Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/ikn_nNlPdznv9YT9p3g00QTdxaA.roa
File: ikn_nNlPdznv9YT9p3g00QTdxaA.roa (raw, json)
Hash identifier: cMI6oEXh8fP/eS4yW6G71zexLr9ybWtXeEl0oDEzedI=
Subject key identifier: 8A:49:FF:9C:D9:4F:77:39:EF:F5:84:FD:A7:78:34:D1:04:DD:C5:A0
Certificate issuer: /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial: 018CC8DE5A394D0D49E3982DEC706380291D
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/ikn_nNlPdznv9YT9p3g00QTdxaA.roa
Signing time: Tue 02 Jan 2024 06:31:04 +0000
ROA not before: Tue 02 Jan 2024 06:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 91.209.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:5a:39:4d:0d:49:e3:98:2d:ec:70:63:80:29:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Validity
Not Before: Jan 2 06:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a49ff9cd94f7739eff584fda77834d104ddc5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:49:f9:dd:81:64:71:f6:b3:ab:a8:38:94:
fa:35:55:0d:e8:1a:e1:2c:97:6a:5d:ff:9c:57:08:
75:10:e1:85:10:22:46:a5:2e:42:d1:a0:ea:53:03:
36:1b:86:35:fb:f8:ca:f0:ee:a4:4e:ac:14:4d:89:
8b:94:b1:2a:53:25:73:f5:37:aa:a0:21:22:fb:13:
6c:23:b3:eb:37:6a:44:e6:cc:1a:53:86:97:dc:5f:
03:61:aa:dd:52:9c:2d:77:58:eb:a5:b8:c1:35:7c:
10:34:7f:3c:a8:8a:a9:81:38:9c:0f:92:95:55:0b:
3e:0b:0e:08:11:3f:19:22:2a:f0:8c:6c:8b:a4:4f:
4c:37:e0:5a:2a:c9:3d:c8:5d:6f:0e:ab:65:c5:b2:
7d:23:41:9d:a9:b1:d7:19:3a:7f:cb:0e:a3:67:00:
7a:32:c1:c5:ac:bd:94:72:fd:c7:33:0f:01:ce:8a:
51:97:cd:fc:aa:21:7d:01:ee:91:18:ef:35:c1:f1:
8f:71:06:e1:51:87:5c:92:14:1b:a9:4a:7a:db:08:
d3:dd:fb:32:3e:8e:69:8b:d2:ec:96:04:53:59:f6:
5b:82:2f:64:1a:77:dd:98:f9:dc:1a:55:47:17:78:
76:9b:0d:77:7a:80:29:65:9f:64:57:6a:79:0f:36:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:49:FF:9C:D9:4F:77:39:EF:F5:84:FD:A7:78:34:D1:04:DD:C5:A0
X509v3 Authority Key Identifier:
keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/ikn_nNlPdznv9YT9p3g00QTdxaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
86:53:2c:50:e0:c2:d9:b5:9d:6e:87:8b:67:43:6f:f2:81:dd:
be:1b:ea:3b:2e:13:4e:38:18:1c:6d:09:7c:32:dd:55:c8:fc:
49:2e:c8:83:27:f5:85:ee:ce:77:cf:22:5e:77:68:2b:04:88:
31:81:24:55:d6:e3:83:f4:f3:c7:a5:a3:3b:c1:c9:e1:8d:83:
0d:93:d2:2a:26:fb:93:f9:eb:ed:b5:93:39:ab:83:fc:2e:76:
ec:eb:e3:ba:6b:8e:b3:29:5b:29:5b:c3:46:70:be:47:d1:8a:
87:d2:cd:c5:d9:b4:ad:c1:ae:1d:1c:a9:de:c8:26:30:05:46:
dc:ec:c4:d8:78:9b:12:4a:51:1b:b0:46:84:c9:90:6b:b9:2a:
1d:76:57:10:f5:63:23:d1:d6:8f:3b:d5:62:77:d3:ad:bb:9f:
0b:e9:c7:ec:5c:2c:85:28:f9:bc:37:83:cf:8b:e8:78:a7:5a:
2e:6b:b9:ea:b2:11:c3:dd:3d:4a:50:86:e7:bc:71:11:dd:80:
07:7d:7a:16:be:9d:8d:46:2b:e9:4a:aa:77:c1:c1:6e:a3:bd:
2b:4a:12:90:8c:de:ba:b8:86:fb:e3:d4:a5:ce:6b:f0:5b:2d:
98:d9:70:57:07:a4:23:b8:f8:b5:0b:be:d2:b3:be:0d:77:6f:
6b:2b:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:39 2024 by rpki-client on console-fra.rpki-client.org