Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/M0li5ZO2VSVQdOqxfYUpYMzwP48.roa
File: M0li5ZO2VSVQdOqxfYUpYMzwP48.roa (raw, json)
Hash identifier: sJlzVcpVKqzFOz7t3gpNOngRXsb1sbSbZAu0XFGux70=
Subject key identifier: 33:49:62:E5:93:B6:55:25:50:74:EA:B1:7D:85:29:60:CC:F0:3F:8F
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 018E19ABEB4EAAAAFA3C5BC7C59407B353C9
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/M0li5ZO2VSVQdOqxfYUpYMzwP48.roa
Signing time: Thu 07 Mar 2024 16:08:01 +0000
ROA not before: Thu 07 Mar 2024 16:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.245.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:ab:eb:4e:aa:aa:fa:3c:5b:c7:c5:94:07:b3:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Mar 7 16:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=334962e593b655255074eab17d852960ccf03f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5c:55:c7:ca:d2:cb:d9:b1:6e:d6:62:0b:f9:
77:11:93:4b:86:af:e9:22:8c:c7:94:bd:d0:97:20:
05:15:90:0c:6f:f0:cb:5b:a0:24:59:26:57:44:a7:
1c:7f:89:8e:37:d2:60:16:58:4b:2d:3e:fd:56:3a:
d2:61:02:41:ff:80:9e:97:1f:ce:f6:08:82:67:72:
f3:df:3e:e4:2a:a8:d7:52:b8:6d:c1:90:a2:84:9c:
6f:10:aa:57:f2:91:d0:1e:c1:53:78:9a:48:b2:fc:
b1:02:9c:d8:3c:ae:2b:5d:fa:cb:87:cd:05:1b:d8:
8d:8b:ce:94:77:02:fa:e9:39:bf:33:03:c4:79:b2:
d7:9d:b3:e0:ce:13:d1:2b:a1:2f:96:18:b9:74:6d:
e3:6b:d2:f5:84:44:61:d7:4f:6c:7d:f9:f6:f6:2f:
11:2a:ad:ca:c0:2b:cb:ba:b3:6c:45:8d:9a:87:55:
25:f3:e0:87:ed:09:4b:74:46:66:c2:70:4b:d3:3d:
d5:57:c0:bf:41:b7:ec:47:e4:65:72:db:b1:1f:0b:
fb:07:39:b2:33:3c:f3:ae:97:47:ca:45:53:21:4c:
aa:1d:07:eb:1b:b4:02:e2:44:03:5e:71:fb:ed:71:
44:13:75:b2:59:49:6e:dd:42:5e:f0:e1:0e:92:0e:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:62:E5:93:B6:55:25:50:74:EA:B1:7D:85:29:60:CC:F0:3F:8F
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/M0li5ZO2VSVQdOqxfYUpYMzwP48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0b:50:3a:d6:e9:1c:7c:15:7a:27:a6:6b:90:45:79:25:0c:
7a:64:64:1f:c3:75:f2:9b:ba:f6:61:69:69:7e:68:cc:c0:1e:
a6:84:52:94:b0:5c:eb:4f:23:1b:f1:5a:08:ec:28:d8:00:2e:
c3:4f:28:f1:39:1d:8f:2e:e0:03:c5:28:26:5c:93:fb:1b:96:
19:43:e9:17:b3:5a:90:ce:4c:e1:63:1d:f0:d8:17:11:8b:a1:
ae:00:1c:7a:f7:f2:57:84:a4:07:29:f6:7e:bf:16:cf:f3:04:
a2:8d:55:79:d2:ff:24:39:8f:15:df:6c:6c:44:fb:46:8e:46:
cd:f2:4a:a4:5e:e0:4f:ec:6a:88:ed:04:70:eb:d7:e8:18:25:
f0:60:d1:47:7a:5e:66:8e:f6:cc:13:c8:fe:76:1c:ab:d7:52:
8b:da:c7:3b:5f:70:43:68:a9:59:d2:eb:3f:75:3b:6a:9f:9b:
d3:35:e8:e4:aa:ea:ca:32:4b:7d:be:9a:a9:57:cd:94:ef:3d:
3c:a4:5d:80:b3:03:92:95:ba:67:48:fe:18:a2:6a:54:78:c5:
44:1c:a3:bb:1e:a4:5e:c4:7f:64:01:5d:d5:60:b5:3c:90:1e:
54:d7:6c:d2:bc:33:78:40:44:34:6a:c4:6d:c1:be:ab:c6:c1:
1c:87:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:16:12 2024 by rpki-client on console-ams.rpki-client.org