Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/hjdpDzyfJcbcXzPfGUw7xa-PMWI.roa
File: hjdpDzyfJcbcXzPfGUw7xa-PMWI.roa (raw, json)
Hash identifier: puV3cuBZswZ0g7qo6hn9Cl6XcYj4w4MrXDWddwEMWRY=
Subject key identifier: 86:37:69:0F:3C:9F:25:C6:DC:5F:33:DF:19:4C:3B:C5:AF:8F:31:62
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 01912E6F30C0B228E2054F68E570F9C5C47E
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/hjdpDzyfJcbcXzPfGUw7xa-PMWI.roa
Signing time: Wed 07 Aug 2024 20:02:04 +0000
ROA not before: Wed 07 Aug 2024 20:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47705
IP address blocks: 91.208.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2e:6f:30:c0:b2:28:e2:05:4f:68:e5:70:f9:c5:c4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Aug 7 20:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8637690f3c9f25c6dc5f33df194c3bc5af8f3162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:53:9b:70:9c:1e:90:1a:29:93:40:8e:28:
f8:dd:90:8d:99:f4:c6:6f:bc:a9:99:51:a4:dd:81:
73:9b:15:86:96:c4:96:bb:ca:ff:44:e0:2f:5e:a8:
8e:70:3e:45:05:a9:00:08:25:5b:78:26:a3:6b:1d:
b5:a9:7c:8d:5e:03:09:d4:51:61:fa:85:f6:c0:83:
8e:c2:5e:46:e0:0b:78:4c:d9:0d:d8:ac:74:1b:4f:
e4:6b:4b:f6:11:c8:23:62:d0:f8:38:fd:96:0f:1d:
c9:1e:f0:b1:2a:fd:bb:e0:7e:d0:e2:6e:fa:eb:76:
df:8b:b1:74:c1:24:0f:6e:2d:de:17:14:f8:7f:7b:
12:08:25:7b:ec:11:ce:e3:6c:a3:68:41:f0:6a:5a:
6f:23:03:85:ce:bf:e2:71:c9:13:43:56:95:f4:3e:
7f:d1:3e:ae:a6:62:02:6b:8a:f2:0d:0d:4d:3b:3a:
c1:83:ae:69:3e:ee:36:b0:02:1a:ee:e3:77:46:ca:
9f:c1:b6:65:7f:b7:d1:92:6f:f3:2d:de:87:a2:c5:
a3:0a:cf:1a:e2:59:e0:d6:c4:89:fa:37:33:82:e8:
e6:6b:ce:dc:9b:d1:d4:76:e6:76:a2:84:5d:ba:c1:
8b:da:eb:28:e4:22:12:09:eb:b3:be:bf:7f:22:72:
32:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:69:0F:3C:9F:25:C6:DC:5F:33:DF:19:4C:3B:C5:AF:8F:31:62
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/hjdpDzyfJcbcXzPfGUw7xa-PMWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.97.0/24
Signature Algorithm: sha256WithRSAEncryption
57:70:58:95:55:e4:bb:c6:25:4d:40:f0:8c:c9:c0:83:42:fa:
de:8b:6e:c3:8f:9e:99:b2:dd:bb:6e:65:5b:51:b4:c5:76:f2:
ec:70:b6:f8:ac:44:b8:ee:6f:dd:d0:d5:4a:b1:3c:39:fd:fe:
26:60:11:42:8f:3d:48:0a:f5:a5:fc:82:ae:32:be:f7:e3:8f:
e6:38:8d:94:b8:75:01:aa:82:42:52:aa:d9:74:46:04:3f:28:
72:47:1f:7b:7c:0d:84:70:27:0d:08:91:6a:c1:fb:5c:58:68:
d2:42:65:78:a2:57:94:99:64:5b:47:42:3e:1b:24:6c:da:08:
86:ea:dd:92:ce:47:22:23:5f:7c:68:66:14:e2:d0:27:44:86:
6c:18:97:bf:4e:8f:69:f9:1b:80:9d:90:30:c8:7a:c9:1c:e4:
92:c6:74:71:5e:ca:fe:17:a9:ce:f5:e0:08:2f:cf:5f:e2:95:
9f:b3:4b:86:97:da:e7:97:1e:29:19:6c:f9:57:80:b5:e2:62:
7b:80:ac:cb:33:93:d4:b1:8e:02:59:26:dc:42:e6:b9:36:75:
cb:0a:d2:1e:32:ba:5c:c5:51:50:ec:9f:b7:32:50:b1:be:cd:
c9:97:73:01:d0:8b:fb:f0:14:c0:45:d4:65:1b:c2:84:9c:c1:
19:99:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:44 2024 by rpki-client on console-fra.rpki-client.org