Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/dGSjPKWJxcltKBo56FpKzYH_hI0.roa
File: dGSjPKWJxcltKBo56FpKzYH_hI0.roa (raw, json)
Hash identifier: SUS5o6P+dojM/igXRdpQXhQ+SJd60W0tpBvPcaalY50=
Subject key identifier: 74:64:A3:3C:A5:89:C5:C9:6D:28:1A:39:E8:5A:4A:CD:81:FF:84:8D
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 018CC56E35CA2C4673E216C096EF9BB42DCB
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/dGSjPKWJxcltKBo56FpKzYH_hI0.roa
Signing time: Mon 01 Jan 2024 14:29:43 +0000
ROA not before: Mon 01 Jan 2024 14:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42100
IP address blocks: 91.212.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:35:ca:2c:46:73:e2:16:c0:96:ef:9b:b4:2d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: Jan 1 14:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7464a33ca589c5c96d281a39e85a4acd81ff848d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:39:d9:78:8a:97:4c:1e:b5:df:d2:be:8e:
47:cd:0c:ee:1c:6c:d0:83:e4:b9:7e:3e:ec:e6:c9:
08:d8:6e:40:c7:09:3f:56:19:2a:80:10:d4:e1:71:
0b:16:30:02:d6:b6:16:ac:28:32:4e:bb:5b:c3:07:
e5:33:3c:2f:94:17:61:93:fe:4d:78:72:d7:48:77:
2d:9a:52:41:b8:87:1d:ba:87:62:df:14:52:89:07:
3f:d6:7a:8d:ea:a4:5d:4c:a4:db:f1:7b:a8:af:c4:
05:5c:03:a3:34:ab:71:a2:70:45:ae:0c:6d:72:39:
97:ca:ce:83:76:d3:af:5f:23:d3:5a:f9:9b:c3:5d:
c3:d1:f2:54:a7:22:24:ff:93:0e:3c:2a:a8:b3:51:
d8:90:38:28:19:9f:08:dc:14:e8:67:0d:9e:94:f7:
8d:af:4a:e8:76:fa:59:60:4a:13:75:3c:b3:7b:e0:
d3:f5:00:6a:64:05:ce:e2:3d:ad:72:4e:12:6a:0b:
68:a1:ae:3d:3c:db:46:dd:8f:1c:e7:6b:76:49:16:
89:8e:af:59:bc:e8:e2:05:29:a8:ce:cc:b3:0e:94:
52:2b:80:79:4d:26:84:f3:33:ff:ce:82:0b:9a:d3:
51:da:94:81:ad:5b:79:8a:90:2c:9b:78:3a:cd:07:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:64:A3:3C:A5:89:C5:C9:6D:28:1A:39:E8:5A:4A:CD:81:FF:84:8D
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/dGSjPKWJxcltKBo56FpKzYH_hI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.13.0/24
Signature Algorithm: sha256WithRSAEncryption
01:dd:5d:7e:08:c7:c7:cd:ed:d4:36:be:03:ec:86:64:aa:4d:
dc:ca:f2:df:d4:67:ba:a4:66:bc:53:37:35:bc:1d:6f:a9:3e:
d0:7f:88:60:a8:bd:16:11:ee:7c:0b:f6:bd:4b:38:cb:77:58:
78:67:09:c8:a9:03:16:e1:43:7a:74:e0:bb:32:4e:cc:43:7b:
0d:f9:fc:6d:9b:eb:ce:46:c6:75:37:48:82:88:cb:65:d9:1b:
67:17:79:ad:4a:cc:60:6a:85:6e:7f:fc:c8:22:58:b4:6e:f0:
24:11:fd:28:84:54:6e:00:6a:ed:bd:0e:61:05:95:98:c0:b2:
c4:3a:0e:d3:0d:48:25:27:78:8c:98:09:98:ea:44:6a:a6:d0:
32:19:53:63:6c:6d:70:43:3b:f5:64:c8:3a:f0:2b:e7:6e:c9:
17:40:44:5d:d3:86:63:fa:d0:ec:3a:9c:d4:6e:e9:db:3b:4d:
3a:b3:9b:9d:f7:88:4b:83:52:87:a0:f4:ab:f3:00:50:59:bd:
d5:ec:01:62:2f:e8:e3:c2:f4:55:ac:b4:5b:07:de:bb:f9:c4:
56:8f:af:d0:f8:3d:62:99:d3:13:27:bd:6a:68:40:9a:60:8e:
27:62:67:73:c7:d7:65:30:d8:c4:12:a7:cf:be:0f:25:c3:31:
26:23:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:50:16 2024 by rpki-client on console-ams.rpki-client.org