Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/F0zXC1kK07vvB8iHUHNAJ81OMhs.roa
File: F0zXC1kK07vvB8iHUHNAJ81OMhs.roa (raw, json)
Hash identifier: i9zFj2ZfA/o8ZpAFqEBZcGU3Io72pZxjwijQV7gw0QM=
Subject key identifier: 17:4C:D7:0B:59:0A:D3:BB:EF:07:C8:87:50:73:40:27:CD:4E:32:1B
Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial: 0191941AFEEF30E370B07117C7B6E1BDBBAD
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/F0zXC1kK07vvB8iHUHNAJ81OMhs.roa
Signing time: Tue 27 Aug 2024 13:51:22 +0000
ROA not before: Tue 27 Aug 2024 13:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.211.196.0/22 maxlen: 24
193.109.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:1a:fe:ef:30:e3:70:b0:71:17:c7:b6:e1:bd:bb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Validity
Not Before: Aug 27 13:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=174cd70b590ad3bbef07c88750734027cd4e321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:80:48:21:c7:46:3d:6c:c9:b1:2c:fc:d3:
6e:e3:04:96:a9:2c:6f:a3:96:cb:da:8a:87:1d:ca:
a2:08:21:36:f5:37:fb:23:2b:e3:98:63:de:60:13:
dc:bc:e8:93:88:ce:8d:6b:03:03:6e:ce:b5:9c:e5:
11:15:8a:48:62:68:17:10:c8:3f:ec:b7:f7:ce:e8:
ab:31:8c:67:a4:2f:6f:08:b4:74:df:db:9d:93:a2:
d4:93:1b:ed:a7:30:9b:c6:33:74:c0:24:5e:71:0a:
4a:33:7c:9b:c1:3e:b7:da:8e:b2:5c:38:a4:72:6b:
96:86:27:ad:de:dc:cb:9c:7d:d4:20:88:7d:ad:af:
78:4b:2e:f1:12:9b:84:04:ef:3f:41:19:46:53:30:
96:2e:a1:a5:4b:22:dd:bb:4d:e8:93:b6:45:ac:56:
b6:51:a7:67:d2:51:d7:b6:1e:95:e2:26:92:5e:f9:
71:8e:b3:b8:ee:72:0d:77:55:d2:51:56:27:d1:81:
4e:15:e8:c7:3e:bf:1e:29:e4:09:56:8e:48:2e:6e:
74:26:d0:fd:8e:99:2e:09:a7:a5:f9:8d:29:6c:06:
d7:77:78:5e:aa:c8:a9:c7:dc:b0:71:8b:4d:f8:76:
31:96:9b:f8:1c:ec:b9:9d:81:83:25:99:17:31:ee:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:D7:0B:59:0A:D3:BB:EF:07:C8:87:50:73:40:27:CD:4E:32:1B
X509v3 Authority Key Identifier:
keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/F0zXC1kK07vvB8iHUHNAJ81OMhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
193.109.152.0/21
Signature Algorithm: sha256WithRSAEncryption
54:76:7e:c3:0a:ce:3c:bd:70:60:de:33:87:6b:5c:e9:1b:99:
f8:0a:7a:92:b4:41:f2:41:47:3b:9e:ed:3d:bb:ca:39:77:62:
d4:99:e8:fd:e8:05:5b:e3:58:d6:a6:9f:ec:21:58:5c:01:96:
96:16:e3:b1:dd:6a:17:c1:f4:72:58:6e:e3:7a:2c:e6:93:39:
48:66:1c:18:bd:36:b2:0e:9b:46:c9:78:10:73:3b:2b:e7:f4:
be:36:1d:41:4c:5d:b0:5d:f7:56:88:fd:bb:ef:80:5d:73:88:
1b:a6:b5:d1:2f:2f:5c:fc:c8:68:d3:92:5b:61:15:a4:07:a0:
38:0b:44:bf:50:72:3e:dd:57:85:8e:bc:ee:a5:6e:38:e2:16:
83:0c:e8:c5:75:6a:0b:c6:f2:5b:a1:12:e0:6e:c9:58:e0:95:
91:b5:f6:da:3f:3e:4c:c2:09:d8:fb:e8:04:6a:a8:4e:66:fe:
31:b1:07:1b:a1:e8:75:51:46:f8:10:52:34:38:97:24:c9:2c:
6b:9c:5b:fe:23:b1:c3:9d:7d:8e:7c:85:c7:dd:83:c4:70:c0:
a5:5b:f7:23:48:9d:54:20:c8:b6:4c:d2:d2:93:ed:47:1a:c8:
3a:23:ac:39:c9:8d:f0:23:c2:0b:b0:86:95:d0:62:93:f5:a9:
9e:d5:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 23:14:06 2024 by rpki-client on console-fra.rpki-client.org