Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/yXN_qeGZGjPjL8VFCkPilcFdLOQ.roa
File: yXN_qeGZGjPjL8VFCkPilcFdLOQ.roa (raw, json)
Hash identifier: qsW3eKyT8AaKFFNiwnVQmY2emjL8cecBsJ/o3K9Lo6I=
Subject key identifier: C9:73:7F:A9:E1:99:1A:33:E3:2F:C5:45:0A:43:E2:95:C1:5D:2C:E4
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 018CC86F1B500B58D6A0178B7A19FA874949
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/yXN_qeGZGjPjL8VFCkPilcFdLOQ.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51450
IP address blocks: 91.217.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1b:50:0b:58:d6:a0:17:8b:7a:19:fa:87:49:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9737fa9e1991a33e32fc5450a43e295c15d2ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:80:f4:e1:15:67:d8:22:ae:6e:0b:4f:96:
90:08:58:59:54:7d:47:04:3a:05:f3:0a:14:36:4a:
43:f0:56:1e:52:94:00:3c:6e:72:18:d9:a3:76:0f:
bd:ea:9a:1c:21:a2:6a:54:5d:40:a1:35:4d:7c:f2:
25:5b:36:46:10:0b:a8:77:8e:6b:9c:e7:f1:e9:4b:
b0:46:28:ae:12:2a:72:de:80:20:5b:d7:96:87:f5:
b4:ec:6f:38:f2:c3:e7:42:03:fc:6b:80:7d:ea:aa:
6a:0d:46:07:5c:63:f6:94:1c:2e:32:08:ab:f5:a2:
f0:94:8b:e2:06:b0:68:da:41:bf:d6:da:f9:7b:7c:
bd:db:bb:7b:9f:9b:54:b4:a0:ab:db:fc:d2:45:86:
ac:1f:e0:48:c7:68:4f:c9:7c:0d:4a:93:5c:5e:6a:
6d:24:13:4f:73:7c:fd:61:c1:b0:71:c7:36:10:b8:
5d:d6:8f:5a:4b:c3:16:e1:d6:d9:34:9c:57:e3:cd:
45:7b:e0:d0:0c:f9:52:cf:f6:10:56:79:40:65:b2:
ef:55:dc:6a:05:cb:92:13:9b:44:e0:14:4b:94:b6:
23:28:a2:ef:0f:80:14:ac:83:1c:a2:c8:48:87:85:
55:1e:93:84:88:54:ba:ea:f3:00:5d:78:97:fd:13:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:7F:A9:E1:99:1A:33:E3:2F:C5:45:0A:43:E2:95:C1:5D:2C:E4
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/yXN_qeGZGjPjL8VFCkPilcFdLOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.170.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:7e:82:86:65:50:52:c8:fa:ec:e6:4a:1b:9b:45:7e:6b:63:
9b:7d:83:6c:77:1b:46:aa:5a:fe:86:30:74:bd:f5:94:0f:68:
5b:f4:2d:60:d9:be:87:1c:9d:fa:71:91:be:34:92:83:80:eb:
5c:50:fc:02:57:fe:87:de:d5:70:e0:ef:60:eb:a9:75:bc:5c:
32:cd:2c:19:a5:2d:5f:5d:71:f1:b1:fe:03:47:cd:14:84:00:
c3:6f:87:38:5b:61:85:80:58:d4:61:47:30:f1:53:72:cd:5b:
4f:33:7d:19:79:9b:72:f4:a2:c3:e2:2d:d1:20:39:7c:f4:7b:
5b:13:01:2e:51:f3:c0:5f:cf:14:c8:ac:fc:5b:4e:8a:98:9b:
b7:1a:46:18:90:d4:2b:fa:62:82:d6:86:0b:ec:e2:5a:ad:e9:
53:c9:17:fe:5f:1b:4f:0f:bc:b3:80:56:b6:a6:d7:16:75:0d:
7c:cd:25:06:4a:8f:cb:30:c5:ed:d9:40:69:ba:ec:f9:c9:e8:
5c:c3:56:d0:66:d5:1a:a1:c7:3d:06:55:07:92:71:86:65:ec:
6c:d0:e3:77:91:0b:ae:b2:c0:50:64:7f:1f:bc:46:67:14:d1:
b4:11:a9:4a:8a:eb:d5:e8:5e:9a:d2:94:de:b6:c7:ba:8e:18:
f3:b9:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:10 2024 by rpki-client on console-fra.rpki-client.org