Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/gPNT4Z9vk9YimajJPMDsCArssK4.roa
File: gPNT4Z9vk9YimajJPMDsCArssK4.roa (raw, json)
Hash identifier: PAevUzhbye4SoVr3G2hWhj9xC8HUuONVOn8yi5+f878=
Subject key identifier: 80:F3:53:E1:9F:6F:93:D6:22:99:A8:C9:3C:C0:EC:08:0A:EC:B0:AE
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01923E05032F1529457B0391724E174AB05C
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/gPNT4Z9vk9YimajJPMDsCArssK4.roa
Signing time: Sun 29 Sep 2024 13:42:48 +0000
ROA not before: Sun 29 Sep 2024 13:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 91.193.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:05:03:2f:15:29:45:7b:03:91:72:4e:17:4a:b0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 29 13:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80f353e19f6f93d62299a8c93cc0ec080aecb0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:5d:eb:87:14:85:14:26:fc:17:e9:0d:3f:
a9:ad:55:a7:ce:d2:15:b4:2c:f0:b8:5d:4b:4f:68:
c4:da:4c:00:86:94:5f:3a:42:0d:f1:cf:24:82:28:
fd:a4:b5:3e:a4:bd:46:3f:25:ec:6e:79:76:10:6f:
b8:86:5f:63:78:9a:af:38:c9:59:e7:bb:87:e8:b8:
84:98:fb:4f:c9:85:c8:04:04:c7:72:a1:2d:30:22:
bd:ab:05:bd:67:02:01:b3:37:4b:b8:43:bc:03:5d:
4d:98:35:b8:27:d1:44:9f:25:87:61:af:df:6e:36:
cd:ae:14:c9:82:a6:e6:c9:4b:e9:35:b8:dd:a8:7b:
35:24:45:c4:3a:a2:42:37:dc:6f:7e:71:25:08:71:
0c:f3:0c:ef:7b:5c:7f:a0:7a:a5:cc:63:0c:5b:8e:
36:ef:a9:f9:f1:34:81:f1:57:2c:bf:8c:8b:62:7a:
33:08:b8:9d:14:59:3d:87:49:0a:89:d7:a4:16:b6:
d5:b2:41:35:28:54:cf:ed:59:7b:4d:34:6f:0f:9c:
cb:29:4f:51:60:25:08:b8:18:36:5e:4b:ec:fe:aa:
27:75:be:dc:32:4b:0b:f8:bb:35:67:c8:d0:f6:c0:
fb:3d:9e:e6:ce:2a:53:4e:98:81:3a:cc:8b:03:31:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:53:E1:9F:6F:93:D6:22:99:A8:C9:3C:C0:EC:08:0A:EC:B0:AE
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/gPNT4Z9vk9YimajJPMDsCArssK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
Signature Algorithm: sha256WithRSAEncryption
81:06:cc:60:70:27:7b:11:4f:7a:ef:18:a5:6f:2c:60:c3:a9:
f0:5e:49:f5:bf:be:13:74:e5:34:84:90:1b:2f:ef:0f:4f:f4:
7f:51:31:b8:c7:22:c1:c9:ce:7d:6d:ea:c0:44:2a:5c:cb:8b:
f4:04:2d:a6:1f:ee:2b:67:ba:af:67:7e:25:a8:80:08:b4:bf:
91:cf:7d:c0:ba:07:00:5e:49:81:b8:56:04:cc:23:bb:1e:43:
c3:00:09:d1:db:9e:13:da:b5:f4:ac:56:1e:51:c5:0e:fd:67:
7b:79:e3:26:f1:fd:62:ac:bb:ec:c1:d3:a2:14:7d:a0:b0:a8:
d2:bd:68:9c:04:d0:21:9c:ba:bc:fc:4b:6c:95:ab:8b:2a:94:
5e:d6:d5:78:f9:06:16:80:c3:43:2f:4d:0a:cb:b4:50:f2:91:
45:17:97:27:75:9a:dd:8e:30:f0:b3:6f:bc:fb:95:82:c6:77:
2f:5b:94:12:ee:b2:97:96:81:b6:b9:b3:e6:87:bb:fa:0c:05:
40:51:72:00:fb:94:57:0f:98:56:89:3e:35:07:97:bf:55:dc:
20:a9:6d:01:85:9a:ce:5d:27:ec:71:cc:5a:60:88:36:fe:34:
63:a4:6c:81:92:53:7e:f7:d6:e3:1a:54:f6:8f:0a:7e:e6:07:
3a:b8:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:20 2024 by rpki-client on console-fra.rpki-client.org