Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/HK74wfw15RtnXds93F16wUKOTzM.roa
File: HK74wfw15RtnXds93F16wUKOTzM.roa (raw, json)
Hash identifier: aznQe2o1MsiAGhP2Pu2U7TUrZNAdRboWkrZv70vnjZ8=
Subject key identifier: 1C:AE:F8:C1:FC:35:E5:1B:67:5D:DB:3D:DC:5D:7A:C1:42:8E:4F:33
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0191DB5249CAB5B1E5BB3DBF9C00B966509F
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/HK74wfw15RtnXds93F16wUKOTzM.roa
Signing time: Tue 10 Sep 2024 09:44:48 +0000
ROA not before: Tue 10 Sep 2024 09:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56582
IP address blocks: 91.102.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:52:49:ca:b5:b1:e5:bb:3d:bf:9c:00:b9:66:50:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Sep 10 09:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1caef8c1fc35e51b675ddb3ddc5d7ac1428e4f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:bd:3c:6d:40:1a:f2:75:71:77:71:4a:89:
40:e4:8c:3a:e0:c6:fc:bf:22:42:15:29:84:ff:b6:
22:34:4a:2a:e6:76:84:1c:f5:5b:0b:73:bd:2d:ef:
d3:1a:43:b9:38:15:6a:f6:8a:c8:ef:27:34:55:0c:
5e:27:6b:8c:5e:7d:c4:23:53:32:98:ce:a9:99:01:
29:44:ed:11:87:5c:ca:7f:f5:46:47:ed:08:57:27:
44:bd:13:e5:d5:f3:77:f6:cc:0a:ab:38:bf:a6:d0:
81:75:6b:cd:6b:68:c9:b7:d6:6f:75:30:b4:8d:02:
1c:85:0c:73:4e:42:cf:da:7b:26:f6:68:e9:e0:81:
e8:22:8b:22:87:71:85:fb:af:4a:76:d1:b4:00:49:
4b:c5:64:6e:84:15:29:77:d9:ee:9d:bc:46:7d:5a:
32:3a:5f:1b:67:dc:ff:29:6a:e0:c2:ec:61:2f:18:
05:96:01:56:f8:48:60:0b:e3:d9:bf:12:a3:b4:bb:
c4:8a:bb:ed:d8:52:a5:8c:fb:23:84:95:bd:66:5d:
be:80:1a:cf:b0:0b:2f:54:07:7a:94:b4:db:6e:6f:
57:8d:b9:cd:b5:fb:c0:1e:79:30:84:4d:5b:6c:84:
16:62:06:99:9c:49:5d:93:7a:a2:1f:85:33:b2:73:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AE:F8:C1:FC:35:E5:1B:67:5D:DB:3D:DC:5D:7A:C1:42:8E:4F:33
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/HK74wfw15RtnXds93F16wUKOTzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0b:89:a0:4f:e4:7d:a4:19:ef:2f:49:84:d7:8d:0d:0d:49:
53:26:7b:02:4f:e0:7b:54:0f:15:a1:8e:4e:92:70:53:6b:96:
2c:20:d9:79:5b:38:75:9b:89:aa:1b:f6:5b:2b:67:c7:ed:46:
4a:e1:6e:2b:a3:ba:a3:3c:aa:90:17:6d:06:60:37:82:4a:79:
9c:69:cc:01:6b:d2:43:31:8c:6d:3c:c7:d9:b0:c2:f1:1b:a3:
c6:7a:5e:70:51:87:1f:0d:5a:1c:3c:37:ea:fc:b4:df:39:6a:
9a:87:8e:e7:82:75:21:57:41:d2:45:41:d4:9e:59:b4:48:e0:
6e:f1:00:60:de:c3:64:de:91:fa:a6:d6:c6:12:d1:6f:cd:e1:
fc:03:46:d4:6e:78:3c:b7:a6:1e:b4:b7:09:64:9b:94:f0:c0:
42:ea:dd:ee:57:2d:9e:73:ce:d8:62:31:9d:06:97:00:e2:cb:
a7:af:26:d0:64:f1:a7:a9:ac:52:0b:a7:b4:3e:14:c6:46:61:
84:30:41:b2:7c:36:5d:6e:e0:cf:9f:4f:5b:98:5e:9d:d3:da:
01:67:c8:29:3f:d2:1f:15:d0:cf:e3:dd:52:a8:e5:33:e1:f6:
d7:a5:06:b5:f1:87:39:af:ba:81:49:86:50:9e:cf:4f:8e:a6:
ec:8b:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:49 2024 by rpki-client on console-ams.rpki-client.org