Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/aoIUzEs6QhPKBDGrylsB49coCpQ.roa
File: aoIUzEs6QhPKBDGrylsB49coCpQ.roa (raw, json)
Hash identifier: njsc2yMTQjcEgBeAXcbusvFBe4XeVh5KYG+KfigxNV4=
Subject key identifier: 6A:82:14:CC:4B:3A:42:13:CA:04:31:AB:CA:5B:01:E3:D7:28:0A:94
Certificate issuer: /CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Certificate serial: 018CC348A9F91E6ADD7831BC8437F2166766
Authority key identifier: 8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/aoIUzEs6QhPKBDGrylsB49coCpQ.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48329
IP address blocks: 91.194.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a9:f9:1e:6a:dd:78:31:bc:84:37:f2:16:67:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a8214cc4b3a4213ca0431abca5b01e3d7280a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:e0:34:5e:9d:e4:9b:89:68:08:84:90:bf:
ef:ec:1f:de:7d:91:8a:fd:75:f5:93:70:2b:0a:10:
df:80:17:06:d8:02:c2:17:43:dc:dc:84:a9:a3:cf:
9d:5a:03:4e:56:5b:99:d6:59:a0:b2:e4:ab:69:1c:
71:54:1e:4b:c3:e0:47:14:d0:be:73:eb:3e:c1:a1:
9d:ab:eb:58:2c:02:4a:8d:7a:fa:9b:7f:04:4a:ab:
88:43:59:f8:ee:05:12:30:dd:ce:8a:9b:a7:15:d1:
0e:0d:1f:bd:31:d6:fa:c4:c0:e0:0f:e8:93:e6:7e:
63:23:bc:3c:c4:08:05:15:73:b7:7a:58:92:25:6d:
d8:f4:79:e8:8d:65:03:04:d5:63:d5:c9:e5:2e:4f:
b3:03:da:13:ae:e6:2d:1e:2b:da:0d:91:19:f2:e3:
5c:28:c1:44:1a:7f:16:3a:8c:a1:63:6d:e7:79:0a:
50:29:8f:e4:d0:bc:2b:09:28:1e:ea:37:1e:51:ab:
77:8e:ff:86:f1:6d:b4:71:46:6c:b3:2f:67:9c:3a:
5d:89:10:ac:f1:66:ec:78:66:a4:3a:59:e6:ca:12:
ff:c8:a5:6e:f7:7b:ef:dc:42:d6:53:87:83:74:7d:
43:df:71:ef:fe:6e:e1:59:c6:23:a5:f2:11:ad:2c:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:14:CC:4B:3A:42:13:CA:04:31:AB:CA:5B:01:E3:D7:28:0A:94
X509v3 Authority Key Identifier:
keyid:8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/aoIUzEs6QhPKBDGrylsB49coCpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:75:ac:45:a9:b2:65:26:9b:92:ed:3e:5d:55:03:80:7a:0c:
07:0d:b9:fb:b5:27:6c:03:ed:14:8b:71:d1:f7:f0:88:53:fe:
6d:65:1a:f5:75:6e:d7:44:67:ca:f7:b3:e8:ce:cb:fa:9a:fe:
87:79:9a:7e:69:a2:11:77:4a:e1:90:01:c8:43:fe:db:d7:e3:
10:05:7f:a2:c3:d3:7c:a4:6f:66:9b:d1:8c:79:a0:7c:3a:f9:
c8:48:e2:d9:6a:90:e6:ba:b4:df:24:ad:5f:37:b8:c3:1a:ba:
8a:53:46:57:c4:e0:c2:e1:fb:2a:90:10:0f:b3:8c:43:82:41:
f1:65:e4:4b:21:21:47:6d:76:57:9e:3b:cb:59:77:d0:1b:e1:
42:89:11:7d:39:4a:43:91:24:e6:b0:ce:4a:8c:e3:22:90:24:
ae:d4:ba:ee:f8:b3:57:a7:18:a6:a8:6a:c8:70:79:41:96:98:
59:78:d7:81:22:dc:ea:e9:ef:f5:e4:c8:ad:e9:e6:84:96:64:
98:59:ec:1b:cf:fb:2e:cd:42:dc:0e:4c:1f:1a:18:52:22:fd:
9b:0f:30:38:f8:54:22:d6:a3:19:99:cc:41:f8:36:ef:18:6b:
73:e4:0d:95:6b:c0:56:6c:a3:a2:df:db:69:c1:f2:7d:d3:06:
7d:98:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:41:35 2024 by rpki-client on console-fra.rpki-client.org