Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/bw8xpCSdpnybIeooGmpGtHp_Nl8.roa
File: bw8xpCSdpnybIeooGmpGtHp_Nl8.roa (raw, json)
Hash identifier: liJieVqkkHupxG74jujwZ78I30NPBP+XCsDvw4l7eko=
Subject key identifier: 6F:0F:31:A4:24:9D:A6:7C:9B:21:EA:28:1A:6A:46:B4:7A:7F:36:5F
Certificate issuer: /CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Certificate serial: 01917FC46360D948C0F5C6B2040E04A8E980
Authority key identifier: CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/bw8xpCSdpnybIeooGmpGtHp_Nl8.roa
Signing time: Fri 23 Aug 2024 15:04:22 +0000
ROA not before: Fri 23 Aug 2024 15:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44842
IP address blocks: 91.199.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:c4:63:60:d9:48:c0:f5:c6:b2:04:0e:04:a8:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca231a4362bc1ec0fdb4349901b61ccf9d679d65
Validity
Not Before: Aug 23 15:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f0f31a4249da67c9b21ea281a6a46b47a7f365f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:6d:f2:b6:24:f0:92:c5:69:38:72:a4:fd:
1d:8b:db:8e:81:c1:20:68:57:4b:ef:c3:e7:76:03:
68:34:c1:13:55:53:3c:56:72:37:fb:50:1d:37:f7:
9a:71:ff:6a:31:27:14:a1:91:30:00:97:14:ad:74:
1b:9a:4e:de:52:56:81:79:f8:74:2c:a1:a6:53:e6:
36:7c:51:d8:ef:d5:88:ab:e4:ac:d7:e7:13:b1:21:
b8:15:46:88:fa:e0:e6:c6:01:46:32:95:67:44:81:
67:d1:f7:81:cb:cb:d0:5e:ff:4d:ac:c4:0e:ff:03:
1b:08:63:e7:ec:6a:f8:79:91:74:95:8f:cb:73:f5:
ff:38:f0:08:91:a6:83:07:ce:bc:91:2f:cb:6a:e4:
4b:f9:42:d9:aa:30:87:5a:ff:05:a8:60:26:8d:03:
e0:0c:d7:3d:8e:26:64:20:6a:aa:a6:ab:e5:d1:00:
ed:67:6c:25:0a:5d:5f:a4:9a:b7:91:87:bc:bb:00:
d1:2c:e1:33:0c:48:22:bc:6d:17:f5:5e:bd:c3:03:
96:b0:1b:56:70:03:dd:12:ec:db:4d:a5:fe:07:eb:
1f:68:d2:ff:ce:c5:aa:da:db:14:26:72:59:8c:8d:
54:14:62:2f:98:3d:85:ab:1f:70:4e:a0:30:0a:40:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:31:A4:24:9D:A6:7C:9B:21:EA:28:1A:6A:46:B4:7A:7F:36:5F
X509v3 Authority Key Identifier:
keyid:CA:23:1A:43:62:BC:1E:C0:FD:B4:34:99:01:B6:1C:CF:9D:67:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiMaQ2K8HsD9tDSZAbYcz51nnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/bw8xpCSdpnybIeooGmpGtHp_Nl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/856c05-d7b2-499a-af39-39dfa48ea6b9/1/yiMaQ2K8HsD9tDSZAbYcz51nnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.234.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2e:59:84:c9:c7:55:5a:5e:f3:fa:71:3c:e2:26:e2:1b:b2:
95:82:bb:2c:03:88:45:2e:ad:e3:c7:ac:c8:46:dc:5a:04:a6:
44:40:b8:78:0e:66:dc:cd:76:cd:f4:d6:ae:6a:08:96:ea:0d:
31:da:30:a9:15:ac:69:87:0a:67:1c:0d:fc:50:59:e7:14:0d:
40:61:94:dd:a1:be:a4:c2:53:89:43:04:59:00:e9:5a:56:6e:
f8:4b:d5:5a:b7:14:01:30:04:a3:1d:3c:db:d5:bd:50:dc:62:
49:bd:c3:b5:94:f0:c4:c3:aa:f6:a6:69:bf:f9:c7:c1:a9:ca:
76:18:cc:62:d5:87:0b:84:30:11:bb:d8:40:a6:7f:8c:28:d6:
db:a8:13:83:39:ed:85:7e:ed:9e:d3:28:2e:32:9f:86:c6:37:
a9:df:c3:01:97:90:d1:18:87:c2:5c:6d:78:ad:49:73:5d:88:
bf:eb:b3:94:c7:3b:c8:c8:51:4a:3c:ce:0b:a1:5d:a1:ee:2b:
15:f0:68:2a:2f:c4:ce:1a:a1:6a:7d:4d:72:db:2e:48:d6:fe:
a5:f7:6e:2d:80:bb:01:10:7a:62:f8:32:1e:45:f7:af:81:57:
de:72:94:f8:9d:02:fd:a8:8f:61:55:e6:2d:e3:6a:a6:15:06:
ff:63:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:57:06 2024 by rpki-client on console-fra.rpki-client.org