Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/ropON9Ehwv9HnEPif6DKTZ18Cqc.roa
File: ropON9Ehwv9HnEPif6DKTZ18Cqc.roa (raw, json)
Hash identifier: 0ZxEenwVb6eZd8WOZopdF9EYlBLm8bbQqxxe7QX3Mbk=
Subject key identifier: AE:8A:4E:37:D1:21:C2:FF:47:9C:43:E2:7F:A0:CA:4D:9D:7C:0A:A7
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 01903CC04EC2E10730B79B58568A4DF1BAC5
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/ropON9Ehwv9HnEPif6DKTZ18Cqc.roa
Signing time: Fri 21 Jun 2024 21:42:34 +0000
ROA not before: Fri 21 Jun 2024 21:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49556
IP address blocks: 91.223.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:c0:4e:c2:e1:07:30:b7:9b:58:56:8a:4d:f1:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Jun 21 21:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae8a4e37d121c2ff479c43e27fa0ca4d9d7c0aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:96:90:db:03:ba:8a:67:11:b3:bd:0f:11:
b6:57:ff:51:f5:25:e5:27:7c:6a:d1:b0:15:d8:59:
b7:ae:15:07:86:2c:ef:b4:25:5e:3d:0b:23:9c:cc:
72:ac:83:88:e8:1c:46:ee:01:aa:23:9a:dc:3c:9d:
e9:66:2a:08:5f:93:a3:32:54:23:fa:58:f2:96:3b:
4b:de:77:5d:27:72:73:d6:65:d0:e7:2b:7a:d2:b7:
69:78:75:86:2f:19:7d:61:b3:14:3d:58:07:3e:3e:
4d:5b:70:2e:03:27:f3:d4:69:e7:cb:ff:bf:52:e2:
df:19:50:42:10:56:6a:aa:b7:c8:5e:cc:0c:d9:37:
7d:d2:1e:ce:1c:92:55:6f:df:24:d9:15:7f:27:91:
36:8b:9c:e9:18:2a:7d:de:b0:0c:55:bc:d3:da:7d:
e7:42:63:d2:14:c8:1f:ad:f9:19:0f:92:1b:9a:e9:
37:ea:19:bd:f0:53:d7:ac:d3:fa:9a:95:5b:f0:87:
cf:ac:7a:55:e4:46:6f:28:e2:4e:cc:ea:3a:2c:cb:
d7:10:f9:02:0a:fd:71:db:10:7b:3f:d2:d0:33:47:
68:b3:ae:92:32:3f:3f:07:63:35:4f:8c:14:db:cf:
78:ff:df:fe:a4:aa:d8:55:c4:22:01:8e:d8:9b:58:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:4E:37:D1:21:C2:FF:47:9C:43:E2:7F:A0:CA:4D:9D:7C:0A:A7
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/ropON9Ehwv9HnEPif6DKTZ18Cqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.61.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2a:91:24:78:de:1f:63:05:71:d1:14:c1:3c:07:1d:33:2a:
13:d1:56:d5:52:20:69:37:5e:c4:a7:dc:0f:48:42:34:b0:de:
92:65:37:1d:15:60:b2:61:b6:4b:45:1f:01:6a:66:d4:f7:c9:
ad:31:ce:33:68:68:52:2d:56:5c:13:62:06:18:cc:20:6a:14:
98:cc:75:36:3d:3f:0b:51:e9:de:9e:fe:ed:11:76:a3:38:2b:
dc:00:5f:f4:5e:ca:95:04:45:76:4d:a8:90:40:9c:db:c9:2d:
b9:42:57:74:10:6c:b2:e9:65:b3:42:48:67:44:f6:05:55:06:
f7:16:03:d3:8f:77:f5:1b:89:20:4d:e6:76:5a:4f:7c:8a:eb:
a3:68:fe:af:a1:eb:6b:9b:77:0c:53:0c:40:a6:97:da:9b:20:
4a:01:d5:f0:1f:e7:7c:2b:62:e8:b6:82:b4:32:15:1a:9a:95:
52:88:60:22:31:68:f6:1f:9a:76:28:c7:cb:2a:36:a7:a2:a3:
f7:e5:41:c3:45:7f:e2:21:8f:0a:8c:de:1a:e0:3e:70:7d:aa:
fd:3a:14:17:dd:3e:57:dd:b5:b4:04:82:a6:24:06:f7:91:da:
bb:2c:a2:ac:c8:89:72:f9:c2:77:a9:54:e5:90:0d:6b:e3:b7:
78:fc:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:35:39 2024 by rpki-client on console-ams.rpki-client.org