Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/JxZtEvIoR08DFGlB2Ty_CjtYE7M.roa
File: JxZtEvIoR08DFGlB2Ty_CjtYE7M.roa (raw, json)
Hash identifier: T4xrcdE6YcHTCkqlCRVWydPsrpKe7yjFLACQkXEYxXM=
Subject key identifier: 27:16:6D:12:F2:28:47:4F:03:14:69:41:D9:3C:BF:0A:3B:58:13:B3
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 018CCA29B6628F164A4309D943A6B6F75C93
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/JxZtEvIoR08DFGlB2Ty_CjtYE7M.roa
Signing time: Tue 02 Jan 2024 12:33:00 +0000
ROA not before: Tue 02 Jan 2024 12:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43713
IP address blocks: 91.198.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b6:62:8f:16:4a:43:09:d9:43:a6:b6:f7:5c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Jan 2 12:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27166d12f228474f03146941d93cbf0a3b5813b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:dc:bf:e5:4a:49:45:57:9c:6a:fa:88:a3:
43:3f:4a:1f:ee:bc:ba:08:5c:d2:8b:e7:cb:3b:b0:
93:1f:9a:b7:ca:78:5c:f9:0c:08:17:39:90:e3:64:
49:6a:71:66:44:a0:c8:5b:dc:13:9d:2e:99:90:e9:
0b:a2:23:0f:0e:71:54:52:ed:38:bc:c8:9f:ff:ce:
44:d2:f7:1f:be:8a:ea:29:b0:7a:59:9e:58:24:33:
9b:54:d6:79:27:d3:a7:da:bb:7c:80:32:85:be:02:
ba:a7:8d:0f:ad:f5:f3:cf:ae:2b:1b:9a:a3:07:ff:
0e:58:d5:0c:55:c0:b1:3e:f4:4d:96:ee:df:f9:a3:
2c:91:1d:d5:d9:c8:33:7e:32:42:10:72:d2:32:3c:
2e:9f:65:72:0b:fe:89:b3:f3:0f:38:40:57:3e:94:
13:d6:41:76:84:0c:70:1f:83:26:83:4e:45:b1:90:
af:29:9a:41:23:f4:23:6d:2a:81:82:af:d6:c9:8c:
78:1e:d7:cd:a0:46:22:0d:dc:2d:08:3c:47:38:fc:
35:dc:0d:ce:73:92:46:64:c4:91:ad:2d:66:fe:8c:
26:bf:75:57:24:81:db:8c:2f:ab:78:99:74:9d:b8:
16:c3:d9:dd:a2:b7:7e:af:c5:79:85:3d:02:bb:55:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:16:6D:12:F2:28:47:4F:03:14:69:41:D9:3C:BF:0A:3B:58:13:B3
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/JxZtEvIoR08DFGlB2Ty_CjtYE7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:be:b7:30:dd:5e:62:95:3c:c0:68:a7:13:22:da:1d:b3:fa:
a3:44:f6:4f:56:02:d1:6c:22:1f:44:b2:4d:ae:25:c5:51:b2:
4f:2d:15:3b:b7:9d:8e:fe:ad:3e:15:4d:ba:9c:14:68:a2:f0:
e2:ba:a6:bc:f7:20:25:60:7b:94:ff:e1:c6:07:4a:42:ea:dd:
a4:8f:16:55:74:9a:74:a7:c9:89:f6:83:fc:4c:76:74:4e:39:
99:5c:90:1c:07:d2:e6:10:92:c5:be:99:38:f1:c8:1a:e0:da:
e3:06:78:75:df:e0:f9:2a:5d:9f:32:cd:87:7d:7b:76:f8:77:
b4:c4:8f:40:d8:01:fb:cc:69:e4:33:29:e6:be:98:c1:fd:64:
8e:b1:55:67:73:b8:c9:6d:c7:02:92:ea:73:46:84:4f:49:cf:
56:5e:dd:c7:b1:e9:d6:7d:db:30:9c:f1:e1:e9:e1:82:ca:f3:
72:a6:09:ca:6e:1c:06:b5:49:75:17:3e:44:67:8e:be:57:89:
f6:37:4a:c9:50:84:21:43:eb:54:11:9d:87:69:09:17:eb:2f:
74:e4:8f:9e:52:89:ad:8e:e4:29:fb:a6:92:f1:37:72:72:b2:
62:d2:72:a8:a6:a4:52:cd:b4:54:bf:58:f8:e5:cc:b6:6a:64:
3c:a9:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:35 2024 by rpki-client on console-ams.rpki-client.org