Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/k7OLCLcGWuJVRPjnSOQ6FqAtJvw.roa
File: k7OLCLcGWuJVRPjnSOQ6FqAtJvw.roa (raw, json)
Hash identifier: JcPegvpqcZVXptVrRb/xo3V+E78ZSovEhfR1dssN010=
Subject key identifier: 93:B3:8B:08:B7:06:5A:E2:55:44:F8:E7:48:E4:3A:16:A0:2D:26:FC
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018CC50033CE755D1DF5DC925F0EB1262BDF
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/k7OLCLcGWuJVRPjnSOQ6FqAtJvw.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137443
IP address blocks: 91.217.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:33:ce:75:5d:1d:f5:dc:92:5f:0e:b1:26:2b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93b38b08b7065ae25544f8e748e43a16a02d26fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:1e:42:ea:62:de:68:07:be:41:c4:59:50:
ae:20:95:51:4f:4f:2e:dd:99:77:7d:97:27:d1:2e:
ca:f3:d0:99:ec:66:47:b4:0e:75:0d:fa:da:bd:67:
17:6d:b7:94:5d:69:d7:bd:4f:93:ee:52:d9:34:20:
3c:21:b6:87:da:30:9f:1d:6e:1e:fb:3a:49:7b:05:
af:40:1e:8e:6a:d2:4e:01:74:d1:6f:73:03:d3:09:
ab:6c:8c:ad:4e:99:5c:4a:0d:d6:f4:2b:ae:59:e5:
4a:57:1c:0b:b4:ba:f4:93:83:0d:da:36:70:ad:70:
69:70:9b:00:7a:b3:63:b2:75:b8:50:ff:22:50:02:
e2:75:6b:32:b9:12:6c:bd:d3:0b:e5:7e:d9:bc:d6:
f0:9c:62:7c:61:67:a9:35:a4:4b:f8:c6:21:78:5e:
bd:09:87:65:30:af:8d:4e:e2:ed:41:39:f7:43:41:
cf:0d:4a:fa:52:7c:c8:07:3b:17:8e:9c:2b:37:ed:
51:25:c4:9d:3d:e5:ce:e8:66:d8:ab:36:c4:97:65:
2f:53:12:41:f8:9b:fd:9a:e2:9e:e1:bf:1c:4c:4d:
25:6a:52:7c:2d:a3:4c:24:b0:7b:bf:7b:0c:7b:85:
dc:86:b1:68:49:84:c8:c8:47:1d:c9:e8:76:98:a6:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B3:8B:08:B7:06:5A:E2:55:44:F8:E7:48:E4:3A:16:A0:2D:26:FC
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/k7OLCLcGWuJVRPjnSOQ6FqAtJvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
53:94:54:1d:42:23:8b:70:88:05:ee:ae:4f:62:66:5b:43:cd:
d3:27:f4:34:b2:44:5b:c4:b9:e1:f4:da:3f:c8:fb:66:83:33:
da:9e:67:d1:04:44:e4:8a:92:5a:3a:e1:f3:96:23:92:4c:b7:
87:a6:73:0a:8e:c7:c1:5a:ab:6b:93:d8:f7:32:76:4e:62:85:
92:79:e8:70:e7:90:91:6e:c2:e7:d3:8e:93:11:5a:81:d0:94:
44:f8:0e:64:4c:15:0b:fb:4a:2a:e5:bb:55:9f:b6:47:b4:ab:
d5:02:7d:a4:7d:f8:cf:c4:99:e6:b1:4d:69:e5:b0:97:ca:b0:
05:dd:1d:cd:e9:3e:d2:13:a7:fe:2b:7e:b3:ff:fb:d0:60:8a:
9b:f4:8e:de:65:5e:b0:a0:2e:1b:8b:fc:cf:92:0b:a4:d0:ed:
51:a6:3f:04:7f:cc:6f:ef:2d:d5:9d:07:0f:43:81:d3:8f:9f:
fa:f2:40:10:0f:c2:00:a8:15:46:97:11:2f:ad:af:83:c5:94:
fc:f4:67:98:fd:5f:ac:e4:8b:b8:31:56:9e:7f:b4:85:35:76:
44:57:b1:28:ae:24:25:ae:dd:20:3e:7b:f1:e3:8d:bb:1a:18:
3a:d8:de:2a:92:5f:cd:bb:d9:78:cf:b8:c6:bf:23:20:72:1a:
36:ed:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:25:10 2024 by rpki-client on console-ams.rpki-client.org