Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/ISmX6pR3QMOPfgJAa_WPJwxjKWs.roa
File: ISmX6pR3QMOPfgJAa_WPJwxjKWs.roa (raw, json)
Hash identifier: LljdnWrrCttV9mVqSLuMgi+OjuwM8a5sDD5hMZbkSj4=
Subject key identifier: 21:29:97:EA:94:77:40:C3:8F:7E:02:40:6B:F5:8F:27:0C:63:29:6B
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 018E23673550560E235A5AFDAFFD3366506F
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/ISmX6pR3QMOPfgJAa_WPJwxjKWs.roa
Signing time: Sat 09 Mar 2024 13:29:10 +0000
ROA not before: Sat 09 Mar 2024 13:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47869
IP address blocks: 91.229.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:23:67:35:50:56:0e:23:5a:5a:fd:af:fd:33:66:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Mar 9 13:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=212997ea947740c38f7e02406bf58f270c63296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:34:31:fe:eb:d3:d2:b4:67:bc:15:7b:11:41:
9b:42:a3:f2:c3:69:06:c0:79:5b:48:ca:1e:a1:b4:
39:25:20:ed:01:fa:48:0d:c4:ff:f0:58:35:b6:ac:
6c:31:4b:65:8f:ac:3a:6f:cd:c0:2c:e9:f2:ea:0e:
42:64:41:f0:e6:c3:e3:0c:d5:62:d1:51:3d:c9:a1:
a9:3a:0f:2a:fc:07:1a:27:19:d5:87:d2:ad:fc:d9:
7b:ef:b0:d8:b4:e9:50:fc:63:6d:b1:28:7c:09:e1:
4a:b3:16:a7:0c:93:dc:8f:67:61:be:81:05:af:33:
c7:13:73:4e:84:c1:e6:9b:ca:52:6c:00:06:2e:1c:
16:50:94:06:94:ce:95:b2:0a:10:47:12:50:54:ee:
9b:8a:ed:2c:2c:af:a3:f4:be:50:b1:80:b9:88:e2:
f7:6b:51:8c:6b:39:8d:eb:c7:56:0a:42:fb:76:4d:
5d:d9:3c:a2:b1:bb:ad:f0:69:ee:9f:85:4b:6b:14:
c7:96:4d:27:2f:1f:f0:02:23:0b:e9:4e:fc:ee:14:
da:49:f0:61:75:b9:cc:5a:0d:50:f5:c8:68:24:3f:
b2:6c:e2:96:aa:93:1e:38:e3:a7:41:5a:57:8f:d0:
78:40:45:60:5f:65:b0:31:1e:11:1f:98:89:85:e8:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:97:EA:94:77:40:C3:8F:7E:02:40:6B:F5:8F:27:0C:63:29:6B
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/ISmX6pR3QMOPfgJAa_WPJwxjKWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:fc:50:2d:96:b2:8f:d3:23:bb:df:40:2f:26:93:79:a2:14:
8d:66:47:82:cd:53:c3:a1:aa:3d:df:84:b9:5b:81:c7:28:8a:
f6:e4:8c:95:1d:29:de:6a:f8:b9:cf:4a:11:10:69:56:a3:3c:
2d:dd:05:76:e4:71:62:1a:77:c9:4e:03:35:b5:db:be:0a:3b:
a4:b8:c7:75:a4:0d:65:1a:39:f1:a0:2f:fe:5f:4c:80:89:4c:
e5:b4:98:9f:5f:54:5d:b5:0a:4d:95:ff:9a:b3:62:ea:f2:35:
72:4e:b9:fa:29:c8:14:85:bf:77:bc:6c:63:ba:1d:be:74:29:
86:6e:5c:63:94:0f:ba:fb:26:84:15:40:20:94:5a:c0:c8:da:
de:03:4a:31:ae:b6:7d:fb:d0:2e:ab:0a:58:82:f2:f3:7a:fa:
aa:2e:8a:94:44:da:dc:d6:82:f5:3b:6a:19:4a:1e:db:74:c0:
08:3c:4a:4b:7e:aa:8a:72:a4:c3:41:2e:2b:4e:f7:16:6d:fe:
04:5f:a4:fd:e9:ee:0a:23:c9:c6:79:35:c2:d8:cb:e9:c7:b1:
2d:3d:d6:70:dc:73:e6:2a:b3:56:99:c1:20:2a:4c:32:b5:cb:
d4:cd:7d:61:b9:c4:22:35:79:6e:f7:84:bf:93:4a:e3:c0:ed:
49:51:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:50 2024 by rpki-client on console-fra.rpki-client.org