Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/CtO64NKwbXidkBCNTOvYhDNir0k.roa
File: CtO64NKwbXidkBCNTOvYhDNir0k.roa (raw, json)
Hash identifier: rwZ8elYp5JT6OWhcMMftCqOsL5Uh1qmyB01hMaBNN9I=
Subject key identifier: 0A:D3:BA:E0:D2:B0:6D:78:9D:90:10:8D:4C:EB:D8:84:33:62:AF:49
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 018CC3B74457EDF09152AD62FDCEAC23D0B4
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/CtO64NKwbXidkBCNTOvYhDNir0k.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49435
IP address blocks: 91.220.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:44:57:ed:f0:91:52:ad:62:fd:ce:ac:23:d0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ad3bae0d2b06d789d90108d4cebd8843362af49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:1f:9c:53:f3:e6:ef:9c:8a:56:02:20:9e:
b7:c7:85:33:e5:e2:c7:2b:c6:b7:74:ce:cd:85:4a:
a9:fe:5c:b3:27:78:e2:d4:3a:b7:81:63:83:43:ea:
3b:fc:bb:fd:0b:50:8e:67:3e:cd:cb:f1:1e:b3:aa:
39:90:63:80:a5:81:b1:fe:fa:2a:0e:80:44:c6:bd:
09:55:c8:d8:1e:e5:2b:c1:cd:cc:72:1c:c5:d9:b4:
84:ad:22:08:bf:3c:e3:10:c1:eb:45:f0:36:df:b3:
cf:3f:c6:cf:26:5b:7f:d7:c1:3f:5e:ff:68:83:ac:
95:c9:09:36:8c:ea:5e:56:b7:99:b0:05:47:71:48:
98:77:e8:b5:c6:af:f7:ea:60:74:a6:10:67:51:89:
4a:c0:71:f4:c1:57:09:c2:8c:e9:01:7d:e8:9a:60:
67:64:12:db:15:5a:ce:e0:61:2e:9f:87:46:e9:95:
90:a8:1f:12:52:47:35:7b:0f:70:4f:1a:1b:7f:e7:
1e:fc:79:b6:b3:40:d5:1b:59:1a:ee:d0:0c:e0:3c:
09:48:c9:3d:c5:46:ed:e5:64:ef:ef:e9:b5:03:23:
5a:eb:e8:63:0c:f9:4e:1c:4e:cd:4a:2f:49:7b:15:
2d:d3:c1:db:dd:51:93:87:6c:28:28:79:96:32:68:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D3:BA:E0:D2:B0:6D:78:9D:90:10:8D:4C:EB:D8:84:33:62:AF:49
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/CtO64NKwbXidkBCNTOvYhDNir0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.34.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f1:7f:0c:41:10:51:28:88:5a:04:4b:61:36:19:99:e6:fd:
0e:cd:87:e0:af:58:53:21:3a:3a:23:08:a6:4e:e8:d4:82:f0:
b2:7d:cd:66:bb:91:01:9f:57:9d:11:ba:dc:f0:f4:c6:c4:27:
66:ff:2c:9a:43:39:cb:c9:d6:cf:a4:57:c4:42:cd:b2:9b:35:
f5:e5:96:7a:6d:90:b3:df:6b:da:46:e1:7a:38:b2:cb:b0:8f:
8e:d2:2a:0f:a8:c0:b7:f6:19:ec:0d:63:ae:0c:c4:de:75:1a:
30:92:e0:9e:ae:7b:06:6c:56:31:43:99:a5:2f:df:3c:09:18:
6d:b1:1c:ac:2e:10:af:66:7e:b3:1c:27:32:19:1b:fa:05:5b:
9e:f4:42:e5:6d:a4:9d:f1:63:ba:09:19:86:bc:68:4a:a5:2f:
11:9d:63:6f:00:c2:ac:24:6f:ca:25:ea:d3:f3:19:ee:d3:d7:
17:d0:de:7d:20:22:f5:d2:6f:d5:3e:32:aa:1b:fe:d0:25:a7:
31:69:95:4c:fe:92:c9:82:fb:07:a1:4d:22:7f:b2:54:6f:d4:
83:4f:50:e8:52:c4:59:cf:84:42:72:86:39:1c:97:71:58:20:
90:08:65:a7:1c:f3:dd:46:eb:82:be:59:7e:ad:7e:b3:bf:e7:
46:1a:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:45:16 2024 by rpki-client on console-ams.rpki-client.org