Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/eTjK7Z9YPuL0QnUnSG2cxkPY1Zo.roa
File: eTjK7Z9YPuL0QnUnSG2cxkPY1Zo.roa (raw, json)
Hash identifier: Dw7SjMGPtPzHEV6Ji6CrHMhejN3RyvYHJg0j+DQixbY=
Subject key identifier: 79:38:CA:ED:9F:58:3E:E2:F4:42:75:27:48:6D:9C:C6:43:D8:D5:9A
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 018CC9BC749F16A045A9CEE52038F4D781EF
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/eTjK7Z9YPuL0QnUnSG2cxkPY1Zo.roa
Signing time: Tue 02 Jan 2024 10:33:40 +0000
ROA not before: Tue 02 Jan 2024 10:33:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211046
IP address blocks: 91.205.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:74:9f:16:a0:45:a9:ce:e5:20:38:f4:d7:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Jan 2 10:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7938caed9f583ee2f4427527486d9cc643d8d59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3d:72:7f:c1:2b:58:8a:d1:d2:56:2c:7f:ae:
45:e9:d7:9a:dc:c2:ec:94:0b:24:1b:08:ce:6c:08:
f7:d9:a1:5c:83:68:cd:59:c5:ab:90:58:04:41:49:
db:77:5b:99:c6:8e:6a:19:24:27:73:48:93:f2:ee:
1f:94:fc:a9:95:9e:6f:07:8c:a9:bc:64:8c:96:7a:
3a:93:5e:12:ba:be:55:9a:be:66:8f:f4:bf:8d:a3:
cf:58:7d:85:ee:d5:1b:69:e3:e4:87:9b:e5:5d:60:
20:f9:54:85:60:bb:e4:ec:50:84:3e:51:fa:65:7b:
f9:9e:1c:5d:2f:fb:c0:b2:25:13:6a:9b:27:8f:d3:
8a:91:3d:f6:a6:42:5a:19:f2:ed:08:9c:46:ea:29:
34:1d:f2:85:e7:70:7f:40:3e:81:28:ba:80:87:3d:
56:5d:93:73:4e:f2:df:8d:2c:cb:cd:eb:9b:c9:08:
ad:92:bf:08:d6:b5:02:7b:67:c1:e8:7e:42:63:75:
f8:8a:d8:69:d0:86:b6:b6:fd:35:e2:3b:7d:6d:2d:
6e:80:57:ed:10:04:2b:d1:a9:1c:1c:68:07:88:71:
c5:f8:d4:08:5b:67:cb:0f:dd:f8:2c:dc:82:a8:f5:
2c:c8:a7:0a:e0:1d:7c:3f:0b:58:bf:23:a4:13:c7:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:38:CA:ED:9F:58:3E:E2:F4:42:75:27:48:6D:9C:C6:43:D8:D5:9A
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/eTjK7Z9YPuL0QnUnSG2cxkPY1Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:2b:2c:e4:0d:38:a6:ad:e4:43:60:cd:f4:f0:db:8a:b3:25:
6a:d5:06:a4:4f:da:f6:e6:55:4d:5c:02:c9:0a:a5:d5:2f:fd:
93:db:88:13:87:df:6e:2e:fb:cd:4f:03:2e:c7:08:6c:87:1a:
f0:01:b9:ca:83:55:71:a7:39:ab:9a:ee:03:0c:1d:09:25:78:
cb:68:a7:63:15:57:89:29:8d:45:8f:f6:66:44:7c:45:44:ec:
e6:15:32:16:e3:29:0b:a8:5d:47:2f:8d:fa:11:2f:bf:62:63:
00:c7:24:44:24:89:85:23:fe:12:bf:4c:e7:24:6e:2e:ba:1f:
aa:8b:8d:e7:43:8d:46:33:1b:6b:58:09:3c:58:e9:c6:e5:13:
6c:57:f0:f4:9e:dd:41:85:99:80:dd:aa:1e:65:04:fc:23:64:
58:89:90:b2:ea:0f:b9:8a:38:08:6e:7e:0a:de:47:fd:b8:69:
2e:44:b8:cb:27:8f:b2:ff:ea:91:77:bf:10:21:58:a3:54:63:
72:9d:93:5f:4d:dd:39:85:3a:33:c8:89:65:36:b4:23:a5:59:
1d:a7:e6:a4:63:24:38:ec:89:b0:68:ad:23:69:d2:c4:8c:20:
9e:38:66:d9:c5:2f:a4:8e:10:60:05:30:63:aa:55:6e:bd:2b:
eb:5f:d4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:51:15 2024 by rpki-client on console-fra.rpki-client.org