Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/s9XIPWDMkdnteEzAeGK4JiMXuos.roa
File: s9XIPWDMkdnteEzAeGK4JiMXuos.roa (raw, json)
Hash identifier: 30j1rkm1ieAqyPfZBWLpIhaeQSZzvNr936S1zk4g70o=
Subject key identifier: B3:D5:C8:3D:60:CC:91:D9:ED:78:4C:C0:78:62:B8:26:23:17:BA:8B
Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Certificate serial: 018CC8DED588ACE8856AAF1656091DD30F2F
Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/s9XIPWDMkdnteEzAeGK4JiMXuos.roa
Signing time: Tue 02 Jan 2024 06:31:36 +0000
ROA not before: Tue 02 Jan 2024 06:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202354
IP address blocks: 91.205.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d5:88:ac:e8:85:6a:af:16:56:09:1d:d3:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Validity
Not Before: Jan 2 06:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3d5c83d60cc91d9ed784cc07862b8262317ba8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:79:d7:3a:fa:8d:e3:b3:6e:88:e4:e9:e7:
99:6d:3d:de:fc:6c:68:32:15:09:8b:29:67:47:47:
dd:e1:27:31:00:b4:38:cf:f5:5e:78:1e:f5:d7:34:
11:28:d6:c7:2d:8b:bc:00:7b:88:3a:28:3c:41:09:
7f:cc:28:38:cf:46:ad:ad:d5:d7:61:5f:1a:f0:9c:
cb:9b:e7:05:4f:b2:8b:1a:49:e5:57:55:9d:67:f1:
37:04:02:57:83:11:bb:88:af:68:59:2f:77:6a:b7:
7f:00:b3:a2:92:95:d5:f0:1f:d3:dd:9c:37:83:e5:
d9:d0:7d:4f:d7:f5:d9:ae:3f:40:db:12:ca:8e:f3:
d0:2c:fe:c2:09:b0:ee:41:48:91:84:a0:eb:89:fd:
da:e0:e3:36:12:8d:0a:49:1d:bb:1b:ff:db:52:fd:
ca:cd:6d:77:c8:d6:22:7a:b7:5c:40:1b:93:ab:59:
74:0e:be:28:a6:66:5a:51:15:da:db:ee:94:a2:73:
86:51:ca:3f:64:67:c9:3e:e5:6f:89:f4:3f:73:e5:
35:21:63:af:fd:c5:56:f3:7d:a7:3f:7b:bf:7f:a1:
ed:13:2f:2f:ea:78:c9:9c:9f:17:20:1a:b2:28:34:
24:26:5e:a0:d9:13:94:07:ae:b9:c9:f9:6a:2c:89:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D5:C8:3D:60:CC:91:D9:ED:78:4C:C0:78:62:B8:26:23:17:BA:8B
X509v3 Authority Key Identifier:
keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/s9XIPWDMkdnteEzAeGK4JiMXuos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1d:1e:e5:1a:c4:74:7d:5f:ef:c1:20:5d:8c:4e:d5:46:45:
f2:5c:5a:69:26:95:6e:64:86:9c:a6:5f:7b:91:85:72:8f:d5:
90:a5:ff:9d:5d:da:ee:8b:3b:38:3a:1f:c1:9e:5d:1b:97:15:
04:9d:b1:a0:4d:15:77:d9:2e:93:01:2a:6c:69:a7:c7:a8:cf:
9c:b1:b0:75:5a:33:24:05:04:99:3c:c6:d6:a0:49:5c:3a:7f:
98:a0:f8:06:03:2e:1e:c0:bc:e9:20:7e:cc:d2:29:79:69:1a:
e1:48:b6:13:17:ba:57:6d:1a:ac:86:e9:05:c4:0a:bf:9d:af:
d9:de:f8:25:d9:54:84:d2:45:fa:22:ac:73:13:e0:57:fd:ca:
68:3c:92:8e:af:e6:72:3a:77:79:5f:77:d4:06:64:e6:0b:5b:
37:ef:a9:f2:a2:1f:81:5d:e9:31:51:dc:43:87:3f:3f:96:0e:
f9:e3:50:9b:0e:25:92:b4:f2:c5:0c:36:d1:3c:07:64:36:1d:
20:b2:2d:89:4b:f8:69:04:47:24:8b:50:af:61:aa:c5:e7:e6:
ee:88:13:1b:bf:bd:15:2f:b3:43:c5:bd:04:04:3f:bf:93:34:
05:f6:e9:73:ca:35:4e:ab:08:b3:ed:96:e5:a0:a9:1f:d7:f8:
4a:9e:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:50:18 2024 by rpki-client on console-ams.rpki-client.org