Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/2Ph-3KFs_kb3ZqoIknA7V22B2BU.roa
File: 2Ph-3KFs_kb3ZqoIknA7V22B2BU.roa (raw, json)
Hash identifier: z8K5n9xo5nzCh24sPRNuaZ/K2NiHnMC9kxBNSycFbSk=
Subject key identifier: D8:F8:7E:DC:A1:6C:FE:46:F7:66:AA:08:92:70:3B:57:6D:81:D8:15
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 0193537D70C06B59601098274C07B37EF58C
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/2Ph-3KFs_kb3ZqoIknA7V22B2BU.roa
Signing time: Fri 22 Nov 2024 10:49:09 +0000
ROA not before: Fri 22 Nov 2024 10:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48869
IP address blocks: 91.199.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:7d:70:c0:6b:59:60:10:98:27:4c:07:b3:7e:f5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Nov 22 10:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f87edca16cfe46f766aa0892703b576d81d815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:2a:8c:68:ef:eb:73:8e:41:77:0e:77:ea:
58:c4:d9:49:54:c8:6c:9a:9f:fd:e4:09:18:eb:0d:
3e:ef:0e:51:d1:08:42:ba:3f:4a:9a:f8:4b:64:c7:
e7:2c:fa:35:a9:08:c7:f3:00:bd:a5:4f:77:50:23:
f7:a3:95:64:60:1c:da:0a:0a:65:c8:9f:6e:95:73:
12:3c:82:b9:52:c1:b5:2d:79:8d:ae:f3:d0:06:dc:
8b:c1:07:c1:87:6c:ec:b6:e5:4c:6c:55:92:44:e7:
2a:3f:d1:4b:fc:31:23:a2:64:b8:59:b3:d4:81:e7:
1f:80:e2:96:10:15:ad:cb:50:3c:3d:fc:45:9d:5a:
4e:d0:7c:df:b6:84:87:2d:08:d4:50:07:14:52:f3:
36:d5:4d:72:ce:c4:ff:8e:26:9e:87:95:da:5b:8c:
78:9b:32:c1:e8:bb:c7:0f:7d:6f:70:7b:da:a3:41:
6c:02:f5:6c:9e:4a:15:ae:d0:c1:cd:b8:03:22:07:
a7:e8:cb:e9:9f:29:39:a0:cc:29:40:cc:a4:50:c8:
90:ca:6b:9d:7e:4f:e2:ac:7f:a8:a9:45:79:d2:1c:
72:03:53:95:65:56:ac:7d:dd:97:7d:d5:8b:13:ec:
97:69:92:ff:52:2f:a3:09:d7:1c:0c:f8:bd:eb:ba:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:7E:DC:A1:6C:FE:46:F7:66:AA:08:92:70:3B:57:6D:81:D8:15
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/2Ph-3KFs_kb3ZqoIknA7V22B2BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.59.0/24
Signature Algorithm: sha256WithRSAEncryption
69:93:fe:05:ce:f8:ca:28:3c:12:f8:69:1b:7a:df:46:6d:bc:
51:25:f8:a1:53:c5:f6:d7:d6:9b:c2:69:23:2d:b9:32:13:80:
b0:ed:f5:3b:e7:88:a9:bd:8d:34:74:e0:9a:e0:9d:f9:e1:07:
96:b5:5a:e1:ec:b5:ef:bb:63:2a:0c:ec:dd:ab:cd:c0:f8:26:
84:b3:a2:07:8e:17:bb:1b:5a:34:c4:a5:93:b4:eb:1e:e1:f1:
86:41:c0:02:44:31:49:9e:8e:fb:d0:ed:90:2c:13:5a:9f:15:
33:94:3d:cc:d1:bc:3d:61:80:42:c9:92:e8:c8:00:31:b7:c8:
ca:1a:4b:cd:ca:1a:9a:7a:2d:60:f4:8d:96:05:8e:ab:d9:aa:
87:60:46:13:21:f2:b5:28:2b:c2:e2:32:44:3e:d9:d1:3a:64:
81:98:b3:7e:30:ed:28:13:d1:3b:aa:07:6c:03:9c:29:4d:4e:
62:15:76:4f:86:6d:b3:06:dc:ef:49:2f:ab:5a:25:0b:c2:29:
50:5b:1c:47:a7:74:9d:54:92:26:7c:93:67:b2:d3:7f:22:0f:
dd:ed:df:19:44:b7:ca:4f:f0:8a:78:25:14:3e:ae:48:0b:07:
d0:91:5c:ca:48:c6:2e:fe:a0:51:60:b1:4d:56:92:b9:66:de:
45:5f:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:53 2024 by rpki-client on console-fra.rpki-client.org