Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wBps4pUAVw2qeJVMv_xCiSQsCxU.roa
File: wBps4pUAVw2qeJVMv_xCiSQsCxU.roa (raw, json)
Hash identifier: 4TxgaoQeSGhe1SVKyh2VFrq7Q1AkK1/w6UlLQYmedMM=
Subject key identifier: C0:1A:6C:E2:95:00:57:0D:AA:78:95:4C:BF:FC:42:89:24:2C:0B:15
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0192B7A687C5AE109455EB23A4FF3FEA7A2B
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wBps4pUAVw2qeJVMv_xCiSQsCxU.roa
Signing time: Wed 23 Oct 2024 04:33:17 +0000
ROA not before: Wed 23 Oct 2024 04:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 91.238.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b7:a6:87:c5:ae:10:94:55:eb:23:a4:ff:3f:ea:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 23 04:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c01a6ce29500570daa78954cbffc4289242c0b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:a2:ec:a9:2f:42:33:02:c8:c9:c1:32:73:
4b:ab:b2:da:ac:18:af:3a:c4:01:4c:8b:a3:e4:5c:
bb:8b:a5:89:01:3f:eb:5d:d0:81:66:0b:bb:80:7f:
1d:81:34:70:29:c8:55:e4:a6:14:7f:6d:59:8c:71:
fc:98:8e:f3:c3:ef:83:7c:06:be:1e:06:e9:df:99:
99:05:4d:b5:eb:40:89:cd:db:23:4c:74:b6:01:6b:
b4:45:ec:2d:7e:9e:6f:53:2a:ce:6e:92:70:03:a3:
2a:51:eb:56:6a:3b:e8:74:23:0b:d1:f4:15:2c:64:
cc:fd:69:c9:6e:67:46:ab:32:24:bc:f7:25:21:8d:
a0:e0:24:86:2d:c2:3f:f7:e6:47:c6:ca:a6:e9:32:
48:6a:01:4c:ad:ef:5c:a9:d7:d3:6d:e5:01:7f:a9:
cb:73:31:49:d5:8b:3c:38:eb:84:e2:2e:e9:d0:09:
29:c7:22:38:9a:7b:c2:69:e8:09:68:6d:db:6e:1f:
21:a6:c9:d3:cf:9b:92:f6:06:72:ba:54:51:30:47:
84:02:8e:6d:86:d8:61:94:69:c9:44:62:37:6e:17:
b9:ce:2b:19:e4:91:5d:f8:a0:92:60:10:53:f9:a8:
a7:00:48:c1:e3:e6:a1:d1:92:a6:3d:66:6f:c2:70:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1A:6C:E2:95:00:57:0D:AA:78:95:4C:BF:FC:42:89:24:2C:0B:15
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wBps4pUAVw2qeJVMv_xCiSQsCxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.93.0/24
Signature Algorithm: sha256WithRSAEncryption
af:69:9a:89:7f:e3:c8:d6:50:de:c2:fd:eb:52:c7:43:4a:56:
8d:fb:73:02:34:9b:71:e6:39:25:0e:37:eb:3b:28:0a:7e:17:
73:69:54:26:35:61:fb:a7:cd:1a:d4:32:05:18:89:55:58:de:
cf:1a:cd:02:58:fa:e5:a2:01:80:79:55:8d:4e:b8:7d:28:a0:
41:27:35:21:58:18:8a:60:d9:96:27:d1:f8:4f:31:60:b5:63:
f9:92:69:31:7b:25:e2:b4:c9:87:7f:4b:5f:27:e9:91:c9:a1:
24:cb:4d:0a:f2:ff:d6:46:7d:ac:e0:ed:b1:c9:ba:c6:f1:e2:
25:25:08:47:d8:1b:1c:08:44:56:3c:83:71:d1:06:bf:79:63:
7b:53:78:96:c9:90:2f:67:21:b4:25:3f:5b:4c:d1:99:bf:c1:
9f:47:6d:4f:2a:17:0d:0a:be:eb:ff:49:6c:46:7c:49:5f:59:
ba:4e:3c:05:96:c0:3e:62:91:54:b9:5a:d3:5e:53:77:83:fc:
40:df:2d:9c:a4:71:04:be:03:18:5e:47:92:66:ea:41:01:06:
fc:bb:44:08:d2:3e:2b:3d:77:ce:64:93:d7:f5:78:4f:24:43:
7b:aa:22:e7:59:f4:37:fe:d2:2f:73:39:30:75:39:e1:9a:aa:
69:fd:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:05 2024 by rpki-client on console-ams.rpki-client.org