Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/n6Cb5zAJsvtaP1u_ayxP1crqwO0.roa
File: n6Cb5zAJsvtaP1u_ayxP1crqwO0.roa (raw, json)
Hash identifier: yq2zR/+Pia1XfEdBSUcaXWm1F2xRicF2Mh0hZgt1ccQ=
Subject key identifier: 9F:A0:9B:E7:30:09:B2:FB:5A:3F:5B:BF:6B:2C:4F:D5:CA:EA:C0:ED
Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial: 018CC64B716DB662BAC5BDFA4DBB3A4562D7
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/n6Cb5zAJsvtaP1u_ayxP1crqwO0.roa
Signing time: Mon 01 Jan 2024 18:31:22 +0000
ROA not before: Mon 01 Jan 2024 18:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47835
IP address blocks: 91.206.198.0/23 maxlen: 23
91.230.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:71:6d:b6:62:ba:c5:bd:fa:4d:bb:3a:45:62:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Validity
Not Before: Jan 1 18:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fa09be73009b2fb5a3f5bbf6b2c4fd5caeac0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:dc:71:71:e6:a3:d8:b9:be:d6:46:9b:68:
16:7c:ed:4d:ce:a8:c6:ca:da:81:dc:ff:80:32:93:
1d:7e:f7:d3:55:9b:ea:d7:49:94:a0:1c:ad:c4:06:
77:89:f3:57:64:9e:c9:31:31:7a:e1:6a:47:24:3f:
d4:bf:3b:b2:83:6d:12:a8:cc:ea:f7:56:49:ca:26:
37:2a:09:2e:21:e2:5f:26:71:68:5d:c2:50:9c:ba:
bd:0b:07:42:b7:d5:8f:7c:1f:ae:56:a8:38:17:6a:
39:04:12:b7:f2:ac:8e:85:50:09:84:53:77:04:44:
94:bf:6e:0c:4e:66:28:44:a0:0b:4f:12:43:49:e0:
0e:b0:e4:8f:af:d1:25:f3:53:b1:80:b1:74:cc:8f:
d1:de:71:38:2d:9e:fb:83:0b:73:26:27:b3:27:40:
80:48:53:72:93:96:f8:e3:85:a2:56:f3:73:a3:23:
4a:0a:d4:cc:9c:9a:5c:a0:a0:95:ed:b2:fb:91:ab:
c9:07:53:1b:04:af:43:16:5b:ad:1e:89:1d:1a:a7:
d9:0b:a8:df:a3:14:a9:4b:96:0f:b5:4d:4a:31:14:
af:b0:7e:f7:b8:05:6b:2c:78:a1:6e:3a:48:2e:4c:
f9:93:c6:41:85:8a:cc:1d:97:e2:e9:7c:4c:4b:41:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:9B:E7:30:09:B2:FB:5A:3F:5B:BF:6B:2C:4F:D5:CA:EA:C0:ED
X509v3 Authority Key Identifier:
keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/n6Cb5zAJsvtaP1u_ayxP1crqwO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.198.0/23
91.230.235.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4e:7e:e8:75:17:c8:f7:08:3f:ff:b9:be:99:41:d2:dc:f3:
33:e5:52:08:31:a0:78:1d:54:bf:b5:b0:33:af:b8:b4:e2:90:
c4:2b:79:09:95:1b:97:0f:12:b2:a2:83:28:dd:1b:b3:39:fd:
e8:05:e3:c8:90:7f:14:0f:27:5f:cc:4b:2d:e8:70:2e:ea:88:
f1:fd:7c:ff:0d:2c:43:af:fc:d4:0a:87:92:c1:63:38:c9:7a:
80:fa:c9:5d:3f:ff:b6:c7:23:77:39:6c:39:da:e7:8f:50:a9:
e0:62:a5:a3:97:51:c5:5f:0e:2e:54:19:78:8e:ca:07:6b:bc:
36:bf:49:96:bc:8d:63:6e:7c:d5:c6:69:54:bc:ea:dd:dc:85:
e0:71:84:3a:84:f4:b5:75:07:a8:52:aa:20:8f:d4:cb:af:32:
ce:53:fc:52:71:4e:09:0f:2a:f1:59:36:fb:b8:6c:d7:88:8e:
ed:85:bc:87:a3:8d:49:99:75:86:e9:62:43:65:55:d5:80:28:
be:cf:8a:86:aa:31:98:6d:8f:2f:b3:af:73:90:f7:cc:46:bb:
e5:db:d8:76:79:9a:cd:88:33:f5:55:71:81:4f:a2:c8:05:ca:
38:15:a9:3a:3c:14:d4:d2:5c:7f:00:60:de:a3:69:1a:fc:88:
92:02:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:03 2024 by rpki-client on console-fra.rpki-client.org