Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/_7XF_J_mPDANHxsGvqVu8pSlUuQ.roa
File: _7XF_J_mPDANHxsGvqVu8pSlUuQ.roa (raw, json)
Hash identifier: jsSSSAfb2OwW2QL8sSnKHPAEVs+qtfqpJezquD3e+f8=
Subject key identifier: FF:B5:C5:FC:9F:E6:3C:30:0D:1F:1B:06:BE:A5:6E:F2:94:A5:52:E4
Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial: 018CC26D884AAE3ADC44E4BC9CF82DA0074C
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/_7XF_J_mPDANHxsGvqVu8pSlUuQ.roa
Signing time: Mon 01 Jan 2024 00:30:07 +0000
ROA not before: Mon 01 Jan 2024 00:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39923
IP address blocks: 91.216.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:88:4a:ae:3a:dc:44:e4:bc:9c:f8:2d:a0:07:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Validity
Not Before: Jan 1 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffb5c5fc9fe63c300d1f1b06bea56ef294a552e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:9c:c9:1a:08:17:68:93:3d:e5:fd:a2:de:
16:99:19:97:b7:48:2a:62:f7:00:da:9c:3f:f2:7d:
e9:ec:36:4c:40:66:33:f0:64:fb:bd:87:4f:03:4f:
98:7b:f9:17:a3:30:99:c3:64:4e:2c:89:46:6b:1a:
91:a9:00:90:e4:e5:c2:d7:7f:bf:ea:2f:26:50:64:
45:8c:c2:ea:d3:07:11:8c:9e:d0:11:26:01:78:dc:
02:5e:a8:6b:37:0b:a9:d9:2c:a2:7a:3f:51:32:ef:
be:90:5c:fe:da:c4:08:a3:46:09:ae:fa:0e:43:49:
d4:b8:50:49:f6:47:16:8c:a7:1e:5f:86:6d:46:50:
6c:a0:0c:a1:27:a8:44:75:0d:2e:90:7f:31:4c:3e:
7a:d4:ed:e8:b5:28:b3:a4:59:2d:95:aa:e5:cf:c5:
13:7b:cb:45:cc:d1:66:27:b1:2d:52:dd:0f:e3:02:
4b:8b:73:f3:6f:f0:d8:18:59:9f:b9:74:ff:1e:a4:
55:4f:44:f8:92:d2:a0:7e:db:5d:94:2d:bb:62:5b:
49:a5:dd:89:2b:7e:97:1a:ac:22:9d:3f:d4:7e:ef:
03:94:3b:25:e5:a3:cf:18:3c:02:51:a8:8e:41:28:
e0:d6:ef:4e:46:e3:39:73:5a:b9:6a:85:12:01:1b:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:C5:FC:9F:E6:3C:30:0D:1F:1B:06:BE:A5:6E:F2:94:A5:52:E4
X509v3 Authority Key Identifier:
keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/_7XF_J_mPDANHxsGvqVu8pSlUuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b6:23:dc:ce:8c:ee:c3:f5:9a:87:16:b1:1a:8c:1d:56:60:
49:7b:d9:1a:f8:41:c1:95:e8:ea:6d:1a:c4:5b:78:7e:59:1e:
0b:cb:b9:fa:97:0d:01:87:38:f0:a2:0e:d3:d6:18:9f:27:ed:
e7:e1:d3:c0:49:57:9a:cc:1c:b2:83:f9:71:ba:93:4b:c5:0d:
58:19:2f:bb:b3:c4:0d:2b:66:df:05:85:88:81:3e:8c:a2:0d:
b3:d5:45:97:c2:e8:8c:38:27:58:23:84:8f:ac:ca:fe:cf:ac:
9f:17:e4:31:8b:cb:0a:8a:40:57:c3:5e:48:39:e0:10:42:9f:
2b:56:cc:77:4d:0e:1e:55:e8:87:f0:ac:2d:30:9d:88:31:36:
af:9d:d1:a3:16:c0:ae:bd:8a:a3:c7:ed:2f:3e:80:a2:32:e6:
af:94:dc:e2:e8:a8:99:72:e3:20:f8:e5:b2:2a:29:f3:d4:ab:
90:39:20:df:72:4d:15:08:92:62:b1:19:7a:80:03:d9:91:19:
4c:70:e0:cc:be:b8:4f:c2:a2:84:63:70:8f:f7:b0:20:7b:b0:
46:4d:d0:76:fe:b6:40:d5:47:03:c4:8b:5c:61:8c:50:03:f2:
4e:13:64:ba:2c:e1:ef:0a:03:54:64:8b:15:7a:69:f3:49:30:
6f:20:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:46:41 2024 by rpki-client on console-ams.rpki-client.org