Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/ci5sS72EYPS90cTl0mxL93X_S7I.roa
File: ci5sS72EYPS90cTl0mxL93X_S7I.roa (raw, json)
Hash identifier: rrJo+si3BCDDZsupFOe8iMyL4pqfPVuTcaCyj5kwgyw=
Subject key identifier: 72:2E:6C:4B:BD:84:60:F4:BD:D1:C4:E5:D2:6C:4B:F7:75:FF:4B:B2
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 019178B34EE890E4574F0C245FE6CED2C96A
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/ci5sS72EYPS90cTl0mxL93X_S7I.roa
Signing time: Thu 22 Aug 2024 06:08:22 +0000
ROA not before: Thu 22 Aug 2024 06:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210474
IP address blocks: 91.199.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:b3:4e:e8:90:e4:57:4f:0c:24:5f:e6:ce:d2:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Aug 22 06:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=722e6c4bbd8460f4bdd1c4e5d26c4bf775ff4bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:db:bd:ba:a5:f3:8f:27:0f:ac:b6:57:77:
10:b1:39:1e:5a:ab:64:d7:23:de:39:42:9c:98:bc:
fb:a5:60:7c:39:cd:0a:cd:be:c7:36:6f:d0:e1:b6:
8a:b0:0c:45:66:30:ba:45:94:6a:03:8e:76:83:3b:
6b:15:9e:52:fb:36:5b:94:86:bb:56:fc:9d:b8:63:
c3:b5:bd:44:4b:ee:a5:f9:fe:dd:2f:25:e6:33:83:
b5:87:30:3b:f9:f6:fd:d6:6b:9e:f3:7f:70:a3:1e:
7c:1d:07:4f:9a:29:89:b5:cf:66:d7:73:e4:2e:60:
27:30:b0:0e:b1:94:06:41:13:22:59:3c:16:43:76:
c1:f8:38:51:16:eb:69:2b:99:50:87:41:f7:70:4b:
cb:e0:8e:cb:ca:eb:5c:fb:2d:8b:5d:be:65:fe:f5:
61:29:42:71:c7:f9:84:74:f3:fb:4c:f7:69:db:3d:
9e:19:9c:ca:f2:17:d2:11:c1:de:ca:4a:c5:9a:4c:
8e:8f:c1:7c:fc:c2:85:15:57:0c:cf:2d:8d:72:c7:
02:89:41:6d:5f:77:90:06:2a:19:b6:0e:fd:1e:c9:
16:0c:d3:b7:ea:20:ee:08:2d:59:cc:5e:52:68:b5:
86:7b:1c:b6:15:45:9b:fa:04:98:db:9e:9d:8b:46:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2E:6C:4B:BD:84:60:F4:BD:D1:C4:E5:D2:6C:4B:F7:75:FF:4B:B2
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/ci5sS72EYPS90cTl0mxL93X_S7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:70:e9:dd:6f:61:5e:b0:36:d9:0e:36:f7:47:f0:0e:8e:c6:
42:4f:a1:2d:22:77:d2:71:b9:80:e2:f4:c2:fd:1d:82:bf:09:
c7:96:c7:8e:a8:16:78:3e:07:79:79:0f:b9:4a:26:21:47:f4:
33:41:02:d7:4e:b1:6e:b4:c5:c0:43:de:88:18:cd:8e:7b:0f:
d4:7f:92:aa:3d:d7:91:13:28:68:53:5f:d3:f4:7d:79:94:1e:
60:ca:e4:93:55:b9:34:a4:15:67:ec:af:5a:b6:87:c1:64:31:
14:fe:ab:e4:2c:83:92:fe:2f:40:2f:e9:5d:8f:f0:16:3b:2d:
39:5e:de:49:41:7b:53:15:ea:b5:0a:ef:54:5f:b8:60:4d:5f:
b8:b4:5d:b9:e1:4a:36:6b:08:9c:06:65:9e:ab:45:ec:5b:54:
e2:e6:11:1c:8e:64:83:24:c6:4a:e9:be:40:f7:1f:7f:b4:e0:
a6:0c:cb:30:75:7f:d8:0a:e5:38:e7:07:1b:6a:12:dc:1a:e1:
a7:d2:ab:51:a8:62:88:8d:1e:06:86:2b:e5:43:1d:7c:bd:fb:
ac:cd:ca:87:16:3a:3c:a1:9c:2a:5e:0b:b0:28:74:7b:9b:f4:
2c:b0:c8:4c:43:3e:ed:5c:8f:f8:f0:87:61:d0:15:59:e1:b7:
67:b3:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:18 2024 by rpki-client on console-ams.rpki-client.org