Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/S6mtDnyrxoAZGsxMYKq0Y0L0_lA.roa
File: S6mtDnyrxoAZGsxMYKq0Y0L0_lA.roa (raw, json)
Hash identifier: 46stFEvczjS3/rBsl5l4oIKateOnO7f+8XzHhhq1geg=
Subject key identifier: 4B:A9:AD:0E:7C:AB:C6:80:19:1A:CC:4C:60:AA:B4:63:42:F4:FE:50
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0192A56A41EF0549CAD2167672EAF4AFE352
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/S6mtDnyrxoAZGsxMYKq0Y0L0_lA.roa
Signing time: Sat 19 Oct 2024 15:34:17 +0000
ROA not before: Sat 19 Oct 2024 15:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a5:6a:41:ef:05:49:ca:d2:16:76:72:ea:f4:af:e3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 19 15:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ba9ad0e7cabc680191acc4c60aab46342f4fe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:91:59:b7:bd:cc:6a:46:a7:68:35:c7:57:
d7:ba:8c:ef:f2:e8:f2:3d:6d:fa:0a:82:3c:7d:67:
42:fa:38:b1:dd:52:22:34:51:fb:a3:48:83:0c:18:
eb:5a:75:91:02:20:4a:a7:c2:b4:cf:d8:03:8a:b7:
c6:e2:94:40:47:d7:78:4f:6a:48:a1:62:11:15:c0:
3e:90:97:e2:a0:d5:d2:22:c1:c0:4e:54:bd:b5:d2:
5c:f2:0c:49:aa:be:7d:bb:10:17:80:a4:78:cd:5c:
8e:e8:b9:ae:08:1d:bb:14:61:44:5e:f6:00:51:0a:
53:d0:0c:03:62:4f:3e:9f:17:7d:aa:6b:e0:32:83:
ab:1a:05:e4:56:5b:69:45:ee:f3:82:cb:1b:6a:45:
ce:85:26:5e:5e:94:1c:f1:e7:66:36:18:23:c4:ce:
ea:75:1a:11:78:37:f6:c5:79:65:7a:56:1c:39:16:
6b:eb:9a:d8:04:83:53:a2:dc:a4:af:a7:78:b9:93:
07:76:51:50:f8:80:91:19:26:c7:1a:b4:41:75:14:
36:8e:86:e7:69:6f:c7:cc:38:6b:6b:25:5f:8d:a6:
0a:68:2a:3c:60:dc:11:03:bd:b4:18:2e:24:8a:3e:
2a:9e:44:a4:76:8b:b2:07:c9:03:35:04:f3:95:5d:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:AD:0E:7C:AB:C6:80:19:1A:CC:4C:60:AA:B4:63:42:F4:FE:50
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/S6mtDnyrxoAZGsxMYKq0Y0L0_lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7a:10:15:05:8d:16:a2:ec:76:b1:c4:98:b6:30:5f:a4:4d:
61:66:24:40:d0:63:da:75:be:9e:d7:eb:88:d2:33:f1:75:c4:
a8:58:21:47:9a:48:35:67:0b:01:5d:1e:15:b8:ca:80:2d:a7:
3a:b9:ee:18:0b:a0:5a:2e:95:03:02:6f:cd:9c:d7:16:c8:23:
97:8a:ea:6e:99:3b:35:19:e0:b5:cb:68:d4:74:14:12:43:47:
78:d6:d0:fd:da:8e:b9:c5:79:cb:ae:e6:0f:71:36:d6:34:13:
6d:1c:7f:fc:52:03:7d:aa:b3:1d:bc:c4:67:be:ef:18:4d:27:
ef:47:10:27:14:cd:2e:de:b2:27:ed:cc:b6:3b:8e:92:e8:8c:
cd:72:47:ad:09:c7:19:cc:f7:ab:54:b0:6c:88:3d:ba:76:cd:
df:53:cc:c6:a1:d2:57:3d:8e:fb:23:6f:db:18:09:09:56:ca:
83:84:07:98:17:35:73:85:53:22:d6:89:ab:f1:40:47:6f:4b:
36:26:f5:21:de:c4:49:6f:f1:b3:56:68:2b:9c:9b:c6:3f:64:
c8:a1:04:e3:cb:eb:a1:75:08:ee:e6:f9:d8:c9:89:fb:d5:7d:
71:b6:c9:1a:b2:05:5d:2b:25:38:61:d0:5c:f2:10:e3:1f:47:
1e:70:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:35:31 2024 by rpki-client on console-ams.rpki-client.org