Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/7liiT1kpK0XsC6w9G7nbT7RQEec.roa
File: 7liiT1kpK0XsC6w9G7nbT7RQEec.roa (raw, json)
Hash identifier: GZXyxNpGrXW23dQXTgmEH8evQu+aECdhk7v9BJZZhgA=
Subject key identifier: EE:58:A2:4F:59:29:2B:45:EC:0B:AC:3D:1B:B9:DB:4F:B4:50:11:E7
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 018CC5001AED94E2461649169D0F5AE3D6F4
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/7liiT1kpK0XsC6w9G7nbT7RQEec.roa
Signing time: Mon 01 Jan 2024 12:29:27 +0000
ROA not before: Mon 01 Jan 2024 12:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201355
IP address blocks: 91.220.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1a:ed:94:e2:46:16:49:16:9d:0f:5a:e3:d6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee58a24f59292b45ec0bac3d1bb9db4fb45011e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:88:a9:4a:f3:59:93:ce:2e:4e:d5:89:1f:
c0:a5:15:38:9d:eb:c8:f8:fd:9f:b2:21:c6:4c:d5:
8c:f1:80:c9:ea:38:e2:65:16:5b:f9:1a:15:e8:cd:
e1:14:fc:80:b4:bf:39:73:12:49:ea:4c:75:c2:e9:
34:0c:57:79:27:6d:fa:90:d7:25:ba:41:43:5c:29:
65:6d:ff:e6:af:75:29:db:c6:7c:bd:01:46:c6:29:
30:1f:e2:35:55:9e:f0:47:bf:63:84:54:df:38:35:
78:e2:0a:cd:70:7f:30:a9:7c:c4:aa:90:e8:1c:30:
5d:65:85:9c:0b:04:73:89:88:60:b1:38:d4:d3:eb:
c8:49:43:b7:ed:69:ac:ac:c7:b3:67:ef:27:4c:80:
6c:10:4d:fb:96:cb:34:be:d6:23:64:89:a7:70:1a:
c3:b2:1c:02:a1:2d:20:50:ff:01:bc:4c:d9:f6:3e:
a4:03:4c:83:78:e6:f8:2c:2e:67:b9:d1:b4:0f:f2:
9f:03:b6:9c:80:13:66:1b:ee:36:f9:a3:7b:a0:e7:
79:a6:d2:87:55:89:c3:2b:e4:f7:0f:25:ba:b2:99:
2a:31:db:9f:a0:40:5f:53:e2:f2:2a:0f:2e:f4:de:
b9:3f:8e:b9:77:6d:59:55:19:b2:3e:23:e3:82:f2:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:A2:4F:59:29:2B:45:EC:0B:AC:3D:1B:B9:DB:4F:B4:50:11:E7
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/7liiT1kpK0XsC6w9G7nbT7RQEec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:aa:d4:b4:54:74:86:7f:45:10:73:c9:28:d2:4c:d9:f2:03:
c9:82:c5:8f:ad:a8:25:ac:27:41:54:fe:f0:65:9f:98:12:a2:
d0:ff:c6:56:6c:a3:6a:8c:c6:93:a7:03:01:7f:cc:07:9f:c7:
8d:a5:ae:61:2c:d0:0c:68:10:84:8e:bb:64:93:c6:1e:c2:c9:
ef:b4:13:ed:b4:c1:67:24:0a:3d:47:c0:e0:d6:7a:fe:40:34:
08:28:bc:8f:4c:a1:78:fe:8f:4c:8f:08:42:e0:d9:51:34:88:
7d:93:e5:4a:e1:c7:92:a2:f2:95:40:d0:bc:6f:c9:f2:66:74:
a7:9a:ad:e0:ca:ba:ec:0f:19:e3:68:cc:e0:c5:f4:5a:b1:28:
88:1b:4d:33:c2:40:d5:0e:83:c1:14:60:1c:65:19:0a:6d:a5:
1e:45:e8:3d:19:2c:4c:ab:bd:e7:8d:86:bb:9d:fc:77:78:f9:
4f:f0:4e:45:77:eb:a2:df:36:43:ba:38:99:a4:b5:4d:93:47:
43:81:68:94:42:ad:37:1c:39:68:48:95:52:5a:48:b5:23:1f:
bb:91:8f:18:88:88:d1:01:65:f7:5e:0b:4d:84:54:a6:a2:66:
40:2e:6c:12:24:8d:42:e9:9d:e5:ae:29:3e:e9:6d:ab:9e:85:
93:db:fb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:56 2024 by rpki-client on console-ams.rpki-client.org