Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LEpFMskhUz6zuREZod8nficESkM.roa
File: LEpFMskhUz6zuREZod8nficESkM.roa (raw, json)
Hash identifier: OrqcekuDU0BptRxMve2ZadB1pt63aYrkqWaQvgCmc6M=
Subject key identifier: 2C:4A:45:32:C9:21:53:3E:B3:B9:11:19:A1:DF:27:7E:27:04:4A:43
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019131828CA14F8AC9AC06036648A8AE40F2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LEpFMskhUz6zuREZod8nficESkM.roa
Signing time: Thu 08 Aug 2024 10:22:04 +0000
ROA not before: Thu 08 Aug 2024 10:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58033
IP address blocks: 91.212.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:82:8c:a1:4f:8a:c9:ac:06:03:66:48:a8:ae:40:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 8 10:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c4a4532c921533eb3b91119a1df277e27044a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:fd:e6:db:f0:26:f8:1c:8e:63:1c:19:c9:
72:e3:54:dc:2a:30:a0:0c:0a:b5:12:b0:ca:1d:63:
96:e7:12:26:ff:57:0f:73:6c:11:98:78:f1:33:c3:
00:ce:55:78:4c:33:15:fc:45:a1:4b:98:fb:f2:84:
7d:82:4e:ed:95:cf:d5:7f:da:39:c7:06:e0:d7:54:
ef:a8:ee:7c:4f:1b:b3:42:ac:1f:87:e8:76:67:bf:
39:05:25:66:49:26:ab:6b:8e:c7:62:ac:dc:44:17:
25:05:c3:2b:54:a7:28:dc:00:04:15:78:a4:54:ef:
98:7a:0e:9f:e8:ad:55:70:17:a9:07:ff:b9:98:5f:
a3:72:56:9b:09:64:51:3d:9d:34:8e:cd:b4:4d:61:
43:64:b9:aa:9e:88:ac:87:c4:9d:2b:d1:25:e7:41:
87:03:dd:75:b1:5d:a9:11:61:fe:ca:7f:17:04:cc:
2d:f7:75:10:f5:bd:47:89:f2:d9:74:fb:46:b8:b1:
52:5e:80:ac:2e:67:fa:79:66:dd:49:31:b9:98:d3:
89:00:a4:76:8a:85:cc:c4:6d:58:7d:20:bd:62:4b:
d1:12:7e:aa:27:1f:60:41:8d:8f:e5:6d:ff:25:ba:
30:ea:9a:ea:04:98:11:05:6b:b1:35:a5:fc:a6:4f:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:45:32:C9:21:53:3E:B3:B9:11:19:A1:DF:27:7E:27:04:4A:43
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/LEpFMskhUz6zuREZod8nficESkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.32.0/24
Signature Algorithm: sha256WithRSAEncryption
18:90:f6:1b:21:42:ff:0f:5e:d6:77:fb:df:9f:df:5e:92:d0:
1e:6e:9e:76:97:4d:ff:da:14:8a:d1:d7:de:36:1b:74:b8:cf:
a4:f9:0d:d9:e3:5d:93:d0:3b:3b:77:1a:6a:72:17:4c:81:a8:
75:0f:c3:93:20:02:7d:86:bd:ab:b5:8e:7f:08:65:5a:d2:02:
0b:e5:cf:73:85:58:7f:6d:38:cb:0c:4a:4b:15:f6:1b:ff:d7:
4a:bd:05:8d:44:55:47:12:91:66:c0:52:ae:70:79:98:1e:fe:
9f:e3:c8:dc:35:54:d2:bf:89:e8:68:e7:f4:47:83:3d:f2:30:
59:1d:f2:3c:de:b2:ac:73:50:f5:dd:89:dd:8b:8e:07:2a:f5:
95:fe:ee:f2:dc:37:06:33:bf:0c:e2:c7:3c:64:9f:0e:6c:cd:
ea:87:7f:1b:60:10:49:43:33:96:05:1b:c6:d0:ec:0a:b3:92:
6d:75:c8:44:ff:34:76:20:40:fa:b4:01:b5:14:8b:ee:28:74:
02:a3:6d:13:50:3e:26:4d:1d:76:b2:fb:f6:64:15:7e:31:f1:
e4:1f:e6:f8:4b:b1:75:d8:f9:1f:06:eb:d3:ec:9a:e8:40:9e:
76:8d:12:97:2a:e7:5c:a8:69:29:45:de:5f:3f:51:62:71:4c:
2d:b4:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:45:48 2024 by rpki-client on console-ams.rpki-client.org