Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/E0RHeNpw66nYgt7sepNRImGItxc.roa
File: E0RHeNpw66nYgt7sepNRImGItxc.roa (raw, json)
Hash identifier: P1SvbJfLGaGKKWgvxwTHVym9lO6QS5TjgKhwnE6gIZU=
Subject key identifier: 13:44:47:78:DA:70:EB:A9:D8:82:DE:EC:7A:93:51:22:61:88:B7:17
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FE6B77AE3ECF06CC25F19AC0AA01F
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/E0RHeNpw66nYgt7sepNRImGItxc.roa
Signing time: Tue 02 Jan 2024 04:30:25 +0000
ROA not before: Tue 02 Jan 2024 04:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1885
IP address blocks: 91.93.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e6:b7:7a:e3:ec:f0:6c:c2:5f:19:ac:0a:a0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13444778da70eba9d882deec7a9351226188b717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:80:a8:b4:1e:c1:3f:fe:11:70:90:11:bc:
c4:40:e4:9b:53:e1:7f:a2:0e:95:5d:ae:70:0f:d5:
58:f8:60:78:1a:88:8b:50:12:a9:08:32:a9:e3:be:
00:0e:78:8b:e0:6a:0b:2f:ef:39:02:6a:e2:2c:59:
32:25:2c:c5:24:94:fc:4b:c5:c9:e1:ee:58:e7:cc:
3e:0d:e4:9c:74:76:d3:d5:7b:41:0c:88:27:40:07:
6e:5e:b6:3e:8c:76:32:dc:9e:ad:da:3a:6f:0f:f7:
58:5b:97:3a:0f:ec:85:4e:4f:f8:1e:be:0c:51:e2:
52:5d:70:e5:de:07:01:a9:ac:7b:5d:44:a0:5e:60:
ab:b6:75:b6:7f:1d:c0:f9:af:a4:0e:e8:ba:52:bc:
0b:90:8a:64:02:2e:e0:2e:b7:63:0d:97:42:8f:88:
1b:db:75:ab:f2:d0:37:2f:e5:90:82:c2:1b:f0:0a:
54:dc:16:b7:c9:61:c6:59:e7:d0:d4:cb:26:e0:06:
bd:6e:b9:4e:33:a1:7f:ea:65:f7:fb:ee:5d:6f:20:
cc:f1:43:95:b6:61:39:bb:09:60:c1:77:f6:37:fb:
05:61:7d:38:8c:bf:c4:52:57:ac:f4:5c:bd:c0:13:
d3:63:d4:fe:52:80:6e:90:c5:26:2a:4f:ad:c9:ef:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:47:78:DA:70:EB:A9:D8:82:DE:EC:7A:93:51:22:61:88:B7:17
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/E0RHeNpw66nYgt7sepNRImGItxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.185.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0e:cc:93:fb:db:3a:fd:ea:62:96:a4:ed:0e:eb:69:30:37:
29:00:ec:40:9a:2f:d3:79:26:24:27:49:29:2e:09:5e:f3:a2:
22:73:4f:f0:bf:41:c4:e0:ac:85:e2:6c:9e:e9:41:65:6c:db:
ec:c0:c6:55:85:63:f5:d5:1f:df:16:aa:39:09:02:64:1a:d3:
ca:55:47:ce:b9:36:ff:5f:02:ff:59:b5:8b:b3:dc:f0:5a:8b:
b8:f6:1d:f8:d1:f6:91:d5:6a:80:a4:a1:20:43:52:eb:f2:69:
95:8c:28:c9:da:bd:66:fb:0a:be:5d:fe:f9:7c:6e:a1:da:9a:
52:4e:24:07:5a:bd:b7:5a:60:d2:53:49:4a:ae:ef:9d:4c:e4:
a3:12:bd:1a:f6:dc:df:33:8f:77:32:d4:44:21:5d:14:b4:de:
f3:8d:1e:de:7e:cc:a9:ae:3b:e6:56:7f:2d:72:34:40:2a:bf:
3b:1c:e8:ae:64:24:32:21:4c:94:bd:7a:8f:91:f8:9b:7b:f4:
fd:ae:99:4c:c3:93:ca:6a:9e:ea:f3:e7:7b:5b:36:ff:c6:ce:
02:4e:05:01:26:73:23:4d:5c:26:c2:fa:6e:a4:f8:e8:03:1c:
f2:88:ff:26:1d:95:07:7f:cf:c9:00:4c:20:0a:e1:da:a3:fa:
0e:aa:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:03 2024 by rpki-client on console-ams.rpki-client.org