Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/fooYiAv8QF_feaS2Q2c3fmyxqxo.roa
File: fooYiAv8QF_feaS2Q2c3fmyxqxo.roa (raw, json)
Hash identifier: 9zP8IMFTxmnBaiNDg+ehHlNNtc53viimGJzG/p96vjQ=
Subject key identifier: 7E:8A:18:88:0B:FC:40:5F:DF:79:A4:B6:43:67:37:7E:6C:B1:AB:1A
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 01918F4C85F541D29F353BD65A2054FCB833
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/fooYiAv8QF_feaS2Q2c3fmyxqxo.roa
Signing time: Mon 26 Aug 2024 15:27:22 +0000
ROA not before: Mon 26 Aug 2024 15:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.197.32.0/23 maxlen: 24
91.197.34.0/23 maxlen: 24
193.108.80.0/22 maxlen: 24
193.108.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8f:4c:85:f5:41:d2:9f:35:3b:d6:5a:20:54:fc:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Aug 26 15:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e8a18880bfc405fdf79a4b64367377e6cb1ab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:71:c1:eb:17:c8:8c:86:e7:f8:b0:d4:9c:
59:28:0f:1c:5c:4b:fc:b5:a1:f0:28:f1:f1:6d:d7:
fc:b7:ab:fc:0e:a4:50:87:27:84:a6:0d:df:b5:16:
ea:64:ff:6d:f7:c8:2d:d6:ad:20:c5:dc:d6:c5:58:
eb:5c:4e:5b:e8:e5:03:62:fb:75:e3:44:1c:59:e6:
a0:8d:a5:7f:25:0b:93:d5:a9:49:0e:91:d9:62:5e:
1c:bb:8c:58:46:77:ef:19:bd:1c:b0:f4:80:29:41:
dd:c9:a8:48:22:7c:a0:4e:2c:ed:7b:03:14:11:04:
00:6c:9c:e4:ab:81:fe:5c:0a:a5:5d:3f:84:f9:e2:
59:20:76:c2:71:1b:ad:85:51:7c:f2:52:f7:03:90:
ee:3a:ab:4f:d3:e4:48:71:25:e3:75:8e:53:81:01:
38:7e:a9:a8:a7:ff:42:b4:69:48:59:a7:ea:89:66:
54:7f:de:34:84:52:c0:82:f0:6c:b4:79:45:e0:1f:
12:2f:d8:62:f1:31:fe:4a:74:2a:c4:1c:24:20:87:
d8:83:5b:f7:35:57:8f:c9:0e:1f:a3:7a:a5:f1:0a:
33:6d:ff:70:2c:c3:b6:7a:24:ae:89:28:0a:85:94:
ac:a2:25:d2:b3:1f:84:6b:23:22:14:a1:2a:84:23:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:18:88:0B:FC:40:5F:DF:79:A4:B6:43:67:37:7E:6C:B1:AB:1A
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/fooYiAv8QF_feaS2Q2c3fmyxqxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.32.0/22
193.108.80.0/21
Signature Algorithm: sha256WithRSAEncryption
89:f8:7d:d2:fc:e1:38:a3:f7:34:bd:63:7a:e3:20:75:78:a6:
7a:0b:2a:26:b3:d9:36:01:ed:95:df:67:02:be:c5:ae:80:3b:
bb:44:78:6b:12:63:ce:fb:d1:a8:68:69:78:ba:fc:4b:8e:8f:
3f:ee:86:6b:c3:54:75:a7:c0:fc:47:42:d5:91:15:33:66:f7:
0b:b0:8a:5f:54:05:26:88:1c:b5:db:ed:d8:ad:eb:13:7c:2f:
ce:80:cb:f5:a6:59:e5:1b:1f:92:a5:71:ef:fb:ea:81:64:c1:
1a:a4:37:f9:79:9c:76:6f:b9:99:59:b5:19:0d:10:be:a2:a8:
27:ea:72:69:5d:11:bb:fe:2e:e8:7b:1f:8b:1a:e5:1c:24:59:
ea:61:6a:13:af:79:84:bc:25:53:3a:73:cc:b2:3c:83:5c:c7:
8d:33:7e:cf:6f:bd:74:3e:27:83:32:30:d9:58:bc:60:27:d2:
61:24:1a:a6:f2:5e:a4:63:a8:92:cd:8a:21:9e:19:6b:90:c8:
03:4c:e6:00:8a:8c:3b:53:34:9d:c0:bd:ee:f5:2d:e1:d2:c1:
b8:db:0e:7b:c1:14:e3:8c:f1:9f:2b:30:24:b3:41:89:99:03:
21:1f:41:94:eb:e0:6c:ae:25:9d:3f:fb:10:3b:76:83:b4:3b:
04:fa:fc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:41:41 2024 by rpki-client on console-fra.rpki-client.org