Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/t1jaebSUX4VUR1P8IIqhii4GBmg.roa
File: t1jaebSUX4VUR1P8IIqhii4GBmg.roa (raw, json)
Hash identifier: hGC5/y7FRtqEV5IsL02WMwIHxB4rea8c82xgYols/us=
Subject key identifier: B7:58:DA:79:B4:94:5F:85:54:47:53:FC:20:8A:A1:8A:2E:06:06:68
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 018CC64B242A38C826429F65A5BD9C753A23
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/t1jaebSUX4VUR1P8IIqhii4GBmg.roa
Signing time: Mon 01 Jan 2024 18:31:02 +0000
ROA not before: Mon 01 Jan 2024 18:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204726
IP address blocks: 91.219.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:24:2a:38:c8:26:42:9f:65:a5:bd:9c:75:3a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b758da79b4945f85544753fc208aa18a2e060668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:a8:c5:f6:4b:68:bb:f8:ff:f6:e6:07:c0:
d4:8e:d2:b2:19:a9:d3:f2:09:14:a4:92:94:70:5c:
c3:58:22:ae:50:18:c2:c3:07:ed:85:f1:9b:70:e9:
99:dd:71:bd:86:23:07:dd:0a:e3:eb:a9:b2:13:49:
ce:2c:67:b6:26:3d:df:19:be:b5:d9:77:aa:87:bb:
7d:16:cf:56:7c:a4:33:2a:df:1b:2b:3e:d6:b3:4e:
43:fe:d4:5d:c8:17:29:91:48:34:5c:5b:04:0c:37:
c3:b0:75:73:9d:5e:d9:a8:5a:2c:c6:e3:fd:52:c0:
8e:72:34:2c:93:07:9d:e7:51:f7:67:e9:3e:19:fe:
ab:16:9d:a2:b2:29:ca:0e:b6:34:07:01:2c:66:1f:
d9:20:66:b9:f0:46:1a:15:ce:4f:48:c2:62:8a:e8:
ec:13:83:ed:49:3d:26:65:c3:01:c1:f4:5d:00:83:
e8:7b:85:ef:75:70:17:ce:f2:d1:ed:4d:93:0d:33:
62:29:e9:37:18:10:0f:e9:03:15:9f:c8:81:48:2f:
68:94:86:af:bc:eb:1b:48:34:b4:a3:76:a5:4e:48:
05:e5:b2:5d:eb:e2:86:e3:4e:ec:98:f9:fd:66:62:
2b:09:ba:b9:38:a2:7e:71:2b:2a:49:15:56:5e:7f:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:DA:79:B4:94:5F:85:54:47:53:FC:20:8A:A1:8A:2E:06:06:68
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/t1jaebSUX4VUR1P8IIqhii4GBmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.22.0/24
Signature Algorithm: sha256WithRSAEncryption
94:76:b5:32:76:24:d2:40:0f:57:a8:ff:ed:d0:62:01:20:0d:
a9:78:1b:3a:c9:a2:ae:58:cc:8e:18:ba:00:5c:ee:0e:a1:45:
8f:b7:54:17:c9:4e:c6:57:2b:cb:cc:24:48:5f:9d:10:21:fa:
a1:39:d2:f2:04:92:ab:66:c1:bc:6b:e3:6f:ab:d7:97:71:5c:
2d:c5:d8:ac:92:57:8a:81:b1:a0:b4:8e:3c:8a:b8:b6:80:0e:
bb:06:b9:3c:4c:ba:74:38:58:d5:d9:4b:cb:c0:49:cb:6f:c1:
a7:92:8b:b1:e8:22:7a:7b:14:22:f4:8d:22:8b:6f:ae:19:f1:
6f:4d:5c:4e:1f:b7:cb:e8:4e:12:5e:30:f0:b4:ec:ba:1c:75:
e4:fa:ac:ed:20:99:fd:46:d0:08:cd:c4:83:03:8e:7a:45:89:
08:5f:54:8d:e6:57:4c:5a:01:04:cb:49:c4:ec:f8:fa:7d:96:
a6:1b:19:41:d0:dc:46:a7:30:84:4f:87:a4:03:2a:a7:f3:cd:
55:dc:d9:af:f6:08:c5:e9:54:5b:eb:7c:17:09:31:12:7b:b0:
41:de:69:5c:a8:9c:72:3d:f9:40:fb:1b:cb:ff:24:99:ad:31:
f7:9d:b8:85:5d:dc:36:e5:45:0f:a6:78:77:ee:b9:e8:31:fa:
3a:ff:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:50:58 2024 by rpki-client on console-fra.rpki-client.org