Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/f8G5mW9F4NTNvR-ciqR9doELxPs.roa
File: f8G5mW9F4NTNvR-ciqR9doELxPs.roa (raw, json)
Hash identifier: pRStVUQvssmHho3uLaF/xaQ4mlTT5CnNIo7tUiFVdpA=
Subject key identifier: 7F:C1:B9:99:6F:45:E0:D4:CD:BD:1F:9C:8A:A4:7D:76:81:0B:C4:FB
Certificate issuer: /CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Certificate serial: 018CC5DBF68DEA4BBC83F24FE756CF798738
Authority key identifier: 20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/f8G5mW9F4NTNvR-ciqR9doELxPs.roa
Signing time: Mon 01 Jan 2024 16:29:36 +0000
ROA not before: Mon 01 Jan 2024 16:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198058
IP address blocks: 91.199.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f6:8d:ea:4b:bc:83:f2:4f:e7:56:cf:79:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fc1b9996f45e0d4cdbd1f9c8aa47d76810bc4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:04:ec:18:fe:1f:fa:5f:af:1a:83:93:ca:
c7:84:5f:b7:4e:9b:62:f4:25:77:c0:da:88:fc:53:
50:fd:c2:84:dd:2c:ba:2f:af:db:ee:c2:e1:36:95:
90:17:dd:93:19:af:bf:a5:9d:16:76:a9:29:d3:2d:
59:75:e9:db:c3:63:04:f0:59:b4:19:94:dd:5d:49:
39:43:45:84:88:4e:1a:e5:4b:08:b9:ca:aa:74:c5:
06:c0:68:48:36:64:48:bd:63:56:de:f0:89:05:68:
03:cc:90:ae:8b:e3:ea:ad:cf:4a:fa:3e:e1:98:e3:
ec:d9:18:0b:68:7a:11:98:91:7e:fc:6d:4b:79:15:
80:07:fd:b0:d1:bc:d0:21:2d:6b:df:d4:2e:95:67:
7a:fa:c7:f6:d4:2a:a6:57:2c:e9:53:f4:1f:bb:9b:
9d:d7:23:a9:2a:5b:04:f0:e1:10:cc:d9:72:63:10:
00:81:b8:ed:e1:7d:0a:eb:4b:03:09:dd:dc:64:48:
b2:d7:87:49:e3:2c:b1:02:eb:56:9e:5c:96:4e:dc:
bf:2c:b6:2f:5d:23:70:f8:e2:1e:e2:7f:f0:68:fc:
db:91:13:20:aa:0d:64:0d:7d:41:89:8d:df:53:2d:
d0:ac:68:13:4f:64:11:a9:44:dc:06:a4:bb:2f:43:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C1:B9:99:6F:45:E0:D4:CD:BD:1F:9C:8A:A4:7D:76:81:0B:C4:FB
X509v3 Authority Key Identifier:
keyid:20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/f8G5mW9F4NTNvR-ciqR9doELxPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.219.0/24
Signature Algorithm: sha256WithRSAEncryption
59:90:be:77:ce:64:5d:c6:80:04:dc:44:91:4a:d9:69:a3:14:
ca:67:da:cf:6b:14:36:20:86:46:48:8c:04:63:dd:aa:ce:b5:
23:df:6a:b6:ca:93:b7:fb:fd:f1:25:87:ae:37:18:2c:1c:16:
8e:25:a2:54:d3:43:ad:d1:ac:92:0c:75:0e:22:b4:62:cc:da:
f9:16:1c:52:a6:b0:ab:d2:74:9d:8f:ee:28:a4:9d:b9:d0:b8:
a9:29:d6:8f:87:78:d0:5c:bb:39:ab:ca:ff:d6:be:fb:9b:a6:
ec:ac:ce:9b:2f:02:1a:e7:ae:8d:fc:af:79:d0:0a:bc:61:44:
20:7f:31:6b:ac:89:5a:01:be:0c:ad:71:e5:4d:72:b2:e1:f7:
95:9a:26:53:4c:33:e8:95:94:78:5e:dd:f2:32:43:fc:f7:95:
f2:ec:19:12:81:d2:e2:54:68:b7:6a:2e:ac:e6:4d:22:5e:d7:
87:d7:bc:5e:de:d4:2a:d8:12:b4:8a:0e:6e:a6:39:d1:47:37:
43:d4:7f:25:62:e1:f9:55:b1:7b:cd:df:48:c5:9c:c4:98:a9:
5a:fe:bf:75:43:c3:bb:16:0c:be:13:d1:26:6f:72:9b:bd:e1:
b9:5c:1c:3e:5c:64:cd:c2:ac:02:04:ba:1c:16:e4:45:3a:6d:
a0:01:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:22:36 2024 by rpki-client on console-ams.rpki-client.org