Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/y9QafW2aW54QczE2ylozh7erdDg.roa
File: y9QafW2aW54QczE2ylozh7erdDg.roa (raw, json)
Hash identifier: 6szdWdUuMoDCGErrDaEsRAn4c7xr5ykkwQjOi/h5KQ0=
Subject key identifier: CB:D4:1A:7D:6D:9A:5B:9E:10:73:31:36:CA:5A:33:87:B7:AB:74:38
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 018CC7943A6384005BECEFCC9D52177F2B93
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/y9QafW2aW54QczE2ylozh7erdDg.roa
Signing time: Tue 02 Jan 2024 00:30:29 +0000
ROA not before: Tue 02 Jan 2024 00:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8304
IP address blocks: 91.223.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3a:63:84:00:5b:ec:ef:cc:9d:52:17:7f:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Jan 2 00:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd41a7d6d9a5b9e10733136ca5a3387b7ab7438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:fb:3e:15:22:2c:f9:f4:da:74:2a:ba:8d:
16:fc:3f:34:4d:43:12:e4:70:47:67:34:db:e5:dd:
31:86:2b:58:9d:97:aa:00:04:b7:3d:d6:20:22:67:
52:f2:02:7b:55:ab:c9:ed:c2:46:df:03:b1:7f:81:
4e:30:70:75:cc:07:e5:67:e2:38:14:50:37:44:a2:
a3:9b:4d:9c:d3:ed:68:21:54:19:e4:34:df:58:ad:
34:43:5f:6e:98:ff:a9:fa:54:90:2e:35:5a:be:a2:
ce:af:30:6d:f9:28:54:56:f3:30:cd:75:77:7c:82:
55:d7:1c:8c:e1:66:f0:f4:65:4b:e5:d9:15:4c:56:
fc:56:5d:39:7b:dc:50:a0:75:3a:d2:fb:c2:dc:02:
7b:40:fd:30:50:bb:eb:eb:16:d4:14:5e:87:63:25:
0a:94:53:e7:fc:0c:73:e1:d0:8e:66:38:0c:3d:30:
b0:ea:6c:28:5d:d2:ba:28:bd:85:42:62:1b:07:84:
ee:5a:cf:ca:4a:39:91:c8:94:99:ba:cd:cf:d0:2b:
c3:11:72:83:73:fa:cf:80:64:0e:34:20:43:b3:76:
42:d2:b6:f0:cc:06:ab:3f:73:ad:8d:fe:44:f4:43:
e4:e6:51:01:f3:ab:71:1f:b3:da:4d:a0:06:3e:8c:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D4:1A:7D:6D:9A:5B:9E:10:73:31:36:CA:5A:33:87:B7:AB:74:38
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/y9QafW2aW54QczE2ylozh7erdDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.139.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0d:aa:e4:9d:56:d0:3d:35:20:41:c9:e3:97:50:3f:3b:a6:
10:fb:82:2e:e5:0b:24:f5:00:e9:56:9c:4a:e8:a1:f0:01:0b:
00:c4:50:c4:6f:ef:39:b3:be:81:d4:67:63:5e:9a:26:d9:c2:
52:a3:1f:b1:10:be:82:c5:5d:b0:e0:e4:e9:e1:8d:3c:ba:ba:
6a:e5:89:72:86:f1:43:95:10:86:d1:c6:db:24:ab:63:d9:da:
fa:38:47:96:f1:b8:ef:5a:8c:d3:a7:43:b2:9a:1c:67:da:ab:
36:11:20:f3:82:90:59:d6:cd:92:13:33:8f:b2:65:79:92:70:
b6:44:30:9b:45:69:54:71:c7:7b:93:00:d4:6c:27:09:13:ed:
59:85:c7:1f:3a:4e:cf:a2:18:ef:fd:be:d9:dc:a7:4e:59:80:
66:1e:9f:0b:2f:f1:19:67:72:a0:4b:61:83:76:73:01:ad:cc:
55:cf:51:71:5b:5b:45:e8:5c:44:e7:8e:3d:f1:5f:6a:f7:15:
ae:b1:1e:0f:a2:ce:8b:39:2f:e8:00:76:95:a3:9d:76:23:82:
05:4f:90:42:70:64:fe:54:e3:b2:1b:ee:08:e8:86:ad:0c:8e:
2f:a4:99:f2:04:9f:eb:c1:4b:64:a2:69:e8:4d:a8:73:9a:80:
9b:c0:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:33:21 2024 by rpki-client on console-ams.rpki-client.org