Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/6g_j2fUm7A4kwejTfO-oSWJvy9I.roa
File: 6g_j2fUm7A4kwejTfO-oSWJvy9I.roa (raw, json)
Hash identifier: d84SVa5LZUsJznKxhyDWBHBszjMRAg5LUz9kNuBWqJ8=
Subject key identifier: EA:0F:E3:D9:F5:26:EC:0E:24:C1:E8:D3:7C:EF:A8:49:62:6F:CB:D2
Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial: 018CC3B680F583BCA66728AFBE28F8D9D0AF
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/6g_j2fUm7A4kwejTfO-oSWJvy9I.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199408
IP address blocks: 91.194.0.0/23 maxlen: 23
91.194.14.0/23 maxlen: 23
91.194.14.0/24 maxlen: 24
91.194.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:80:f5:83:bc:a6:67:28:af:be:28:f8:d9:d0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea0fe3d9f526ec0e24c1e8d37cefa849626fcbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:63:18:dc:5f:92:9f:07:31:9c:a4:18:03:
bb:91:23:53:78:40:e4:be:85:df:79:75:0f:25:90:
99:be:dd:2b:08:88:29:99:93:bf:e8:1c:e7:17:15:
34:3d:49:21:8d:43:bb:a2:d1:cc:67:3f:7e:17:ac:
c3:4f:70:95:f8:69:b6:a1:6b:dc:fc:f4:c8:3b:14:
6b:44:7f:4b:bd:b6:ef:66:38:a2:65:0a:12:a1:ed:
76:b1:86:db:d9:b7:ac:6f:32:1c:a2:3b:86:f7:a9:
a0:21:11:6d:44:ce:f6:47:31:d3:22:cd:06:f0:01:
da:71:96:6d:f7:83:47:bc:ed:61:d1:9f:6d:1a:6f:
47:98:2a:16:05:71:a4:57:fd:a4:b7:33:ab:3d:a6:
26:d4:3a:ef:3e:68:4e:89:2a:61:0d:e4:7f:d2:61:
f8:08:31:8c:90:52:08:19:87:d8:ce:2f:78:ca:8a:
9b:3c:c4:3f:81:e0:a3:ea:37:f6:18:18:c2:1e:b8:
c0:95:ff:47:c8:a0:56:e3:dd:ce:2c:7d:33:c8:c6:
67:a7:c4:82:da:15:3c:2b:ba:35:a7:39:74:fc:cb:
22:20:71:f9:9d:37:aa:fd:86:b4:6c:5f:7d:07:1e:
6f:b9:d4:ca:14:b8:59:5f:07:d6:12:90:51:18:65:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0F:E3:D9:F5:26:EC:0E:24:C1:E8:D3:7C:EF:A8:49:62:6F:CB:D2
X509v3 Authority Key Identifier:
keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/6g_j2fUm7A4kwejTfO-oSWJvy9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.0.0/23
91.194.14.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:45:0e:b2:09:4e:1d:78:2e:52:dc:7c:cb:c8:2c:d6:04:50:
12:f9:65:a1:f0:d4:cc:58:8b:4c:ae:d8:09:81:d0:46:74:59:
c5:96:fb:4f:80:02:53:76:f8:7b:e1:24:af:34:94:17:0b:14:
fc:50:fd:e2:79:c1:8e:9d:25:b1:82:7a:a1:75:39:4a:08:c7:
23:65:cc:3f:c9:ae:2d:e2:18:c7:24:4a:c2:89:c9:d4:80:9e:
17:10:0f:5e:4b:21:ea:a0:54:0c:00:e0:32:c8:9b:80:7e:8d:
75:91:02:f7:64:ef:d0:40:c2:74:76:13:8d:a5:cc:66:36:1c:
9f:cb:f2:41:c4:6d:97:40:2b:05:e8:b6:50:54:71:d6:90:11:
c6:e1:95:0c:9e:33:a7:b7:00:f5:ba:c2:52:1a:bd:7a:64:c0:
05:c9:f0:27:c6:6d:2f:7d:95:c1:9c:3b:84:47:9c:d4:04:09:
97:84:76:78:e4:4d:88:09:38:81:33:9e:5d:06:9a:86:1d:a3:
98:c1:4a:f6:33:77:1b:b3:6d:fd:a6:30:b1:79:5e:9b:ba:b5:
06:46:b0:bd:18:1c:09:85:f7:31:f9:17:83:1c:8e:9d:c2:c8:
70:6d:d5:1b:56:90:77:e7:1a:be:0e:bd:22:32:10:08:5d:48:
bf:a8:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:43 2024 by rpki-client on console-fra.rpki-client.org