Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/nvV1iG0Jq9Zj22fG7iq-alf1p1g.roa
File: nvV1iG0Jq9Zj22fG7iq-alf1p1g.roa (raw, json)
Hash identifier: s1M2BPuPMs6qENwCIWVhAMiKmv6I76F/Im0+c5jr/ec=
Subject key identifier: 9E:F5:75:88:6D:09:AB:D6:63:DB:67:C6:EE:2A:BE:6A:57:F5:A7:58
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B68A1935E6A67AA6336085860A8492
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/nvV1iG0Jq9Zj22fG7iq-alf1p1g.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199258
IP address blocks: 91.196.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8a:19:35:e6:a6:7a:a6:33:60:85:86:0a:84:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ef575886d09abd663db67c6ee2abe6a57f5a758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:44:d0:38:2e:b9:40:d5:7d:22:70:de:6f:
c9:fd:9e:a9:10:6f:0d:0e:69:79:e9:ec:a8:0a:f3:
3c:23:ad:2c:3c:db:00:ec:1d:31:bc:7e:3c:ff:78:
b9:52:58:bf:83:a0:f9:b8:53:87:8b:fc:7d:5e:1b:
49:55:22:1b:a3:1e:cf:89:d5:7d:d7:b3:8c:77:10:
5e:0b:86:0b:64:38:e0:52:96:bc:fa:cd:7a:fc:fe:
46:55:22:a3:ab:fc:92:9d:a2:c6:92:86:ec:72:7b:
7b:6b:00:51:2e:c8:10:65:52:d3:df:e8:dd:eb:26:
4e:d6:a7:8e:c5:6a:79:52:df:ed:2c:98:9f:a2:d7:
96:24:91:51:f6:10:a7:53:a5:7a:c1:45:00:bc:77:
de:80:5f:0d:52:ed:79:d4:1a:52:1d:ac:5c:16:cf:
17:9e:38:7d:a5:cf:05:24:e2:88:21:1d:a1:67:3b:
32:e3:37:b0:6d:bb:9e:6f:f3:d7:83:74:de:9c:f9:
85:71:a8:7c:18:46:cb:d9:71:5d:11:64:fa:27:28:
9b:28:48:c3:f2:b8:65:4c:99:10:c5:2a:9e:2a:62:
68:e8:70:53:ae:bd:8a:30:0f:71:c0:87:da:81:51:
fa:65:25:b3:9e:27:ab:87:13:9c:6c:5f:89:e8:54:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F5:75:88:6D:09:AB:D6:63:DB:67:C6:EE:2A:BE:6A:57:F5:A7:58
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/nvV1iG0Jq9Zj22fG7iq-alf1p1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2c:d7:55:74:0c:b4:9a:aa:0d:6e:48:25:f4:62:6d:85:60:
7a:73:ca:82:a4:a3:f8:93:03:24:3a:7e:dd:a4:28:a3:02:88:
33:ee:50:eb:27:d8:5d:b4:9d:56:07:8b:e8:9d:e3:80:3f:25:
ab:86:04:f8:a2:ee:7f:7f:13:ff:bd:da:86:88:a0:56:02:4c:
93:07:da:cd:9b:d9:06:1e:01:23:8d:1e:ca:3e:87:1c:9d:a6:
2c:d1:c2:a4:30:af:65:30:be:af:1d:e0:88:af:46:4e:4c:3b:
21:38:f2:ed:e6:2e:6b:ff:72:73:16:84:7a:c2:43:b8:1c:de:
0f:a3:0b:5d:3e:62:29:12:dc:c5:f2:a0:57:79:ca:bb:40:4e:
dd:d0:0e:8b:ce:28:1e:10:52:3d:b3:ae:99:52:ee:6d:71:94:
cf:71:4d:40:89:21:a7:31:c4:9d:0a:5d:fe:97:d6:c4:bc:cd:
71:30:1c:94:97:18:fc:ef:1f:ee:6f:90:3c:bd:ed:80:ac:4f:
3d:13:59:0d:18:4e:ee:df:c2:33:2f:2e:cf:8e:d8:29:d3:5d:
85:53:7d:2a:fc:e6:9f:4d:37:47:51:90:c4:b7:8e:e6:94:07:
64:75:3e:7f:4f:a6:9c:46:71:89:b3:c4:9b:5d:51:c9:3d:7e:
c5:89:3e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:08:30 2024 by rpki-client on console-ams.rpki-client.org