Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0fHX7bhteTbdIcpIVe_MB7cQjxE.roa
File: 0fHX7bhteTbdIcpIVe_MB7cQjxE.roa (raw, json)
Hash identifier: tRYF4uDnqGb68uemqIe1xliH5JRwaV8llZ6b5gDddQU=
Subject key identifier: D1:F1:D7:ED:B8:6D:79:36:DD:21:CA:48:55:EF:CC:07:B7:10:8F:11
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FBDD7AEFDEE6BDC8F587A2E7C5DFA
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0fHX7bhteTbdIcpIVe_MB7cQjxE.roa
Signing time: Tue 02 Jan 2024 04:30:15 +0000
ROA not before: Tue 02 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21743
IP address blocks: 91.234.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:bd:d7:ae:fd:ee:6b:dc:8f:58:7a:2e:7c:5d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1f1d7edb86d7936dd21ca4855efcc07b7108f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ea:4e:58:64:ce:08:7d:3f:a8:3e:4a:1e:2c:
14:f4:86:45:8d:14:88:62:9a:bf:6b:06:ad:f0:ff:
fd:27:53:6b:92:87:34:14:bc:d8:a6:63:1f:50:24:
3b:be:ea:f4:b5:67:81:1a:39:a4:3b:f2:96:d2:be:
26:44:3a:96:6c:1c:61:6c:fb:32:63:e6:d0:75:64:
1e:c9:af:81:78:7b:ab:b0:03:91:dc:14:d4:27:7f:
d1:b5:9d:71:9f:d3:b6:d8:a6:f4:db:f3:8b:bc:1b:
1c:0c:d9:ad:a5:bc:48:72:d4:ac:94:1e:67:2f:2b:
72:9b:c1:2b:40:42:a3:b5:4f:13:f8:63:92:8c:38:
fe:51:da:be:25:15:e0:47:d6:d0:9a:93:62:06:c2:
d6:29:0e:3e:ae:c3:fc:67:53:ae:16:02:ac:a3:c5:
aa:be:96:0a:04:b1:8e:97:c9:9a:f1:9d:75:34:95:
48:16:53:c2:dd:d7:8d:0d:0c:f0:82:67:8c:9e:5b:
fb:ce:ef:41:1f:85:6f:16:7d:42:b1:8e:ed:bd:ae:
66:28:85:6f:47:58:b6:61:35:a6:b4:e9:83:8e:93:
0b:51:5e:cc:c8:b2:08:2e:ac:9d:d2:40:f0:c1:b9:
af:90:3b:47:e6:5e:f5:67:42:9a:1a:0a:89:8c:ac:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:D7:ED:B8:6D:79:36:DD:21:CA:48:55:EF:CC:07:B7:10:8F:11
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0fHX7bhteTbdIcpIVe_MB7cQjxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:3a:aa:53:78:b4:6d:10:01:9a:c0:12:5f:75:09:af:db:0a:
03:9e:46:7b:43:b9:68:50:42:28:08:05:d1:87:5a:24:d2:3f:
78:b0:7d:a4:04:2e:78:6c:eb:9b:71:77:de:89:5e:03:7a:02:
31:26:48:06:85:e1:b1:56:d0:15:35:41:7a:f6:4d:75:12:9c:
d7:e9:29:c2:5a:8a:78:ec:83:34:6a:3a:85:b2:ed:91:52:98:
dc:eb:bb:95:1b:f0:59:4c:0d:7f:3e:ef:1c:36:81:35:40:f2:
61:b1:c9:66:05:69:c8:13:41:4f:f3:6e:c4:6f:7a:d7:15:13:
81:24:cb:5a:d6:fe:2f:65:82:a8:e7:80:65:80:eb:4d:09:96:
1d:81:95:60:5d:f2:94:26:3f:11:c5:af:35:f6:63:76:e9:3a:
ac:8e:c4:6c:45:7b:72:a8:66:54:89:3c:cb:1b:09:87:b9:1d:
49:0d:e2:05:d1:15:01:35:67:19:2f:00:08:5f:00:6f:3f:e9:
ed:fc:63:dc:75:31:e2:c5:70:4c:87:e4:b5:d5:0d:24:f6:78:
83:a9:cd:20:4e:e5:9d:f1:ec:b6:2d:d1:d0:b5:7d:11:1b:61:
2f:75:50:8c:5d:05:42:3a:44:e0:16:fb:87:56:d8:63:a4:52:
63:c6:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:25 2024 by rpki-client on console-ams.rpki-client.org