Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/53RrI6K1ntQ2C_0QQO-yUa4MbkQ.roa
File: 53RrI6K1ntQ2C_0QQO-yUa4MbkQ.roa (raw, json)
Hash identifier: ER9i1NpuGZ87V9hf47UIYQ3KogrNwNlvSgCnk/Cw3Ng=
Subject key identifier: E7:74:6B:23:A2:B5:9E:D4:36:0B:FD:10:40:EF:B2:51:AE:0C:6E:44
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 019130FBF7BA29244E96163B2EE56485F5D8
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/53RrI6K1ntQ2C_0QQO-yUa4MbkQ.roa
Signing time: Thu 08 Aug 2024 07:55:04 +0000
ROA not before: Thu 08 Aug 2024 07:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 91.198.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:fb:f7:ba:29:24:4e:96:16:3b:2e:e5:64:85:f5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Aug 8 07:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7746b23a2b59ed4360bfd1040efb251ae0c6e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:0f:af:57:0d:4f:43:98:7b:aa:32:b1:1f:
7a:16:31:fd:05:f0:0e:52:13:dd:c9:6a:3b:fc:89:
56:44:c8:5e:5b:04:c6:3d:66:3f:92:6b:ce:fc:3d:
38:a1:35:a5:cf:05:a7:e1:ed:d4:1d:30:8c:48:54:
c4:fd:67:4c:83:41:ec:36:2b:c8:d2:26:9e:a1:23:
f6:3e:01:13:7c:51:6b:c0:a5:cb:50:e4:0e:f3:b3:
c1:e9:90:5d:bd:44:e2:87:ba:9f:a0:79:c1:3c:51:
2d:3c:30:4c:93:fa:80:aa:68:5d:ff:2b:36:f9:f9:
ba:ba:38:38:69:fc:67:85:76:fd:37:6f:6b:5a:38:
18:54:9f:74:ed:d4:fe:d4:5d:8c:f4:56:b0:60:f1:
06:3f:ba:c3:79:80:a4:76:c5:7c:97:f1:ab:5f:c3:
0f:23:05:98:c2:ed:90:a1:8c:45:86:58:9c:38:88:
2f:97:3d:ab:ff:ac:27:d3:77:93:79:fd:f7:9b:f2:
a6:77:de:41:e9:32:2d:03:ef:a2:4f:72:84:69:54:
60:75:11:18:7d:9b:c8:6e:ed:ec:35:81:3c:6d:c3:
73:ab:6c:9a:34:3b:1f:66:eb:ed:90:d7:a4:74:cf:
b0:ef:8d:ce:ee:39:d1:b6:88:04:3d:00:89:a3:0d:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:6B:23:A2:B5:9E:D4:36:0B:FD:10:40:EF:B2:51:AE:0C:6E:44
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/53RrI6K1ntQ2C_0QQO-yUa4MbkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.255.0/24
Signature Algorithm: sha256WithRSAEncryption
19:32:61:5f:65:8f:31:e5:93:00:83:76:8e:f9:fa:61:a7:43:
14:92:92:09:75:1f:1d:2b:4c:1f:74:a7:c2:2a:b5:24:bf:7d:
10:e6:3b:b7:28:29:7c:09:55:2c:07:cf:23:76:38:d6:b9:0e:
2a:2a:1e:8f:20:e1:af:e3:20:07:97:14:94:45:e9:0c:ff:3e:
7f:32:ab:20:46:76:a6:e0:86:c5:37:e5:88:ef:15:e8:68:54:
2b:57:b6:b0:cb:cc:ed:b8:bd:ed:89:eb:34:b8:e2:3f:a9:45:
ce:3c:ad:8a:43:09:a9:43:d0:13:ff:64:05:de:f5:ae:9e:24:
aa:26:6b:7c:f2:c0:65:29:8a:cc:e3:7f:0f:bb:45:d6:77:4c:
22:85:3a:61:0f:93:72:81:4c:c1:20:47:03:56:5c:22:a6:32:
df:eb:58:74:79:8c:9f:b7:03:36:aa:eb:37:15:98:4a:57:57:
89:6b:2b:05:04:0c:33:3b:5e:30:d7:fd:db:f3:90:0c:07:7d:
f2:b9:ec:64:45:02:9d:e2:86:95:db:eb:99:da:5d:73:b0:b7:
62:7d:02:3d:2e:77:e1:4e:06:93:e6:03:8d:f3:64:30:e8:d8:
02:25:01:48:c8:76:29:23:a7:63:55:68:79:1e:e6:4e:61:62:
27:3f:5c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:47 2024 by rpki-client on console-fra.rpki-client.org