Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r91SITt_7opXlWwMtspZVy5ewQQ.roa
File: r91SITt_7opXlWwMtspZVy5ewQQ.roa (raw, json)
Hash identifier: ZlQd5cmyX3WAXW9OJpe2BR5uxGQxmoOKTiP4kF41qFw=
Subject key identifier: AF:DD:52:21:3B:7F:EE:8A:57:95:6C:0C:B6:CA:59:57:2E:5E:C1:04
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01915654BE9AD345D943BE44BACB38D9A159
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r91SITt_7opXlWwMtspZVy5ewQQ.roa
Signing time: Thu 15 Aug 2024 13:57:59 +0000
ROA not before: Thu 15 Aug 2024 13:57:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214348
IP address blocks: 93.177.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:54:be:9a:d3:45:d9:43:be:44:ba:cb:38:d9:a1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 15 13:57:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afdd52213b7fee8a57956c0cb6ca59572e5ec104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:ee:9d:c5:9e:96:ab:15:8f:3c:89:60:7d:
86:2e:98:1a:67:0d:1f:16:a7:be:24:47:73:20:a3:
d4:66:9f:c8:1f:fe:89:38:05:8a:04:2c:45:b5:0b:
6a:6c:6d:ba:4e:b3:76:dc:da:6a:91:a8:bf:4f:9e:
f0:51:ff:a0:ce:7e:75:1c:f5:9d:f4:06:e1:b1:30:
3c:13:07:f0:af:25:70:2f:30:3d:4a:eb:24:50:91:
2c:51:20:36:8e:04:3c:64:46:3c:04:9b:8c:bc:7b:
2d:9a:ce:da:fe:d2:75:de:12:18:d6:90:5c:1e:66:
38:d4:5b:8a:f1:cc:32:96:c9:99:7a:14:fb:82:cd:
fa:56:06:07:c0:15:58:25:3b:b1:fa:bb:b3:7c:9b:
d6:f9:ed:dd:b7:c6:4a:1f:06:f0:b1:84:9f:83:d5:
c0:31:a5:07:da:99:3c:f6:60:1a:a7:8c:d7:27:47:
f5:7f:07:a1:f6:1a:15:4d:24:32:a6:8a:2b:27:a8:
70:b9:a8:d6:f4:2a:7e:ce:bc:f1:fb:67:66:99:28:
4e:7d:61:3f:ce:54:5d:e3:96:03:e0:61:d9:10:39:
69:5c:dd:47:f3:27:51:10:12:36:b0:cf:a7:3e:8f:
c9:81:db:c3:d5:79:05:a2:f8:e2:bc:91:3e:d5:fa:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:52:21:3B:7F:EE:8A:57:95:6C:0C:B6:CA:59:57:2E:5E:C1:04
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r91SITt_7opXlWwMtspZVy5ewQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e5:4c:aa:c8:b0:59:fd:0e:40:c2:fb:25:36:98:6a:96:8e:
b0:36:ce:27:79:d6:e0:a5:5f:5b:5c:65:73:76:6d:36:8e:2c:
37:67:9e:48:8d:41:85:96:7e:60:36:76:f1:37:51:f1:94:57:
66:0d:93:11:77:85:ad:e8:3c:7a:d2:8f:0e:4c:2d:82:f3:4b:
75:de:62:19:4d:07:54:47:0e:9f:d2:dc:db:31:ca:77:0d:50:
46:a5:65:a1:8e:5d:db:0c:3d:8f:96:d3:db:5a:82:aa:97:db:
91:4b:80:19:f2:ce:4c:d9:3c:2b:0c:58:99:28:d8:47:f8:c2:
e4:e8:32:2f:48:1e:c9:ec:f1:d2:b2:8b:9c:4f:55:b7:24:78:
f0:5e:c0:4b:4a:5b:13:5f:ff:ee:cb:24:b0:a4:03:7a:5b:d3:
df:f6:8d:65:4d:7c:fd:96:f3:82:cd:57:b4:f3:66:45:ca:32:
df:e2:c1:23:87:e0:34:38:f5:0e:17:38:b1:fa:49:39:f0:1c:
d7:6f:f1:df:12:d9:8a:eb:54:ac:c4:e0:b9:59:2b:41:e0:25:
cd:4c:35:67:ba:6d:6f:72:3e:b9:77:7b:db:17:08:53:5d:e5:
38:2d:69:00:8b:2d:b7:22:b8:d2:2b:3e:bd:f4:1d:47:e8:f7:
2f:1f:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:27:32 2024 by rpki-client on console-ams.rpki-client.org