Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/wPGNhfTbGHENzwD_fWCCUur1Jss.roa
File: wPGNhfTbGHENzwD_fWCCUur1Jss.roa (raw, json)
Hash identifier: b9jYyZ9zxhtk79Aw8x1IWMnz1sKg7D/Li3I3HLoSXFg=
Subject key identifier: C0:F1:8D:85:F4:DB:18:71:0D:CF:00:FF:7D:60:82:52:EA:F5:26:CB
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019271C24D7355099F60E8ECF18B98967B07
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/wPGNhfTbGHENzwD_fWCCUur1Jss.roa
Signing time: Wed 09 Oct 2024 14:50:12 +0000
ROA not before: Wed 09 Oct 2024 14:50:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.102.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:c2:4d:73:55:09:9f:60:e8:ec:f1:8b:98:96:7b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 9 14:50:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0f18d85f4db18710dcf00ff7d608252eaf526cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:ed:ee:e9:b3:8d:03:d1:8b:d0:3c:03:af:
7a:73:af:56:80:4a:d1:b9:47:fc:97:5e:8e:6f:84:
d5:f2:68:ff:72:b4:c9:08:1d:f1:f6:76:2d:16:25:
5f:d0:77:22:cc:f2:cc:47:91:49:3b:39:f2:a1:55:
64:3c:05:9f:e0:e9:ed:e4:25:96:70:cb:ee:7a:1e:
cd:17:c6:6e:ca:35:59:3c:24:68:a7:0d:07:87:d6:
e5:69:75:4a:ff:e7:f2:e0:05:db:c5:2b:a6:92:da:
f2:17:52:9a:18:13:43:55:09:be:ff:ff:66:08:47:
5e:23:24:43:59:33:40:69:d0:e9:de:fc:a3:c5:b2:
78:ba:43:7e:bf:39:6a:9f:e4:99:82:d8:32:5b:8f:
06:e5:b4:98:9d:0f:18:b8:8d:12:43:08:77:a3:5a:
e7:ce:7d:ae:0c:a0:b7:62:cc:93:fe:94:3d:f3:67:
42:93:ee:f0:18:80:99:d9:bf:5f:65:92:3b:c4:ce:
2a:9a:f9:ac:28:6b:2a:f9:7a:0b:bd:c5:ff:e1:90:
27:34:7a:00:d8:16:45:67:11:1f:56:03:ce:50:fb:
0d:55:e3:7c:9f:a8:97:ad:29:76:c3:c4:51:ed:ee:
52:cf:f8:36:d7:4a:aa:10:50:c7:97:8d:57:5d:be:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:8D:85:F4:DB:18:71:0D:CF:00:FF:7D:60:82:52:EA:F5:26:CB
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/wPGNhfTbGHENzwD_fWCCUur1Jss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.165.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7b:47:56:05:8f:c9:68:19:e9:60:8f:59:64:c7:e7:3d:29:
24:46:51:72:97:48:9a:96:e5:47:17:f5:28:a7:a2:45:4c:24:
f9:59:36:62:ba:9b:04:5d:98:32:f5:2e:71:68:08:5f:60:99:
a8:66:a7:f0:dc:44:d9:d0:01:84:99:81:15:ee:c0:0f:d7:3b:
be:20:5a:33:22:52:3d:75:14:b8:cc:ad:83:4b:74:ca:ac:1d:
00:5e:30:4f:ca:d9:fc:30:d6:4c:8f:73:ef:bf:d4:e2:d1:55:
0c:6c:e3:b1:e0:70:53:dd:d5:f5:2b:a9:2b:73:e1:3c:3e:7c:
5f:9e:7a:8a:fe:46:ed:df:08:aa:63:20:b7:0b:68:ca:4b:fa:
ff:ed:22:2e:ff:8d:10:36:15:61:44:64:f6:3d:93:d3:39:bd:
29:08:6e:aa:0b:7f:b4:5f:bd:28:c4:12:34:80:6d:31:3b:20:
56:8b:35:ef:86:ce:04:16:6e:8c:34:83:cc:5d:37:0c:e9:86:
6e:a2:17:d8:ce:fd:ca:38:b9:27:47:70:fb:61:0e:53:a2:4e:
f7:53:74:a8:dd:97:bd:a2:40:86:de:15:d4:81:b4:1a:69:e6:
71:fd:0e:7d:69:cc:97:8b:a1:4a:10:ca:53:54:33:3c:85:2a:
3d:ea:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:41:43 2024 by rpki-client on console-fra.rpki-client.org