Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/VwcFiE6jOgvZO5KILZzSbYorB0o.roa
File: VwcFiE6jOgvZO5KILZzSbYorB0o.roa (raw, json)
Hash identifier: m45U80EWJBVpKsTzdi5ZSQ7Vfb4zqquOg3e88GjqNeE=
Subject key identifier: 57:07:05:88:4E:A3:3A:0B:D9:3B:92:88:2D:9C:D2:6D:8A:2B:07:4A
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0192B9177C529F7CCEEC3928B7509D0D2403
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/VwcFiE6jOgvZO5KILZzSbYorB0o.roa
Signing time: Wed 23 Oct 2024 11:16:17 +0000
ROA not before: Wed 23 Oct 2024 11:16:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 91.246.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:17:7c:52:9f:7c:ce:ec:39:28:b7:50:9d:0d:24:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Oct 23 11:16:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=570705884ea33a0bd93b92882d9cd26d8a2b074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:38:8a:12:7c:bc:bb:c1:15:21:a9:1a:bf:
cf:5b:7f:61:7e:a2:38:18:c9:24:16:a8:bf:45:4b:
fe:95:b5:b7:e1:e6:1d:c6:fe:ae:49:1d:85:d4:76:
d5:a8:55:c5:72:ca:62:78:15:a7:81:30:c1:97:65:
b2:6e:7e:a2:59:31:9f:b5:2e:a1:d9:d1:97:a0:1f:
d5:95:ac:b1:90:bd:a3:6d:c6:7a:17:d8:5c:05:11:
5d:39:fb:a9:7c:e9:6a:7a:0d:07:59:c3:28:93:4b:
5f:aa:5d:c9:60:87:cf:44:78:30:2b:61:8a:53:81:
ef:95:09:80:42:14:99:8a:a1:12:8f:08:f8:0e:4a:
d2:8a:7b:2e:9a:f3:70:85:aa:e2:b1:8e:b9:85:18:
06:a3:a7:60:de:42:1e:99:a8:ac:96:f2:56:7c:77:
de:10:7c:49:29:ef:9b:2b:2b:25:b8:b6:d0:3c:18:
12:d7:d3:3e:8f:eb:ff:8f:39:a2:a1:78:63:ad:96:
67:dd:ea:19:4c:da:34:e1:70:d1:d7:ea:40:8e:7b:
dd:1d:b4:76:b7:d7:ee:84:cf:c4:c8:96:6d:c2:c3:
9f:ca:ba:a2:80:0d:08:94:9a:8e:7f:cd:9d:d9:74:
7d:68:8f:c8:28:46:d1:e3:e2:6c:3d:5a:29:0e:ba:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:05:88:4E:A3:3A:0B:D9:3B:92:88:2D:9C:D2:6D:8A:2B:07:4A
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/VwcFiE6jOgvZO5KILZzSbYorB0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.176.0/21
Signature Algorithm: sha256WithRSAEncryption
93:e7:39:0a:0f:7c:d5:d7:c8:03:85:cf:1b:a2:49:3a:77:be:
57:92:1d:d0:d0:d7:6c:4d:05:a9:35:d1:46:41:06:a2:dc:78:
68:88:90:38:d6:76:59:1b:2d:af:f4:95:59:65:fc:3d:61:57:
9c:25:aa:b7:de:e4:02:ef:cc:24:e4:50:6c:1a:a8:58:ac:f6:
4f:25:7b:99:1c:2e:fb:d7:f5:7d:ba:c5:33:b8:fe:ce:3d:08:
8c:52:68:ee:e4:31:f0:70:2d:13:88:a6:96:34:9c:97:1e:8b:
bd:d0:12:04:ac:a8:6a:36:2b:89:37:1c:13:0b:16:d1:93:41:
76:f0:57:95:74:97:3a:e8:ac:08:23:b0:d7:1b:8d:2b:22:9a:
ea:9a:ac:14:d8:3c:82:90:5b:a1:e9:6d:c3:73:ea:8e:ef:20:
0b:cb:45:68:6f:0c:05:6e:fe:41:4a:07:87:5a:5d:30:d3:2d:
2a:1e:ca:13:dc:f6:59:cb:2e:7e:a6:26:29:38:53:23:78:ae:
16:f1:78:3c:76:67:f6:7e:95:45:fb:16:c7:4a:03:3c:0c:1b:
04:8b:f2:a3:dd:ca:01:25:bd:27:0c:83:75:17:1d:94:31:33:
36:c9:bc:0c:ca:74:95:d0:99:c4:24:3f:f9:5e:9a:ca:ad:37:
ac:7e:b3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:09:47 2024 by rpki-client on console-fra.rpki-client.org