Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/8wzOn5rmAGX1gg3waDbQJUEquqA.roa
File: 8wzOn5rmAGX1gg3waDbQJUEquqA.roa (raw, json)
Hash identifier: /6W7lWoxXzSU0TEBR1EsH9YghpStOWaZAqnpxDlvHoM=
Subject key identifier: F3:0C:CE:9F:9A:E6:00:65:F5:82:0D:F0:68:36:D0:25:41:2A:BA:A0
Certificate issuer: /CN=044349ada95df44ad5b47e562ff862e5bd4398ad
Certificate serial: 018CC3B6787563F7C2EE2B1365C59F057EC8
Authority key identifier: 04:43:49:AD:A9:5D:F4:4A:D5:B4:7E:56:2F:F8:62:E5:BD:43:98:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BENJrald9ErVtH5WL_hi5b1DmK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/8wzOn5rmAGX1gg3waDbQJUEquqA.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198984
IP address blocks: 91.237.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BENJrald9ErVtH5WL_hi5b1DmK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:78:75:63:f7:c2:ee:2b:13:65:c5:9f:05:7e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044349ada95df44ad5b47e562ff862e5bd4398ad
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f30cce9f9ae60065f5820df06836d025412abaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:06:8f:1d:a6:e5:b5:a1:38:d2:10:d1:23:
6c:86:17:a3:a4:85:f8:7a:e1:f7:0e:b3:a9:d9:3c:
51:85:0b:12:c1:62:3d:46:d3:7e:f9:fa:15:7a:f4:
b6:80:64:79:5c:d4:5a:cc:19:1a:dc:26:78:c1:57:
d4:de:de:70:b9:81:48:bb:03:1b:c0:4b:79:09:da:
c6:dd:00:63:51:d9:f2:ba:8e:0f:fd:d6:53:ca:3b:
e3:91:01:14:aa:a4:7e:4b:53:5e:00:e5:ac:9c:5a:
32:8a:31:37:de:b9:14:be:8f:51:4b:d5:dc:05:72:
34:28:bc:5a:c7:fc:15:9b:14:cc:2c:1e:98:00:29:
58:40:11:5a:34:8a:99:e0:69:af:0b:e7:dc:ca:e9:
c7:f1:58:39:45:a1:02:a0:1f:da:e3:fd:1a:1c:0f:
71:c9:15:56:ad:fb:18:52:22:16:d2:2a:40:37:b5:
82:20:8d:bf:1d:09:68:aa:f1:de:0b:b3:c3:0f:a4:
e5:30:18:a9:cc:89:3a:68:61:ae:c5:f1:61:b2:e5:
be:86:9c:c4:11:ba:3c:99:be:80:9f:fd:30:1a:ad:
d8:c0:fa:5b:47:67:50:a4:b3:00:3b:ec:f5:cd:fa:
0a:f4:b0:6e:cc:6c:7e:69:3f:ee:16:e6:4b:a9:71:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0C:CE:9F:9A:E6:00:65:F5:82:0D:F0:68:36:D0:25:41:2A:BA:A0
X509v3 Authority Key Identifier:
keyid:04:43:49:AD:A9:5D:F4:4A:D5:B4:7E:56:2F:F8:62:E5:BD:43:98:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BENJrald9ErVtH5WL_hi5b1DmK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/8wzOn5rmAGX1gg3waDbQJUEquqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.136.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:b2:3e:81:8f:68:94:6c:2d:e3:59:5d:7a:d4:d3:ca:63:ea:
00:6a:f7:62:8e:c4:b3:af:bf:33:d2:9f:07:d2:5a:4e:ce:18:
f0:74:9e:df:6c:87:cb:87:0d:97:4e:d3:bf:57:ba:64:ee:46:
9c:a8:ee:4a:c4:5f:c1:23:a6:0e:a6:ff:71:a0:59:b1:2f:91:
ca:20:90:25:3f:71:5d:10:9d:25:d6:55:d0:2e:d5:3f:ed:15:
9a:d6:04:3f:6b:3d:75:7b:25:8e:fc:f3:fd:9e:21:1d:53:de:
f3:70:26:d4:26:84:4a:45:e4:ea:45:5f:ec:19:86:c6:3e:58:
98:79:77:19:36:35:54:7b:3c:7f:d7:49:2c:ce:06:79:c0:8b:
ea:55:fb:c1:c1:0a:60:ee:b4:dc:4f:96:7e:bc:9a:a5:d0:6a:
f3:8d:c5:9f:85:4c:42:7a:36:ed:36:d3:56:a9:26:a2:72:92:
10:85:45:2f:fe:a0:d4:8c:29:41:73:46:80:51:4f:fb:f0:f8:
29:8a:b8:47:bb:07:34:23:3e:9d:b7:3a:53:db:fa:89:21:3e:
7a:bb:4c:b0:b3:a6:ca:07:ab:7c:99:dd:04:74:2a:95:e5:5f:
2f:99:ab:98:12:21:0c:d2:74:38:08:20:92:da:29:09:44:8b:
ff:c7:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:13 2024 by rpki-client on console-fra.rpki-client.org