Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/_yUWqSmfb8BN0vfxiyfhsRK-dQE.roa
File: _yUWqSmfb8BN0vfxiyfhsRK-dQE.roa (raw, json)
Hash identifier: dysHMglVOwPXc0pnyjWd2FyVEEK4KPnUBtnZf3a9iZk=
Subject key identifier: FF:25:16:A9:29:9F:6F:C0:4D:D2:F7:F1:8B:27:E1:B1:12:BE:75:01
Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial: 018CC2DAEB67CA109F2BE05B3940B59DDF1D
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/_yUWqSmfb8BN0vfxiyfhsRK-dQE.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48303
IP address blocks: 91.216.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:eb:67:ca:10:9f:2b:e0:5b:39:40:b5:9d:df:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff2516a9299f6fc04dd2f7f18b27e1b112be7501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:fe:d0:ad:c0:40:e0:44:89:a1:f2:b1:a9:
21:f8:4a:c3:b4:35:28:3d:1c:b4:d2:22:a4:40:03:
6d:b8:ae:1c:81:f2:f5:4c:94:57:5c:f8:99:73:00:
e6:9a:1d:e6:cf:9f:e4:d7:68:6f:13:e2:8d:35:ee:
a0:cc:66:b6:b8:cf:ab:5e:0a:e0:e4:83:5c:1e:82:
f6:e9:aa:a3:5d:13:f7:72:d8:61:1f:84:c0:50:37:
fd:70:ce:e1:37:84:ca:c9:b2:be:1d:d8:ea:c9:13:
ab:33:bf:ee:fc:f8:de:f9:fd:31:16:11:f4:58:4f:
c1:5a:a9:27:c7:38:d1:49:3a:f6:72:f7:07:90:44:
88:93:d6:c2:a7:a4:89:dc:95:d4:43:85:bc:ef:3f:
e6:ef:91:d3:16:4f:f8:f1:05:19:3b:37:e0:e4:84:
3d:fc:e7:bf:71:fc:f0:3b:64:85:52:f3:b4:d4:a2:
d8:be:cf:79:8a:1e:e3:d3:9d:60:e4:60:89:c1:32:
5f:35:74:ef:21:a3:ff:2d:c4:4a:7e:0f:e6:21:64:
f7:84:93:c7:7c:fa:01:e5:54:59:6c:c3:e7:7e:6e:
e8:17:f9:1d:52:1e:60:b0:29:5b:8a:b7:6a:97:39:
0f:ee:00:74:1b:5b:eb:04:2d:b6:8e:d8:84:17:9c:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:25:16:A9:29:9F:6F:C0:4D:D2:F7:F1:8B:27:E1:B1:12:BE:75:01
X509v3 Authority Key Identifier:
keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/_yUWqSmfb8BN0vfxiyfhsRK-dQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.44.0/24
Signature Algorithm: sha256WithRSAEncryption
75:39:81:f1:b4:f6:8f:f9:00:b7:57:86:e3:81:97:e6:fe:24:
e5:9f:c8:9d:94:75:10:d7:14:c5:be:68:d1:f5:f8:54:83:2b:
10:e8:ff:ab:32:7a:4d:19:8a:00:6a:e2:ed:83:40:0c:ab:d8:
21:37:2e:e2:f9:28:ad:35:7f:02:0a:37:5f:3a:0e:d5:10:85:
e6:41:d8:ff:38:20:e2:5a:3f:2c:23:03:f2:f5:85:02:bf:48:
7b:81:cd:bf:be:c5:96:ab:99:2b:b5:2f:e6:8c:92:69:4b:87:
60:8c:47:47:a0:7e:e4:92:b5:a1:ab:db:35:4f:6a:4b:d4:66:
a3:73:37:aa:c5:a8:92:c0:b8:13:f6:65:e4:f2:9e:03:ee:f8:
2f:76:35:cc:bd:cf:7c:08:6e:88:1a:da:dc:2c:9b:67:bc:56:
38:3c:32:36:72:57:25:b5:72:06:c5:78:6d:59:6f:3a:e7:b7:
5d:43:78:13:d8:72:56:5b:79:e0:19:ee:43:ef:33:07:f8:5c:
f4:07:7e:bb:f8:ca:90:f5:8b:97:ef:23:c8:7e:16:24:44:8b:
40:73:0f:92:8a:75:ec:c6:d4:1a:1e:56:5a:7a:0a:ac:72:23:
be:55:4e:1e:cf:77:0b:e3:22:83:0d:82:a4:4d:57:8a:f7:1f:
44:d7:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:23 2024 by rpki-client on console-fra.rpki-client.org