Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/pbtL8KQCQMTjd0KV58RPCEl3e2A.roa
File: pbtL8KQCQMTjd0KV58RPCEl3e2A.roa (raw, json)
Hash identifier: pTpBb+psk6drGCYzkcDayTNoZ2vn069aCqczKpx1Pqo=
Subject key identifier: A5:BB:4B:F0:A4:02:40:C4:E3:77:42:95:E7:C4:4F:08:49:77:7B:60
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 018CC94DA9CE5CF202A906B7493C1523A1C2
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/pbtL8KQCQMTjd0KV58RPCEl3e2A.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31367
IP address blocks: 91.216.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a9:ce:5c:f2:02:a9:06:b7:49:3c:15:23:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5bb4bf0a40240c4e3774295e7c44f0849777b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:78:2f:fb:87:0a:79:61:e3:19:41:b4:ef:
e2:40:64:dd:94:8c:30:4c:34:6f:f7:b6:8c:10:80:
15:f0:e8:ee:e3:57:c2:66:1b:c0:b7:7f:68:0d:b5:
69:d5:92:90:c5:1e:84:67:38:db:50:f3:b5:a4:59:
fc:2b:86:fc:4d:d3:29:1a:12:68:9c:af:34:4b:6c:
7e:c1:c5:f6:22:35:ab:c7:a2:bc:fc:d4:c6:55:65:
08:b9:3a:8a:aa:3e:83:8c:d3:c1:38:eb:12:e4:30:
b8:7b:93:34:5d:ba:50:d8:8c:2d:9f:6d:65:99:5c:
e5:61:2c:5c:7a:33:27:eb:7b:d2:e7:75:d0:4b:b4:
5b:4e:15:e0:10:8e:ed:e1:92:12:f2:4f:ff:7e:87:
7b:4c:51:e6:bc:82:4e:66:b0:3c:23:c9:3b:31:d0:
4e:d2:d7:42:fb:8e:ba:b7:b0:18:c0:24:37:8b:fc:
c4:94:4a:a3:0b:d0:8f:bd:c0:8b:6d:ef:b2:36:da:
b3:99:17:d1:9c:c5:38:48:ef:86:0a:99:72:27:83:
df:8b:be:d6:76:19:17:10:33:fd:73:59:0d:58:21:
32:1a:32:ff:dc:bf:49:e6:80:49:c0:0c:02:3d:48:
55:48:0a:41:d0:88:55:a9:35:1a:64:a5:69:55:a3:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BB:4B:F0:A4:02:40:C4:E3:77:42:95:E7:C4:4F:08:49:77:7B:60
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/pbtL8KQCQMTjd0KV58RPCEl3e2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.11.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6f:b8:e1:85:30:92:0b:12:0b:69:38:42:75:87:b4:3f:43:
4a:31:29:df:bd:06:51:7f:55:f3:30:ca:e8:81:eb:b4:ca:0c:
61:9e:24:e2:ca:05:e4:c5:80:79:8b:83:0b:3c:49:c2:25:21:
ec:ef:0a:04:50:e2:e0:fc:83:1e:88:e3:42:8c:f2:c6:45:ee:
da:66:7c:27:01:b1:b0:96:c2:c0:cb:cc:e9:68:d5:44:4c:a7:
4b:f8:dc:95:d3:da:80:19:57:62:d1:bf:67:8d:87:df:99:e0:
46:f2:4e:8a:8a:57:d6:62:51:e2:2c:ec:2c:ef:dd:d6:e8:70:
42:93:27:7d:a8:c9:9f:49:b4:1a:04:b9:a3:72:50:b5:04:86:
06:80:98:e2:7b:25:ed:82:ea:15:b1:0b:21:86:4f:b7:ab:04:
95:f5:ba:53:e8:05:30:a3:d4:18:a4:33:e4:06:a5:00:44:5f:
df:54:5d:dd:2f:a9:28:e5:5b:51:ec:b7:8c:fc:33:b3:8a:34:
42:b5:f5:64:86:93:87:86:41:c5:b8:ba:92:07:77:96:40:1d:
73:d7:dc:f0:85:41:d4:04:d6:5d:93:23:32:6c:29:05:bd:6a:
05:75:9a:4e:01:b3:a0:9e:6d:9a:30:54:d1:c1:3c:b9:8c:cb:
ef:0e:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:33:46 2024 by rpki-client on console-ams.rpki-client.org