87:15:ec:a8:d7:fa:ab:f2:16:6b:ce:10:bf:79:8f:
6b:d6:5c:ef:34:46:b7:7c:cd:db:30:86:b0:ac:c6:
c8:a0:51:5f:e9:e0:45:57:5a:db:cb:b9:38:39:cd:
ae:f6:60:d4:6a:ea:ec:c9:c9:18:2b:2f:3e:cf:e6:
6b:c0:5a:2b:18:82:e4:b7:2e:30:16:85:59:ef:7a:
c4:d8:5a:38:fa:3b:6a:ce:f8:b5:df:ad:93:77:4c:
2b:0c:84:fd:b0:1e:37:bc:13:e6:60:b3:27:c5:c2:
5b:8c:74:8d:b7:fa:61:41:be:db:8c:e1:d5:50:0b:
8b:97:51:f2:fe:56:51:ea:24:43:81:93:7f:dd:46:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:33:4B:25:F5:80:5A:C1:BE:A4:70:B0:9C:94:2B:68:D1:40:92:B3
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/8TNLJfWAWsG-pHCwnJQraNFAkrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.222.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e0:b3:ee:82:3f:69:7a:4e:a7:82:19:46:7b:f8:64:41:22:
2e:82:f7:b0:40:20:d9:e1:02:69:78:4e:04:b9:6c:28:ce:13:
9b:b0:67:29:df:d5:2d:b1:bc:dc:79:ea:fb:01:8e:63:2a:a7:
03:56:ac:24:c9:d0:44:2a:69:d1:b3:5b:71:6f:99:4b:31:a5:
be:11:07:97:0e:70:6b:fd:de:24:79:5e:0c:3e:98:ed:0e:8b:
99:5e:a3:63:82:58:00:71:47:3f:0a:2c:9c:8d:14:d7:83:67:
63:c9:74:49:78:0a:da:98:3c:1c:49:c7:7e:fb:b5:e8:2e:18:
02:fa:fa:dc:01:6d:0d:2b:90:80:7f:f8:90:fa:aa:3c:03:2d:
1b:55:bb:c1:00:63:2f:d3:48:2f:ec:35:d7:b0:e7:4d:b1:31:
70:1e:1d:f5:f1:a8:c8:84:aa:50:0d:26:a2:07:e1:e5:91:4d:
da:22:f6:f6:33:88:04:a1:63:58:bf:62:e8:35:52:32:7d:82:
bf:80:9f:8e:6c:b9:4f:c0:3d:41:4c:aa:f8:cb:8e:b0:b2:ca:
cb:e7:ec:bb:5d:84:65:70:4f:9c:ba:50:ca:cb:c7:a8:fd:9a:
58:80:c3:ef:27:b5:4a:7e:cc:29:4a:54:3f:e8:cf:f5:65:ab:
69:89:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:09 2024 by rpki-client on console-ams.rpki-client.org