Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/g7Rn9d5RKX3mhsf2_1WzNuSZQKM.roa
File: g7Rn9d5RKX3mhsf2_1WzNuSZQKM.roa (raw, json)
Hash identifier: L7Ro8DGO2cPxdcom6uu2FNXzm4WnZgeLv8rVEkcNgck=
Subject key identifier: 83:B4:67:F5:DE:51:29:7D:E6:86:C7:F6:FF:55:B3:36:E4:99:40:A3
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 018CC80125C7800EBA61293E392B3C9701BA
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/g7Rn9d5RKX3mhsf2_1WzNuSZQKM.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212050
IP address blocks: 91.210.57.0/24 maxlen: 24
91.210.58.0/24 maxlen: 24
91.210.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:25:c7:80:0e:ba:61:29:3e:39:2b:3c:97:01:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83b467f5de51297de686c7f6ff55b336e49940a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:38:46:7d:64:0d:47:23:3a:77:d1:79:dc:
39:88:7f:2c:8b:cf:b9:de:22:74:40:38:ec:b1:a7:
c8:df:5a:fe:0c:63:11:f7:3f:f8:57:b8:c6:1d:cb:
27:d0:7c:c5:94:2e:1f:38:ef:a3:1b:c0:6d:cf:b6:
58:30:de:44:37:bf:d3:58:2d:aa:3b:f5:d4:c6:a2:
b8:89:32:32:8b:95:d5:b3:0f:81:e5:83:60:b4:3c:
54:04:c9:96:f1:2b:37:2d:a1:f4:e5:ec:12:29:de:
be:5c:6d:af:2c:7d:35:fc:20:94:f0:29:8d:84:6d:
c1:30:77:e6:ce:48:b5:17:2a:54:58:99:cf:ef:06:
ca:61:de:f8:bb:91:34:e1:c6:c2:91:43:db:96:3d:
80:5c:0c:2a:45:4d:3b:14:90:68:08:16:4d:61:ce:
1b:92:ea:4a:b9:40:dc:a6:15:0a:a6:ea:84:25:a0:
4b:cf:4b:f8:99:8c:81:f1:21:51:cc:f7:e2:56:bd:
17:cb:17:77:d2:3b:c4:ce:2f:f3:7b:2f:3b:ab:df:
18:b5:67:6d:32:f1:5d:38:97:36:29:df:5b:a4:6a:
63:0a:98:40:3e:25:2d:1d:44:2d:16:ca:96:a9:1e:
70:be:4b:ab:28:15:6a:48:e6:ec:3f:98:b8:0d:0d:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B4:67:F5:DE:51:29:7D:E6:86:C7:F6:FF:55:B3:36:E4:99:40:A3
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/g7Rn9d5RKX3mhsf2_1WzNuSZQKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.57.0-91.210.59.255
Signature Algorithm: sha256WithRSAEncryption
6f:8a:d0:18:e6:33:a9:30:94:53:d6:06:ff:41:d1:79:a9:31:
34:27:59:cc:7d:6e:0b:30:4d:2c:96:70:96:eb:87:40:3c:bb:
2d:7b:78:8c:7e:23:c8:3b:c9:d2:9b:ef:f0:d2:97:7e:97:b1:
67:11:f2:0e:bd:13:a4:85:bd:92:1c:f3:a2:1c:59:23:96:67:
11:4e:2b:53:0a:34:ea:17:c5:e1:43:70:a8:c3:a8:65:8d:f6:
64:a9:89:16:54:de:d5:fb:a4:e5:c7:9f:a3:6d:a8:8e:cd:df:
ad:12:30:21:68:16:13:c4:04:f4:69:25:3d:38:e7:b1:23:3d:
1b:a5:de:7e:e6:a7:32:51:12:18:02:e4:3e:86:33:b2:9b:1d:
9b:11:7f:94:49:40:bd:ef:7e:e7:6a:55:6c:b3:e1:49:4f:c1:
8f:83:97:af:ef:d7:06:39:f0:19:ff:60:ff:83:6a:1e:b3:bc:
a9:c1:d6:7a:fd:39:26:64:04:13:94:02:a8:da:8a:de:80:8e:
d9:40:57:dc:0f:dd:fb:58:aa:11:a3:c7:aa:e7:28:19:50:7c:
4f:84:b4:62:ed:5c:cf:6d:d2:fb:5f:41:d1:70:8a:6e:ff:6f:
87:fc:01:82:0a:fc:df:2d:cf:86:57:ef:a0:a7:be:c0:0f:81:
57:4a:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:17:26 2024 by rpki-client on console-ams.rpki-client.org