Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/1-TKF6n5Jw1jpFTFVOSm8I8BScNI.roa
File: 1-TKF6n5Jw1jpFTFVOSm8I8BScNI.roa (raw, json)
Hash identifier: uFbzly5b/Rvnc47v3tZ2QDLbvvh8zD0R7WwMOq+i3C0=
Subject key identifier: F9:32:85:EA:7E:49:C3:58:E9:15:31:55:39:29:BC:23:C0:52:70:D2
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 018CC5DC337FBF171EEE1D49359694BE95E2
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/1-TKF6n5Jw1jpFTFVOSm8I8BScNI.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48415
IP address blocks: 91.223.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:33:7f:bf:17:1e:ee:1d:49:35:96:94:be:95:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f93285ea7e49c358e91531553929bc23c05270d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:3d:76:0f:ad:05:ea:94:6a:d0:1b:4b:a0:
50:6e:fa:da:f4:bf:f2:50:0b:ea:60:0d:5d:6d:06:
ab:68:d7:7f:8a:5a:a6:fb:de:16:d8:16:04:e0:74:
1f:d0:e0:f6:04:bc:43:dd:96:3c:a3:0b:5a:fe:19:
8a:4a:25:6d:13:0f:ba:2c:4a:ee:47:6b:93:9a:fc:
ec:03:bb:7d:eb:50:53:00:0f:ab:0e:27:fd:66:52:
53:68:06:30:f5:3a:ee:52:93:44:17:f8:3b:eb:b9:
bc:6a:3a:08:f4:fa:d1:97:7f:06:0f:63:d2:95:4c:
73:18:28:78:e6:25:83:39:87:7f:cb:27:25:e4:c9:
28:70:8b:9c:92:aa:89:65:30:d2:ef:88:4c:58:f9:
af:98:ca:a0:31:b8:ac:be:82:d3:3b:00:be:2f:0f:
9e:a6:cc:06:0b:12:63:f4:79:72:02:99:4a:34:bb:
7b:1d:04:bd:50:b5:cb:45:3e:be:e6:46:45:6c:e8:
ba:72:bf:e0:af:62:8c:49:95:db:d8:55:d3:c1:a2:
7a:84:94:ce:dd:ff:7c:53:0a:ff:92:bf:45:57:01:
34:f9:fb:07:e6:9d:8b:d8:21:ba:62:5e:c2:75:2a:
48:0c:f4:9e:cc:45:b1:fa:40:c3:4f:af:53:60:99:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:32:85:EA:7E:49:C3:58:E9:15:31:55:39:29:BC:23:C0:52:70:D2
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/1-TKF6n5Jw1jpFTFVOSm8I8BScNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:35:bd:03:4c:4e:4e:ab:ae:a9:93:f6:b7:3f:f6:a7:51:a5:
97:0f:6e:47:8b:b2:2a:5e:f4:15:b8:c5:6a:06:86:e4:60:e4:
21:0b:db:85:19:b7:7b:4b:ac:8f:2b:dd:f1:66:32:a5:34:db:
7f:b0:ff:9f:5d:c0:e7:67:21:1e:f3:a3:30:bd:89:60:90:95:
66:1f:20:11:7a:93:f4:d5:5c:0b:2b:01:c5:07:69:2d:cf:3c:
27:75:86:98:63:48:24:d8:63:36:29:d0:52:ae:42:3a:04:59:
56:fd:66:91:e1:45:a6:80:21:9b:52:c8:7d:31:bd:68:e8:53:
9a:90:c5:2d:88:cd:c7:ad:61:5c:59:7b:01:3c:12:8c:cd:55:
1a:19:e3:e4:53:bd:9d:e5:45:ec:19:c9:68:d0:04:a2:5b:d0:
78:09:7d:b5:c5:a0:74:60:dd:1b:90:06:d5:63:32:53:17:bf:
9f:71:e1:a0:51:5d:14:fd:c3:f4:9e:2d:c8:dd:c0:a7:af:7a:
02:ec:35:0a:16:2e:0c:d4:66:e3:6f:1a:60:7c:de:3c:16:30:
46:14:e3:ba:2e:ec:df:6e:f6:4f:37:86:d4:97:9d:b7:3e:ae:
90:f0:14:8a:93:ff:d2:ec:2c:0e:4b:33:99:65:ac:60:95:ed:
6f:cb:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:25 2024 by rpki-client on console-ams.rpki-client.org