Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/TCwEH5vEBSfz50ADgl45cmj8r8Q.roa
File: TCwEH5vEBSfz50ADgl45cmj8r8Q.roa (raw, json)
Hash identifier: EW48+ehFgAgOCvKw10Jtnwko9OFNJ8xGxkZ9GUHbcf4=
Subject key identifier: 4C:2C:04:1F:9B:C4:05:27:F3:E7:40:03:82:5E:39:72:68:FC:AF:C4
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019126BA3AFCEA41A95AA07C78FE57B50298
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/TCwEH5vEBSfz50ADgl45cmj8r8Q.roa
Signing time: Tue 06 Aug 2024 08:07:04 +0000
ROA not before: Tue 06 Aug 2024 08:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214417
IP address blocks: 77.91.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:ba:3a:fc:ea:41:a9:5a:a0:7c:78:fe:57:b5:02:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Aug 6 08:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c2c041f9bc40527f3e74003825e397268fcafc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:e6:ce:5b:8c:e0:bf:e0:5e:eb:f5:b9:43:
5e:77:63:63:cd:ed:2d:33:09:ec:3f:47:2e:6b:68:
76:71:41:04:32:8e:d1:33:09:99:6a:78:f4:e5:87:
03:b2:d1:df:2e:fb:ff:b4:a7:13:d5:a6:ea:64:4d:
99:73:15:ae:d0:af:ac:20:3b:ab:ce:50:14:f8:f5:
25:bc:32:d7:0e:4e:a5:08:fc:51:c9:a7:b2:76:cd:
1f:e6:95:eb:cc:9a:bf:87:35:02:54:da:24:c7:9b:
52:ad:a5:32:de:74:12:45:33:f5:a7:47:bd:46:5b:
c5:01:15:bc:a3:0c:c5:f1:2c:30:ae:a6:5b:04:18:
65:dc:e4:00:2f:66:b1:88:fb:ad:6d:02:d2:1f:d6:
85:1d:14:88:65:5c:54:a1:bf:29:ce:f3:fc:e2:a9:
a0:fc:22:e5:8a:22:dd:ff:e3:cd:b9:76:8a:e2:1d:
bf:1f:19:b4:53:77:94:d8:c4:b6:8e:8a:6b:39:73:
45:31:a2:0d:3a:f8:49:f0:ec:5b:27:08:9b:49:9b:
34:52:80:e6:5c:b9:da:20:a5:55:74:34:53:1e:ee:
62:13:a5:3d:eb:d5:d4:b9:01:14:6b:94:a2:d4:30:
37:55:29:00:7f:24:63:58:52:7e:2d:89:73:61:1b:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:04:1F:9B:C4:05:27:F3:E7:40:03:82:5E:39:72:68:FC:AF:C4
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/TCwEH5vEBSfz50ADgl45cmj8r8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.66.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6e:70:00:af:ed:c0:d8:de:9b:71:c2:9e:b1:f5:c1:4c:bb:
b5:4f:8a:21:38:66:6a:f4:2a:e9:c3:00:ea:83:e5:a8:40:a0:
43:04:21:0c:57:06:32:26:8d:ac:9f:8f:57:c0:08:77:78:62:
c5:25:e4:a3:ff:2b:84:23:31:08:27:58:5b:53:6e:1d:85:d4:
4f:7b:03:00:1e:3a:8a:8f:f9:0a:9b:a6:00:65:94:0e:77:1e:
9e:42:21:3b:d9:b4:59:02:9a:85:e3:09:ee:c4:38:87:ce:e9:
d5:2f:a8:30:0c:27:b2:4b:6d:87:1f:e4:97:d0:5f:b9:19:4c:
17:47:42:d4:9c:d9:9b:7f:ad:72:da:7b:9f:92:9e:7b:be:ad:
e3:28:94:d8:4d:71:5c:4d:2f:2c:48:d4:aa:6b:0f:bb:0a:b4:
f2:b6:ec:38:36:94:19:14:78:ed:8e:f2:96:23:a6:36:61:13:
2c:8c:0f:8a:c7:39:6a:5f:59:4c:98:6b:40:c4:4f:34:ec:23:
15:b5:da:b7:39:44:a1:33:99:bf:27:c6:29:cf:bb:ab:58:d0:
af:ae:be:d1:f1:01:2b:9c:c1:a0:a4:9b:e3:9b:35:82:1f:69:
10:2d:5f:ad:cf:55:d3:99:b4:57:59:cf:15:0d:b7:12:06:97:
71:e4:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:53 2024 by rpki-client on console-fra.rpki-client.org