Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/y9GXOwSMZhJBoGTvMe3LFIVQ-q4.roa
File: y9GXOwSMZhJBoGTvMe3LFIVQ-q4.roa (raw, json)
Hash identifier: /OJMEOZQFf4tQbvpxIy1nH5i0XxzsoYfsUou9VEY9PQ=
Subject key identifier: CB:D1:97:3B:04:8C:66:12:41:A0:64:EF:31:ED:CB:14:85:50:FA:AE
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018CCA29C9C7A407B1DF938F4A5B75327462
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/y9GXOwSMZhJBoGTvMe3LFIVQ-q4.roa
Signing time: Tue 02 Jan 2024 12:33:05 +0000
ROA not before: Tue 02 Jan 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c9:c7:a4:07:b1:df:93:8f:4a:5b:75:32:74:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd1973b048c661241a064ef31edcb148550faae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:97:85:74:ed:9d:4a:85:c3:54:02:ef:04:
58:3b:46:c5:dc:e0:7b:96:20:c2:2f:42:90:21:d5:
3f:93:05:69:9c:b8:6b:45:73:8b:f2:f4:da:37:71:
0e:e7:a7:77:23:73:17:59:b5:50:4f:76:ed:79:0f:
3c:44:32:c3:d2:21:70:34:6a:e6:5d:60:07:40:da:
88:30:a7:e8:74:55:6e:e6:a9:e6:0a:92:69:96:7d:
d0:54:62:6a:c7:8e:20:06:48:30:7c:52:9f:8b:09:
30:fb:36:7b:49:27:c3:43:c6:04:4c:28:de:32:49:
f1:d1:d6:b7:43:d8:26:95:b1:6e:a9:1f:e9:f3:76:
ad:7a:9a:aa:4a:19:29:40:73:56:5c:61:e0:7e:ca:
9a:c0:5f:ed:2c:95:30:ba:35:07:ce:04:fe:97:f5:
b3:0f:7e:8e:2f:76:2d:a8:ec:1d:14:6b:2d:9e:73:
d3:1c:72:7b:a6:47:8e:ba:bf:10:ef:41:f1:b0:7f:
30:0c:e1:c0:18:c7:49:b4:63:1a:8a:a8:53:12:14:
4e:a1:c4:2c:fe:2e:d7:a1:0e:cb:4c:76:79:75:01:
09:50:70:43:66:b0:f3:7d:2a:e4:f0:3b:c6:db:01:
e5:cb:e3:97:5f:b3:70:fb:c4:7e:3d:78:c8:ac:b5:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:97:3B:04:8C:66:12:41:A0:64:EF:31:ED:CB:14:85:50:FA:AE
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/y9GXOwSMZhJBoGTvMe3LFIVQ-q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
80:31:fe:95:9e:51:96:85:71:fc:9a:e1:71:d4:99:aa:6b:98:
7d:26:fd:05:60:7e:4f:d9:4b:8d:86:01:d6:5c:8f:b4:95:17:
c0:14:4a:9d:2d:93:25:a4:8c:28:f5:55:38:b7:0a:41:44:30:
df:30:26:63:52:48:12:d5:79:c3:d6:e2:84:ee:65:94:57:ce:
86:c5:1c:94:1a:53:4f:ec:df:71:78:3c:3b:34:d2:18:68:ce:
18:8d:6e:02:ba:15:cb:85:c7:98:f7:7c:eb:e1:92:40:f5:c4:
4e:3f:f4:70:0f:50:05:79:00:b4:e6:5a:ca:1b:73:d7:e5:7e:
09:b8:8f:78:aa:23:f6:ea:b2:30:42:68:dd:b3:95:24:3d:8c:
9e:18:53:d6:f1:cd:f8:b6:c9:a0:8d:83:34:78:36:b6:a6:fa:
39:bd:c3:77:8d:70:89:5b:cb:76:a3:6a:07:e3:bf:35:66:a4:
3c:ee:e0:fa:16:ef:65:b8:55:46:36:ae:67:70:f0:9c:8a:54:
f2:22:51:1a:73:71:89:44:3c:1e:a0:7c:31:0f:7c:19:63:85:
17:24:43:0e:ba:e3:98:f0:3e:2b:69:8f:6d:ed:ab:62:9c:38:
ac:8d:d6:86:29:71:ae:9d:1c:11:cd:4a:33:90:f4:38:69:ed:
f3:bc:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:24:14 2024 by rpki-client on console-ams.rpki-client.org