Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/1Ft6YdKR4fQLxknoKwa4VwdIS4Y.roa
File: 1Ft6YdKR4fQLxknoKwa4VwdIS4Y.roa (raw, json)
Hash identifier: 3PbI0uIiFF811/VTx0SjTCkj5UkTWPIUs7sCwNV6ZYg=
Subject key identifier: D4:5B:7A:61:D2:91:E1:F4:0B:C6:49:E8:2B:06:B8:57:07:48:4B:86
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 019065BA2DD9E2FD8676D26633DAC1E3F2A3
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/1Ft6YdKR4fQLxknoKwa4VwdIS4Y.roa
Signing time: Sat 29 Jun 2024 20:40:18 +0000
ROA not before: Sat 29 Jun 2024 20:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215052
IP address blocks: 91.210.57.0/24 maxlen: 24
91.210.58.0/24 maxlen: 24
91.210.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:65:ba:2d:d9:e2:fd:86:76:d2:66:33:da:c1:e3:f2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jun 29 20:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d45b7a61d291e1f40bc649e82b06b85707484b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:e9:8e:c9:9c:ca:7e:83:ed:78:e5:91:80:
59:9c:de:18:d1:72:8c:1e:37:dc:4a:4c:59:b7:e1:
dc:43:ca:ec:ab:c6:c6:ab:af:46:0f:15:96:21:b4:
4d:2a:9c:45:68:9b:d3:3f:84:f8:33:c0:05:3e:e1:
4d:20:98:7f:92:d3:38:8d:a3:04:b9:3b:fe:e6:3b:
5b:54:b7:e1:f9:f1:1b:95:8b:a1:d9:55:03:8a:0e:
1e:23:79:4b:b1:5d:18:a8:a3:cd:60:47:c2:bc:dc:
42:a7:5b:c9:6b:1b:8b:ed:ae:5a:d1:96:29:6b:c3:
83:cf:1c:cb:e2:cd:05:70:b6:e2:3e:d3:81:9c:63:
1f:21:79:e6:ca:8b:f0:5e:d6:77:2c:f9:57:4a:e9:
f5:42:d0:4b:14:0e:8a:f5:87:7a:45:1e:ed:61:af:
98:2d:f7:86:0b:ee:8e:91:dc:ad:37:43:fb:a2:52:
ba:38:e4:1d:61:7b:10:c1:a1:e3:28:bc:c2:63:23:
4f:28:72:77:06:c3:e3:91:32:15:9c:36:2d:e7:8a:
63:68:a6:ec:20:a8:79:2e:39:a0:91:0b:35:42:47:
44:d9:7e:2e:d9:97:d9:b1:ed:d3:cd:e9:79:62:16:
35:74:68:cc:6e:4c:92:45:a8:66:f6:a8:23:2b:f8:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5B:7A:61:D2:91:E1:F4:0B:C6:49:E8:2B:06:B8:57:07:48:4B:86
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/1Ft6YdKR4fQLxknoKwa4VwdIS4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.57.0-91.210.59.255
Signature Algorithm: sha256WithRSAEncryption
b7:3d:8f:45:f3:14:b4:53:eb:43:96:cf:3d:9d:99:bf:44:b3:
05:2a:68:f3:14:f9:9d:3c:6a:78:af:a0:a4:83:7b:1b:1d:59:
5f:02:81:04:d3:a0:20:bf:02:22:cc:2a:40:d1:cf:de:7d:39:
78:ab:be:32:5f:cf:ae:17:39:53:c4:95:23:89:d7:2a:c9:81:
a6:48:e3:d4:51:82:2c:60:5c:97:7c:04:fc:25:35:ef:a8:3b:
7f:3f:86:0e:3e:e9:35:40:2d:7d:35:97:e6:b9:97:0f:19:2e:
49:83:27:d4:37:fb:33:a4:dd:e0:0d:65:02:1f:74:a3:01:2c:
44:0d:bb:cf:67:c2:c0:b1:20:33:14:c8:2a:23:9a:9a:0b:62:
99:12:4c:66:4c:15:7b:42:8c:17:1b:7e:66:ca:db:f8:59:fe:
e4:67:fa:76:81:94:db:59:f5:e1:68:54:50:e7:83:7b:71:02:
77:bb:27:8f:09:fe:b4:1e:72:16:7d:c8:8a:76:78:df:3a:f2:
13:89:e5:a1:8c:5e:fd:ee:cb:44:bf:17:cf:4c:f1:ee:8a:6a:
01:dd:ed:37:11:7a:7c:a3:db:d4:17:0a:6a:38:e4:08:95:b3:
a8:3f:32:83:72:da:57:e3:32:5f:df:26:25:a6:13:93:ff:09:
89:a6:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:32 2024 by rpki-client on console-ams.rpki-client.org