Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/1-sO9bpSCHY3pcf1vjjU7QQNW2bs.roa
File: 1-sO9bpSCHY3pcf1vjjU7QQNW2bs.roa (raw, json)
Hash identifier: t9lXRBcErlfLVHvB3zwXMXA2GlU1/A3M7QeqNMmh1wk=
Subject key identifier: FA:C3:BD:6E:94:82:1D:8D:E9:71:FD:6F:8E:35:3B:41:03:56:D9:BB
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 018CC6B899ED6C5FD802D692CEDEA3E17C23
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/1-sO9bpSCHY3pcf1vjjU7QQNW2bs.roa
Signing time: Mon 01 Jan 2024 20:30:35 +0000
ROA not before: Mon 01 Jan 2024 20:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12859
IP address blocks: 91.230.244.0/23 maxlen: 24
91.233.105.0/24 maxlen: 24
194.33.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:99:ed:6c:5f:d8:02:d6:92:ce:de:a3:e1:7c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Jan 1 20:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fac3bd6e94821d8de971fd6f8e353b410356d9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:4c:2c:6c:9c:67:c5:56:46:c4:eb:1a:01:
0e:94:c7:cc:43:8d:b0:db:10:fc:3f:00:0d:94:80:
84:b2:9f:4d:3f:f6:d4:25:69:86:42:d0:42:94:65:
b9:02:e5:ea:75:c6:b1:3c:59:18:86:85:ab:a1:26:
33:05:c8:d5:62:2b:45:ec:ff:29:bd:c6:e5:54:1f:
41:b0:d5:93:17:df:24:0d:79:1e:bb:08:c5:ea:d5:
8e:af:94:f8:2b:fe:08:d0:76:f2:a5:da:bb:3e:01:
03:c3:ac:da:c8:e9:ac:a3:3f:1d:ed:42:00:8c:50:
02:aa:5d:fd:27:fb:63:75:ed:f7:93:cb:73:bd:dd:
65:c2:79:c9:63:f7:57:5d:74:37:17:eb:c3:51:13:
4f:76:2c:77:9d:94:bf:1b:b0:f9:fe:df:59:af:98:
e6:8b:10:30:9c:7d:72:78:7c:44:3b:b9:dc:e1:d9:
af:2e:b0:ed:2c:33:da:6c:57:2e:72:77:45:54:ce:
6f:c7:22:e7:6c:05:f6:33:ad:00:ad:03:a9:f2:62:
b8:3a:90:f3:86:a5:11:32:4e:f1:5a:71:f7:43:b9:
fc:b1:b0:2a:e5:06:31:1b:d9:3a:a3:58:8c:86:c6:
b9:45:c5:ac:8d:8b:9a:78:dd:52:b5:c9:01:9c:eb:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:BD:6E:94:82:1D:8D:E9:71:FD:6F:8E:35:3B:41:03:56:D9:BB
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/1-sO9bpSCHY3pcf1vjjU7QQNW2bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.244.0/23
91.233.105.0/24
194.33.112.0/23
Signature Algorithm: sha256WithRSAEncryption
34:31:c8:49:28:1d:02:35:ad:df:91:c1:4c:97:fd:ae:18:ca:
2f:5f:a5:22:58:07:32:6d:28:1c:69:ee:fd:44:00:71:38:0a:
77:9e:01:69:00:11:83:2a:b6:af:e1:c3:6e:e2:10:22:93:53:
4f:71:a5:1f:8c:be:2e:46:2c:74:85:33:69:00:57:04:df:00:
05:e4:2b:95:41:4b:42:9e:23:93:eb:32:69:4d:ef:46:c9:0d:
05:6c:09:fa:00:8b:dc:09:5e:8c:8c:f6:1f:1d:7c:c8:3d:e0:
65:77:74:b1:7d:29:4e:c0:67:68:0e:fe:d3:d4:27:f8:3e:4d:
c5:9f:86:6a:fb:9c:00:fb:94:47:f7:81:de:eb:77:c9:8f:96:
6e:aa:33:40:07:22:13:df:68:e5:d7:fb:70:bb:72:7d:2d:55:
e3:c3:08:56:5d:1f:92:68:30:14:b1:1f:d6:eb:77:66:6f:f3:
f0:18:7b:d0:27:f2:db:a4:be:be:ed:70:b4:5f:6d:1b:76:b4:
a9:25:5f:20:fc:f0:c3:23:13:bf:a3:d2:cf:35:39:e3:1e:29:
ae:3d:3b:18:75:89:84:81:f9:1e:d5:b5:64:7b:8e:17:c1:de:
e1:65:8c:f2:dd:18:50:4c:8e:75:e8:c0:12:ee:3a:17:2a:64:
af:a6:0a:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 2 14:33:02 2024 by rpki-client on console-ams.rpki-client.org