Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rXgHiUHV7QV0uEt7Bh6f6GMgubk.roa
File: rXgHiUHV7QV0uEt7Bh6f6GMgubk.roa (raw, json)
Hash identifier: lLAUFFyhyL0kzii+RqRxSXefdbBuI6btfyJPnGUEdtc=
Subject key identifier: AD:78:07:89:41:D5:ED:05:74:B8:4B:7B:06:1E:9F:E8:63:20:B9:B9
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0190048578EC8D348502EBA17C7DCD15040E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rXgHiUHV7QV0uEt7Bh6f6GMgubk.roa
Signing time: Mon 10 Jun 2024 23:39:34 +0000
ROA not before: Mon 10 Jun 2024 23:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 91.239.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:04:85:78:ec:8d:34:85:02:eb:a1:7c:7d:cd:15:04:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 10 23:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad78078941d5ed0574b84b7b061e9fe86320b9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:f1:c3:0d:7b:39:04:f9:f3:43:16:06:55:
44:31:34:08:a6:5e:85:d2:01:09:47:7a:ca:81:4e:
82:27:ba:3c:71:06:1f:09:0d:76:85:a1:62:b3:d3:
fc:01:1e:9c:10:9f:0a:4c:e1:da:88:9c:82:ab:57:
3c:58:4d:af:6a:fb:c8:b7:90:09:a6:b4:88:97:ac:
7e:bf:ce:76:f7:a4:9a:81:91:38:b8:7a:cf:a1:d4:
4f:69:c9:4b:3b:56:51:fa:44:d2:70:fa:b4:19:15:
8e:e7:b8:e8:43:ae:af:84:11:71:83:bd:ec:43:25:
e2:8c:42:70:a4:9f:f5:f7:8c:b8:6a:1e:5f:c3:56:
4e:5e:81:44:5a:75:c1:90:6b:0c:36:f5:61:c8:d6:
04:11:bb:7d:97:74:98:ec:b6:7a:47:7c:a6:17:40:
67:7d:23:db:a3:51:1c:47:b1:c6:fd:9d:6b:30:67:
74:04:5f:88:27:55:c1:72:5f:86:05:a2:58:44:90:
8d:0e:49:ae:d3:1f:c4:a9:ab:09:56:b3:97:b7:34:
27:b5:27:78:08:89:cd:58:8a:1c:d5:8a:0a:da:f6:
cf:05:02:5d:ae:a7:a2:5a:4e:cd:a0:90:17:28:94:
d9:9d:d6:a5:e1:72:ec:57:ed:36:f0:34:c2:7d:eb:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:78:07:89:41:D5:ED:05:74:B8:4B:7B:06:1E:9F:E8:63:20:B9:B9
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rXgHiUHV7QV0uEt7Bh6f6GMgubk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a4:50:fc:af:cd:96:30:8c:2f:19:6c:5b:3d:6c:10:d7:1c:
40:1e:77:7c:85:92:65:9c:d2:de:6d:13:ca:37:7f:01:41:a8:
3b:b0:87:31:ba:58:ea:ca:26:75:2d:11:49:7f:65:10:04:8f:
94:bb:dd:71:fe:31:da:e5:00:25:db:10:2d:25:c4:91:b5:8a:
98:c2:06:de:98:d4:dd:59:18:75:e0:b6:a7:0a:ff:1d:4a:ad:
f0:cd:ab:06:46:9d:4c:9b:34:63:16:46:3c:3a:06:38:b7:33:
51:a0:e5:56:d2:37:b3:07:8d:a2:ae:83:38:fb:87:1a:7b:23:
37:ac:8f:c9:1f:ab:3b:d0:fe:6c:73:62:98:32:21:71:c1:75:
dc:6f:6f:63:68:8b:40:8e:77:86:5a:b7:c9:b0:0e:da:cd:67:
be:a1:78:a0:86:ee:7f:8b:cc:1a:d7:ca:0f:76:f9:22:7c:24:
99:47:f8:91:f1:83:cf:60:94:15:9a:a6:54:a5:e9:27:76:c5:
21:d5:f7:88:72:12:31:0a:4d:72:ee:09:a2:9d:56:ab:98:a4:
2e:8c:a6:52:8d:b6:b9:de:8a:3e:e5:a4:55:da:d6:ac:35:81:
a6:dd:70:82:c4:a0:41:01:16:20:b2:61:92:43:04:00:18:f0:
96:fd:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:05 2024 by rpki-client on console-ams.rpki-client.org