Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-I17E9KRO0nQ5q43d-alemlQWCo.roa
File: 1-I17E9KRO0nQ5q43d-alemlQWCo.roa (raw, json)
Hash identifier: TDRNXPuDMrI1zbWlx5DGnvpWfnXoiEkFjz4lPVXGkpU=
Subject key identifier: F8:8D:7B:13:D2:91:3B:49:D0:E6:AE:37:77:E6:A5:7A:69:50:58:2A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CCE01DF7BDFE5F8B36288C92E36E67E6C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-I17E9KRO0nQ5q43d-alemlQWCo.roa
Signing time: Wed 03 Jan 2024 06:27:58 +0000
ROA not before: Wed 03 Jan 2024 06:27:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 91.208.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:01:df:7b:df:e5:f8:b3:62:88:c9:2e:36:e6:7e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 3 06:27:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f88d7b13d2913b49d0e6ae3777e6a57a6950582a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:b4:2f:85:f4:02:00:d4:90:59:50:9d:cb:
8e:07:d6:39:01:5f:85:9d:ad:ad:6d:71:6f:c6:a8:
96:4f:82:e5:d4:1f:f5:7e:5d:25:27:d3:d7:2d:d4:
6a:96:f9:a8:0d:a6:4f:20:5f:b5:98:67:22:91:d1:
a1:d0:c6:94:cd:a3:bd:a4:a9:b4:96:e8:fb:11:17:
06:e4:4f:1e:c3:7b:8e:11:18:46:21:35:28:2a:42:
19:06:a4:c1:4e:9d:81:b3:02:28:7f:5d:90:35:72:
3f:a3:d0:f9:92:2c:c3:4b:d5:ca:5a:42:84:9b:a4:
0e:cd:ea:47:bd:bc:3e:98:6b:69:f6:e7:f5:8e:43:
39:54:c4:67:e4:92:5e:8c:ff:11:79:5b:d1:9d:c7:
2f:d7:92:7f:70:63:d3:67:11:1f:1a:b3:1e:3c:ae:
28:8d:e2:6b:82:0c:e8:f8:ea:07:54:09:e5:ed:54:
e9:11:23:5d:78:8b:52:45:11:15:0a:20:81:2b:b0:
4a:b1:83:fe:54:1d:41:65:64:36:9f:1c:6f:28:19:
29:f1:21:9f:b5:47:0f:41:58:64:10:32:df:1e:e8:
34:00:23:9d:46:fa:21:da:84:c1:66:4f:6e:2b:90:
eb:f1:a8:a8:4d:f4:e9:cd:39:d9:6a:57:b5:76:62:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:7B:13:D2:91:3B:49:D0:E6:AE:37:77:E6:A5:7A:69:50:58:2A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-I17E9KRO0nQ5q43d-alemlQWCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.61.0/24
Signature Algorithm: sha256WithRSAEncryption
88:37:27:25:40:24:5e:2d:44:0b:be:19:29:7a:ef:a6:95:50:
6c:6e:31:8c:85:a6:0a:70:d6:34:86:6d:1a:e4:6b:13:7a:be:
9b:15:a0:3b:e7:ee:83:82:e3:8b:2b:15:e0:d1:63:41:ca:96:
0a:cd:34:81:2c:07:20:53:cb:28:2c:6f:7d:40:34:96:07:ed:
72:ed:f6:cb:13:57:14:6f:33:14:52:38:eb:8d:2e:cb:02:82:
c2:1d:4e:e0:a9:17:1c:6a:4e:3f:87:87:32:7e:1c:11:b9:f7:
6f:b1:31:dc:9c:40:49:13:36:92:cf:ef:cb:5c:01:55:1c:70:
a8:14:04:8c:76:63:44:d7:06:f6:fc:34:55:5e:6e:44:82:50:
89:40:d3:40:b0:f8:f7:bf:f9:22:e3:59:9b:2b:c8:ae:32:d2:
b2:74:ba:bf:7f:c7:b3:70:e8:21:c9:ab:d4:6e:5b:b1:2e:2e:
b7:80:1a:cd:a1:20:58:10:f8:82:3b:e2:5b:e1:2a:4b:90:cb:
1a:df:bb:36:6c:9a:b8:94:68:2a:c2:9f:cd:26:b2:da:d0:7d:
d9:6a:a3:f6:da:b3:85:61:09:40:f5:54:42:a6:e3:bf:4c:53:
76:16:8d:da:42:e3:87:78:cc:5c:37:8d:da:68:aa:f9:f3:9b:
09:68:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:47:15 2024 by rpki-client on console-fra.rpki-client.org