Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/mFK3TADDZ1c42HK-t3b9GrgxkpU.roa
File: mFK3TADDZ1c42HK-t3b9GrgxkpU.roa (raw, json)
Hash identifier: hr+4B4C+j/LKxAz5D9MAY2CUq6+WPbo2OaTLEebmPGE=
Subject key identifier: 98:52:B7:4C:00:C3:67:57:38:D8:72:BE:B7:76:FD:1A:B8:31:92:95
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 018CCA2A328DEE1BDA079949BA490D1A1A02
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/mFK3TADDZ1c42HK-t3b9GrgxkpU.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 91.223.46.0/24 maxlen: 24
91.224.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:32:8d:ee:1b:da:07:99:49:ba:49:0d:1a:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9852b74c00c3675738d872beb776fd1ab8319295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:b4:0d:8c:19:e5:d6:1a:47:61:d7:12:7f:
bd:d7:ff:c3:e0:69:6f:bb:23:e7:8a:5c:22:72:19:
c6:1f:c1:ac:25:bc:0c:60:61:02:67:e2:df:b3:4f:
c9:4f:e5:bd:47:45:7e:bb:a4:cf:fc:3d:9d:14:22:
bc:7a:ba:98:84:b0:3f:e8:8c:67:82:37:b9:8d:e9:
b5:38:5f:20:3b:50:cb:da:ac:73:48:09:14:cd:52:
5a:58:0d:05:04:65:46:34:f1:d7:66:8a:73:d9:45:
6f:b3:5e:4b:35:3c:e0:a5:67:06:1d:f6:21:2e:cd:
82:62:f4:5e:1d:25:fc:1e:56:53:a1:33:79:60:5b:
59:ff:a2:80:10:14:c2:30:01:fd:74:59:27:eb:68:
a0:5c:54:7b:ef:81:a8:60:b9:a0:5f:31:15:2d:ef:
b3:b7:54:96:4d:80:19:52:89:81:a5:0a:cf:dd:2f:
bb:3a:39:20:03:a9:b1:4b:82:5d:40:71:8f:5b:89:
25:bb:63:a4:55:52:20:b2:e0:b2:c9:0a:24:e2:dc:
4d:c7:8c:61:fd:5a:80:7c:fc:88:9c:fd:36:c3:cb:
3c:e9:16:55:2e:b3:93:e9:15:c2:d7:c2:ce:f5:76:
19:76:a2:c3:c9:2c:f0:e1:2b:16:a6:63:fe:2d:0f:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:B7:4C:00:C3:67:57:38:D8:72:BE:B7:76:FD:1A:B8:31:92:95
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/mFK3TADDZ1c42HK-t3b9GrgxkpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.46.0/24
91.224.26.0/23
Signature Algorithm: sha256WithRSAEncryption
27:e8:be:62:99:83:33:4c:bd:e4:e5:ab:d1:b3:5b:83:24:dd:
d0:71:5a:88:bf:a5:a7:04:a1:a5:c0:a2:59:2e:a3:26:76:2e:
df:94:5b:5c:32:6c:fe:8f:dd:15:41:0d:56:30:16:50:e2:fd:
14:fc:7c:04:9b:96:92:b5:c6:3a:f7:7a:e5:2d:77:9f:64:51:
66:37:c7:cb:b4:7d:2b:e5:1f:b8:52:6e:1b:81:69:6d:cb:92:
87:0b:2e:c0:6f:a7:cf:0b:17:1c:7a:92:54:b1:e2:30:39:0b:
4b:18:fa:82:61:d9:3e:d7:71:2f:6b:29:3f:b1:f0:fc:d5:a8:
d6:29:69:d4:c2:48:a6:51:72:e6:0b:b2:4c:cc:24:cf:37:0e:
b9:50:e3:98:2c:7e:84:32:6c:cf:c8:9d:b1:b2:d5:a3:51:ce:
c4:3a:c0:27:12:ba:56:27:28:bf:5f:74:27:3b:67:0f:56:20:
51:70:c7:ab:03:ab:fb:85:5c:a6:06:c6:10:c4:33:b5:01:ab:
bd:35:69:7d:b6:e8:d0:eb:20:32:10:8b:30:bb:5f:99:c2:c8:
56:a3:4b:6f:52:d9:86:d1:3a:65:a4:31:83:7e:fa:a6:3c:1b:
d9:c4:86:aa:da:e0:b9:d8:2c:25:c7:66:fb:d4:b6:6b:9d:21:
32:34:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:58:20 2024 by rpki-client on console-fra.rpki-client.org