Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/zS8iNFgSJOefsPz_te-hJDn_DzI.roa
File: zS8iNFgSJOefsPz_te-hJDn_DzI.roa (raw, json)
Hash identifier: PhvEBm/6r66HhWIEvGSH8i/ta25nrGOV3HxyzylgOZA=
Subject key identifier: CD:2F:22:34:58:12:24:E7:9F:B0:FC:FF:B5:EF:A1:24:39:FF:0F:32
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019107CE3AB6C0288B725C8EDA050954EBEC
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/zS8iNFgSJOefsPz_te-hJDn_DzI.roa
Signing time: Wed 31 Jul 2024 08:00:41 +0000
ROA not before: Wed 31 Jul 2024 08:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199239
IP address blocks: 91.92.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:ce:3a:b6:c0:28:8b:72:5c:8e:da:05:09:54:eb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jul 31 08:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd2f2234581224e79fb0fcffb5efa12439ff0f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:43:0e:00:02:86:8f:51:77:f7:93:3f:34:
4a:22:a8:48:b4:ca:3e:52:0e:28:d5:2d:c2:27:a7:
24:c3:0c:d7:2d:29:1e:a5:2a:68:61:8b:e5:87:5f:
3f:f4:61:17:8f:ef:3e:ac:6a:17:eb:ac:79:17:a9:
8d:75:b1:42:e1:bf:d1:af:51:92:14:40:10:c2:ca:
ee:39:f0:19:ad:49:42:38:07:d2:5e:e8:fd:0a:32:
5a:d2:bd:51:b8:52:d6:e7:0f:dc:b9:cb:a9:9f:cf:
87:73:0c:c7:18:9e:93:62:2c:90:74:48:a5:b9:c3:
09:08:63:b3:e7:3f:6a:a1:4f:f2:71:8d:e1:56:ec:
e9:52:e5:ec:14:c1:a6:93:8f:ac:b1:3f:51:83:8e:
42:2a:a9:4d:95:a8:c0:9a:c6:1c:a0:78:d5:11:9b:
22:b8:ab:cf:66:66:d3:33:11:20:f6:ee:09:b3:7d:
c8:6a:c9:3b:97:8c:1e:41:bb:7b:1b:9a:57:cd:db:
fd:f8:3f:28:21:a1:97:b3:31:dc:4d:27:98:4a:75:
46:2e:e8:5b:b7:e8:9b:9b:a1:f5:c8:3c:61:72:ed:
db:06:79:1b:0b:42:c8:91:a7:08:3d:86:eb:68:96:
45:54:cd:13:a0:07:78:f0:53:ab:60:de:e0:7b:cc:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:22:34:58:12:24:E7:9F:B0:FC:FF:B5:EF:A1:24:39:FF:0F:32
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/zS8iNFgSJOefsPz_te-hJDn_DzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1c:d0:97:34:a5:48:f1:e1:48:72:d7:b6:4d:1a:aa:c2:a4:
75:c8:8d:d4:ad:61:f5:11:34:02:d8:c3:c6:1c:81:95:e0:f5:
1f:a2:bf:50:df:89:e1:31:1f:65:8f:93:1e:f3:43:15:96:d9:
f1:82:32:00:1a:c7:42:9a:d6:f5:d9:ee:c0:e3:fa:2c:b8:0c:
76:4a:b5:81:46:47:b1:2f:33:66:fe:59:a7:18:c8:ae:31:aa:
b7:9c:59:2c:e9:23:35:26:2d:f1:47:bc:82:69:29:f1:cc:bb:
a1:55:14:e5:9c:02:da:3a:dd:09:cf:8a:82:15:af:3e:e7:a4:
c2:b9:4c:ec:4d:e3:14:26:0d:6c:b2:dc:f3:39:71:8e:9a:ae:
d3:ff:4b:a7:a8:1c:c7:9f:70:b9:75:55:f0:bb:82:49:07:d9:
00:be:ee:79:a2:fd:1f:be:08:a0:f1:7b:60:43:a3:b7:3f:c9:
33:50:a3:7e:6b:c2:1e:76:19:9b:d9:79:af:fb:9d:1a:8d:10:
89:70:62:03:9c:40:10:d9:ae:d3:e4:f5:b6:28:e7:c9:97:76:
b8:b1:d2:e8:20:4b:d7:b7:3a:73:6a:36:d9:d4:46:23:f2:82:
d0:90:35:39:e1:0b:ee:41:17:f7:6d:60:e6:b7:e3:88:e4:3b:
5b:5e:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:08 2024 by rpki-client on console-ams.rpki-client.org