Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa
File: 9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa (raw, json)
Hash identifier: Ck4IhA/LVj6yeY7ypf62CEmT7z98j+tSvQrn7SZ/UfQ=
Subject key identifier: F4:11:04:11:32:A8:D5:A3:77:4D:22:F9:A5:46:8A:76:1F:06:9D:A4
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 018CC2DAFFF2ED0937858DD524BE98C0CC60
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34182
IP address blocks: 91.238.144.0/24 maxlen: 24
2001:67c:938::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ff:f2:ed:09:37:85:8d:d5:24:be:98:c0:cc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f411041132a8d5a3774d22f9a5468a761f069da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:a2:8e:6b:47:19:72:0f:1e:6d:ac:f1:cb:
13:f5:c8:5f:64:9f:0e:87:8c:3a:54:c4:c7:d3:42:
e0:08:7e:65:c2:03:fe:4c:9d:49:aa:d8:96:33:02:
af:c8:5c:ad:09:a0:6f:87:a9:16:f9:65:f1:1c:25:
c8:f5:59:24:72:c4:17:19:12:74:95:97:fa:40:b9:
66:5a:f0:49:83:48:51:bf:c8:8b:f9:b2:67:52:dd:
cb:e4:f2:2b:29:c4:40:86:bf:1b:40:7f:14:c3:d2:
55:d7:dc:d4:bf:49:8b:92:4c:a8:53:dc:af:ce:dd:
11:56:61:16:a6:e6:c7:85:23:40:ae:3a:be:32:46:
32:72:80:d2:e8:ec:85:57:1f:8b:ee:a6:33:51:9f:
f5:7b:df:e8:8e:01:ce:33:26:44:ee:d9:6e:0e:6a:
cd:d7:26:26:bb:f8:ce:d2:9b:bb:a3:c7:9b:85:71:
f1:03:17:37:6b:08:4e:f4:cd:4c:46:62:58:63:29:
fa:8b:75:6d:8a:42:7c:5b:14:44:0a:97:35:90:eb:
7a:d1:7c:0a:f2:aa:8a:8d:d6:4d:96:31:89:ea:b2:
c5:ff:c3:c1:78:88:9d:e8:e4:80:74:eb:c1:e0:ee:
ff:31:cf:1f:76:c7:5e:10:8c:9d:81:e5:39:4c:1b:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:04:11:32:A8:D5:A3:77:4D:22:F9:A5:46:8A:76:1F:06:9D:A4
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.144.0/24
IPv6:
2001:67c:938::/48
Signature Algorithm: sha256WithRSAEncryption
24:eb:fc:f6:07:c2:64:85:6c:65:09:45:28:e2:32:3a:43:e3:
c0:76:9a:31:d6:60:47:b6:4a:8c:d0:0e:81:b3:b7:0e:a9:e9:
13:5d:97:78:c9:22:e5:f9:6c:1c:c7:94:9b:d6:80:38:86:0a:
3c:b7:7b:0a:36:76:40:87:41:bb:e7:4b:3b:b1:50:52:c4:3b:
3c:cb:32:bd:4d:e1:e6:43:58:bf:ea:fa:cd:22:1d:ac:49:ff:
9f:cc:ff:49:18:a8:7a:40:32:64:43:6f:81:5f:31:22:ec:fc:
69:b6:61:fb:d1:cc:87:08:86:00:09:e4:35:bf:05:47:51:97:
24:53:f6:57:4b:3c:21:5e:0b:47:66:b3:c9:77:14:2c:0a:1b:
95:e4:9e:ec:4a:40:f8:94:12:05:87:a2:9f:85:9d:2c:a4:55:
0f:b6:45:35:b5:97:40:8e:01:de:fc:7b:36:c0:13:2f:7c:13:
2e:c3:be:84:9f:30:56:55:91:14:a3:67:e3:cf:dc:d7:60:6b:
19:a0:4b:93:2d:e7:ff:04:b9:e8:d8:f4:15:74:47:1e:8e:7b:
8a:ef:df:70:af:6d:8b:04:84:14:f7:16:61:80:07:f7:f1:5c:
61:d1:37:fd:27:07:45:e0:83:00:75:8f:50:70:70:4a:2e:3c:
bb:73:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:20:46 2024 by rpki-client on console-ams.rpki-client.org