Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/Can_zL3hKOavkBPb2C114nOvMpk.roa
File: Can_zL3hKOavkBPb2C114nOvMpk.roa (raw, json)
Hash identifier: nCp+sBx8RgtejPJ24vtXABDErGhCuhfS/X9jEiYnz1k=
Subject key identifier: 09:A9:FF:CC:BD:E1:28:E6:AF:90:13:DB:D8:2D:75:E2:73:AF:32:99
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 018EF6C8D66AE9C7626F862D07D5E5EA2D16
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/Can_zL3hKOavkBPb2C114nOvMpk.roa
Signing time: Fri 19 Apr 2024 14:35:40 +0000
ROA not before: Fri 19 Apr 2024 14:35:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33965
IP address blocks: 91.212.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:c8:d6:6a:e9:c7:62:6f:86:2d:07:d5:e5:ea:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Apr 19 14:35:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09a9ffccbde128e6af9013dbd82d75e273af3299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:88:c2:51:bc:f1:3a:9b:3e:70:b9:e6:c1:
f3:58:c5:f8:35:c4:60:6f:65:9b:d6:d0:da:83:ee:
bd:a1:44:81:aa:b6:e5:be:ad:1d:1d:19:11:1e:c6:
cc:19:ec:04:a0:00:74:cc:e8:84:df:75:fa:c7:4c:
2b:50:50:f2:33:07:ae:44:33:00:ca:33:99:03:5d:
47:a1:2c:8a:02:46:c5:ec:57:9f:21:5a:51:0c:70:
d6:3e:01:42:a9:2b:e5:21:cf:57:ee:19:da:c6:2e:
8c:d7:07:59:09:58:86:01:81:b9:aa:e1:c5:09:28:
9f:4c:f8:f7:1d:3a:58:4e:6a:bc:1f:fb:a6:0d:f0:
c9:c8:0a:a3:2d:93:d4:bb:4b:d4:46:c8:43:5a:e6:
b8:27:b0:70:7d:a1:f8:a7:6c:69:24:92:62:8d:47:
3d:d6:f8:57:9c:a3:44:0b:b1:dc:6b:51:04:51:51:
08:77:8c:17:50:f6:ae:bb:dd:91:50:05:88:b4:67:
91:be:55:70:ab:32:03:3c:6c:8f:e7:80:c6:39:a8:
60:52:fa:e2:b9:02:c7:8c:66:a7:9a:a9:38:d4:c1:
8e:3a:4a:64:d6:cd:a8:e2:e3:82:66:4a:1f:b5:cb:
3d:51:f7:5b:22:95:a9:e9:26:14:b1:53:f1:66:e9:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:FF:CC:BD:E1:28:E6:AF:90:13:DB:D8:2D:75:E2:73:AF:32:99
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/Can_zL3hKOavkBPb2C114nOvMpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.109.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b3:5b:8a:33:f5:0a:c3:e9:8c:dd:29:b7:1b:b7:b0:f9:3a:
b7:a0:fa:9c:91:95:08:80:c9:68:3b:55:58:97:f7:eb:f9:1b:
e4:cf:66:76:65:35:18:11:d9:08:51:e2:66:ac:12:ca:9a:4d:
67:1b:e8:d0:66:02:af:ca:e7:c0:70:79:39:28:37:5e:bd:fb:
d1:2e:c0:bc:b5:e6:7f:94:ee:a5:a4:fc:e2:7d:e0:b0:cc:60:
67:2e:27:9e:2a:86:c5:96:20:21:41:21:be:22:24:40:35:88:
10:d5:f5:a4:9e:b1:f0:78:f8:0a:ba:69:3e:a4:4d:84:7d:77:
b9:1b:15:25:47:91:f7:7b:7c:0d:0b:c1:9c:67:61:68:b5:f6:
5e:40:72:0f:3b:d2:78:80:92:85:32:7f:40:68:ab:b9:a9:55:
2a:0e:f2:3d:cc:e1:69:ac:f1:f7:07:91:14:ad:91:d1:39:73:
28:3c:c7:d0:fb:c4:a3:73:01:e0:3e:ce:d2:ea:65:b2:fd:1d:
f5:b3:c7:a2:59:1d:a5:4a:90:5c:f6:92:e5:9c:39:43:0a:51:
6a:76:19:7c:9e:62:1f:b8:ba:77:f8:7c:6e:80:4a:33:d5:b5:
6c:9e:f4:98:ab:95:95:5d:6e:8d:db:33:f8:f6:62:2f:88:a2:
a5:de:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:07 2024 by rpki-client on console-fra.rpki-client.org