Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/M0_8qkvCE2JmenQ-L_GHhwpBVEA.roa
File: M0_8qkvCE2JmenQ-L_GHhwpBVEA.roa (raw, json)
Hash identifier: 6i7qFaZ+W8Nw9ZmB+uvhd6aDSATWZUAbb0aBjsXM1Zg=
Subject key identifier: 33:4F:FC:AA:4B:C2:13:62:66:7A:74:3E:2F:F1:87:87:0A:41:54:40
Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial: 018CC9BC919948EF53ECAA996DB03B36115D
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/M0_8qkvCE2JmenQ-L_GHhwpBVEA.roa
Signing time: Tue 02 Jan 2024 10:33:47 +0000
ROA not before: Tue 02 Jan 2024 10:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213149
IP address blocks: 91.205.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:91:99:48:ef:53:ec:aa:99:6d:b0:3b:36:11:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Validity
Not Before: Jan 2 10:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=334ffcaa4bc21362667a743e2ff187870a415440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:de:13:89:73:1a:6d:72:c5:09:e2:19:7b:
9e:6e:3e:dd:be:03:9d:61:62:e8:d5:bd:c3:34:d8:
56:2d:26:df:25:43:33:10:49:8a:ac:25:61:75:97:
bd:e1:79:93:88:c6:01:cf:6e:58:33:04:2c:2e:83:
b7:ef:f8:bf:0b:6d:f6:00:5e:fa:16:77:aa:29:3d:
0a:27:04:21:10:36:5d:86:22:0a:5c:73:70:9c:54:
0c:9a:67:db:6b:1d:5f:c6:33:70:b5:de:b7:bf:6f:
5a:61:33:ca:c0:80:9a:75:96:83:4b:b1:89:7a:a1:
9d:20:c1:0a:74:dd:b4:10:e7:5d:4a:95:4d:5e:c7:
6d:05:07:c1:2e:5a:8c:41:45:78:aa:c9:4b:f3:ad:
84:f6:cd:e2:68:f2:23:f0:95:6f:ea:90:0c:d0:77:
17:ef:bb:c5:ab:f0:c7:5c:3a:e9:bd:b6:f1:d6:e8:
50:ca:25:6b:77:d9:20:bf:d0:6a:67:fe:0a:19:03:
59:13:67:63:58:4a:ac:e4:c5:19:63:06:13:cc:9b:
c6:e7:a3:33:dd:1c:52:e3:4b:bc:f7:10:15:26:b3:
01:cc:2b:00:39:b6:f6:0c:ec:6d:5b:1e:54:10:93:
ab:c9:18:c5:32:94:c8:97:47:17:1d:93:b4:5e:66:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4F:FC:AA:4B:C2:13:62:66:7A:74:3E:2F:F1:87:87:0A:41:54:40
X509v3 Authority Key Identifier:
keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/M0_8qkvCE2JmenQ-L_GHhwpBVEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2e:10:d0:e0:7e:7b:c4:42:62:ab:5a:dc:8d:ae:77:f7:18:
1e:c1:f8:5d:da:6a:ac:94:82:33:16:07:d3:43:54:53:de:2b:
86:30:db:bb:71:ac:c2:4d:4e:12:6c:40:c7:be:7c:99:be:7e:
ce:d7:3d:f1:0f:9a:80:c7:eb:5e:68:7d:f9:2a:21:7d:a0:0a:
7f:01:38:ae:e7:f1:6b:ea:5a:dc:5e:25:d3:3a:47:26:d7:36:
ae:61:68:d2:9f:07:09:1d:61:07:82:78:63:5d:80:8b:d4:92:
fc:81:cc:d1:ea:e3:78:29:43:ab:da:62:be:b5:0e:1a:08:b1:
1b:09:11:c9:2a:dc:32:bb:ab:53:a5:d2:52:d4:b3:05:8f:f5:
70:27:3e:53:e6:d8:31:a3:8d:cc:b8:ae:b3:48:d6:cf:40:3c:
de:24:7f:0b:b3:21:af:a1:3e:a7:7c:6f:5e:f6:b4:f6:e9:f3:
81:1c:8d:9c:24:6f:2b:ff:91:8a:b0:54:b6:d7:5f:a0:43:d1:
53:47:cc:27:d3:f8:1b:6f:b1:5d:c9:dc:b3:0e:88:5d:ee:2c:
0d:ff:3f:cb:87:3c:24:ad:10:ad:96:48:a8:23:88:f3:1a:21:
9f:c6:7f:c9:bd:e5:27:89:4f:bd:f5:09:bd:d9:b6:f9:5a:91:
38:07:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:32:16 2024 by rpki-client on console-ams.rpki-client.org