Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/lTu0E7wdVSX1TTAIlCANyxorY1A.roa
File: lTu0E7wdVSX1TTAIlCANyxorY1A.roa (raw, json)
Hash identifier: mfCdDcKGoA5Qt5pGjD8ehCkP2fegbkWJZp4EXpBttmA=
Subject key identifier: 95:3B:B4:13:BC:1D:55:25:F5:4D:30:08:94:20:0D:CB:1A:2B:63:50
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 018CCA29E64DD92E8E7B25D8E7F855661DC1
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/lTu0E7wdVSX1TTAIlCANyxorY1A.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35407
IP address blocks: 91.213.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e6:4d:d9:2e:8e:7b:25:d8:e7:f8:55:66:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=953bb413bc1d5525f54d300894200dcb1a2b6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:d6:b0:45:2b:5e:f4:92:50:73:65:ac:05:
92:ee:76:87:39:05:27:7e:67:c5:57:d6:06:ae:9f:
e8:56:94:bb:e2:f9:03:01:54:1c:a8:bc:70:ea:a9:
26:30:9c:24:b3:dd:b2:55:07:b8:71:c7:1e:70:4b:
d1:fb:18:4e:dc:bf:ad:23:ab:5c:fb:4f:07:14:9b:
e0:10:26:a1:0f:51:4d:52:67:46:8f:ae:30:c1:6f:
75:72:ca:c4:ff:27:56:ae:c1:4c:ff:08:bf:a8:19:
b0:bb:ae:2e:31:63:77:94:5d:04:1d:45:92:5b:2c:
c5:43:67:ab:ae:8a:58:9f:37:aa:2e:0c:81:e4:60:
30:17:c7:76:17:76:95:4b:d6:5d:70:84:ca:d6:89:
d2:32:28:c9:6b:9a:e0:73:8e:bf:ad:da:2b:18:dd:
33:13:8d:40:90:65:ad:fb:f4:7d:47:c4:e8:5c:1e:
51:79:4c:23:99:5b:c2:83:31:7f:ef:e0:48:60:cd:
d4:9b:0e:0c:a3:86:30:87:5d:5a:aa:25:7a:24:7e:
34:77:58:d7:b9:a7:d8:c4:bc:21:de:7a:e2:73:a4:
1c:18:95:d6:2e:bb:0d:57:bb:a9:ee:63:77:ec:8c:
fb:25:fc:17:54:a4:8d:57:fe:82:28:6b:ff:51:cb:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:B4:13:BC:1D:55:25:F5:4D:30:08:94:20:0D:CB:1A:2B:63:50
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/lTu0E7wdVSX1TTAIlCANyxorY1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ee:1c:76:4c:93:24:5a:49:3c:89:78:57:9e:f2:4a:69:7a:
2c:fb:90:1e:f3:a1:2d:41:f1:a1:af:fc:3d:df:75:35:ca:54:
53:7c:81:61:65:8d:70:68:05:c3:cb:27:5e:dd:39:57:f1:39:
c0:48:3b:e9:de:c4:d5:9e:bf:1d:fe:3e:1d:dc:4f:4f:f8:69:
1a:5c:31:79:5c:d4:f4:58:28:9a:3f:9e:32:12:f8:80:6b:76:
c3:1a:80:e7:93:74:15:46:7c:ac:2f:89:05:21:dc:bc:35:3d:
30:c8:03:9d:51:82:60:4d:cf:32:ae:f7:d1:b4:c5:a6:dd:7f:
8e:2e:7e:ae:92:b1:69:1a:8d:07:c7:1b:ad:f2:03:bb:32:dd:
e1:26:ff:b8:1a:89:78:75:0d:7f:94:ad:15:b6:98:42:b7:52:
f8:07:54:37:07:2d:ca:b4:2b:fa:59:f5:f4:af:53:29:85:ca:
15:70:b4:9b:50:55:e6:2b:69:cc:21:03:21:0f:28:56:48:9e:
f2:6d:b6:58:ff:72:53:11:6a:c3:cc:8c:7a:22:e7:61:fb:ad:
3d:f9:3e:44:b9:dd:8b:8a:ab:cf:cb:fc:1f:08:e3:14:f0:70:
15:dc:11:57:2e:bc:03:66:2f:e2:f0:f4:63:35:17:cb:11:c8:
ec:b6:f0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:31 2024 by rpki-client on console-ams.rpki-client.org