Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/vxQZeK6cv6GPML8GT15GLJraLKg.roa
File: vxQZeK6cv6GPML8GT15GLJraLKg.roa (raw, json)
Hash identifier: AZhK1kvRAEacKCfVqSrRlTY68xImN6iTpQMuCALlMek=
Subject key identifier: BF:14:19:78:AE:9C:BF:A1:8F:30:BF:06:4F:5E:46:2C:9A:DA:2C:A8
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01936910D674F1B973383AE126410BA5B9FE
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/vxQZeK6cv6GPML8GT15GLJraLKg.roa
Signing time: Tue 26 Nov 2024 15:22:11 +0000
ROA not before: Tue 26 Nov 2024 15:22:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 91.217.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:10:d6:74:f1:b9:73:38:3a:e1:26:41:0b:a5:b9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Nov 26 15:22:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf141978ae9cbfa18f30bf064f5e462c9ada2ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:8e:91:eb:4c:ec:68:3f:cf:98:6b:51:8a:
7c:42:20:73:25:e2:48:ab:87:bd:3c:d8:75:a1:53:
4f:6d:0e:da:81:e6:2a:ca:82:c1:06:8a:5d:1f:5e:
da:92:b5:7c:f4:10:52:d7:18:2b:54:3a:b2:37:6f:
93:85:20:71:4c:0d:e3:8c:a4:80:f3:6c:b1:ab:a9:
15:4b:4d:2a:a8:b6:22:fe:e2:e3:a2:3d:de:c8:35:
e0:47:f3:d5:55:13:57:db:ee:b6:5e:f8:f2:1f:ee:
b2:48:ba:c4:f8:0b:e2:e8:12:46:8e:1b:a6:71:f5:
a2:ed:2c:0c:36:0f:f1:6e:b7:3d:47:e3:67:84:45:
c8:e2:9f:e5:8e:65:7a:dc:27:7a:e0:b3:84:5a:c4:
cf:64:09:c0:52:53:64:48:0f:28:b5:6e:cb:55:26:
fb:e4:64:46:2c:3b:39:22:04:a6:81:6e:58:3a:71:
93:c2:56:e0:b0:e8:0b:13:b0:07:e1:27:aa:6d:b9:
11:bb:d9:18:e1:b6:eb:a2:de:7b:8d:66:0a:e4:22:
7e:5b:0b:ec:2e:e2:74:55:04:61:4e:41:50:7d:29:
18:1b:73:86:40:43:87:9b:da:50:86:ab:a8:20:12:
80:ad:6f:8b:29:b5:b0:91:6a:b1:c0:58:67:e1:60:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:19:78:AE:9C:BF:A1:8F:30:BF:06:4F:5E:46:2C:9A:DA:2C:A8
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/vxQZeK6cv6GPML8GT15GLJraLKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6e:c0:c1:c1:26:e3:06:79:ff:51:8e:29:11:0e:c9:c0:24:
c4:82:6d:d1:aa:b9:09:ef:ae:d2:1e:ec:fe:4e:19:c7:8b:ac:
03:bf:68:fc:66:2b:c0:b4:84:e0:92:76:7e:4d:65:37:f3:97:
41:be:07:0f:9c:97:db:24:b5:2f:d8:1f:53:d4:10:0a:5c:2d:
a6:83:31:64:e0:72:3c:dc:e1:aa:49:e5:06:df:82:42:74:00:
e6:4e:ad:d0:77:ba:25:7d:b4:3e:cf:9d:34:f8:52:2f:db:9e:
54:91:17:a2:05:eb:87:98:6b:da:5a:d7:89:65:1a:ad:af:c6:
0d:60:38:15:35:3c:09:24:eb:35:0a:e3:c2:5d:89:d2:1c:00:
36:ac:4d:97:b8:87:98:88:cf:ea:d9:af:9b:62:77:52:21:41:
26:93:0c:ba:02:f1:f1:52:59:cf:97:34:e2:ca:83:ff:34:4d:
f3:77:85:bd:54:78:d1:42:0f:d4:31:e0:16:95:3a:43:ed:09:
5e:5b:ed:b3:1f:30:4b:26:b3:ed:3c:dc:c6:a3:e3:15:77:31:
22:d7:d3:d3:d1:22:dd:ee:b2:cb:27:5c:ba:7c:7a:32:cf:fa:
8f:07:89:56:b7:25:da:49:29:4a:96:23:94:9d:e2:3d:49:cb:
3a:8a:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 17:53:49 2024 by rpki-client on console-ams.rpki-client.org