Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/iI3jJU2eI3m78H8QE9sH5t8vkiI.roa
File: iI3jJU2eI3m78H8QE9sH5t8vkiI.roa (raw, json)
Hash identifier: TSggtqGr27mQn8zZjHAMRv4x/1YJRMajNh3tBIw+Pgg=
Subject key identifier: 88:8D:E3:25:4D:9E:23:79:BB:F0:7F:10:13:DB:07:E6:DF:2F:92:22
Certificate issuer: /CN=d0174be426ca4511343754dea37d6a360a34a9b8
Certificate serial: 018CC7934DE3033DA3FD995E02779FFD595C
Authority key identifier: D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/iI3jJU2eI3m78H8QE9sH5t8vkiI.roa
Signing time: Tue 02 Jan 2024 00:29:28 +0000
ROA not before: Tue 02 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197071
IP address blocks: 91.217.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4d:e3:03:3d:a3:fd:99:5e:02:77:9f:fd:59:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0174be426ca4511343754dea37d6a360a34a9b8
Validity
Not Before: Jan 2 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=888de3254d9e2379bbf07f1013db07e6df2f9222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:7a:79:11:7d:2a:6b:f2:83:5a:c8:2b:35:
be:1e:fc:a0:e6:e9:a3:41:ce:d9:20:94:f9:34:fa:
7e:3f:cb:fd:c1:d3:ff:55:35:81:d6:93:b2:4a:ad:
3b:e2:0a:ab:80:c7:78:b9:16:c7:44:c9:c8:84:cd:
29:6c:92:b8:72:a1:e0:b3:2c:56:81:20:75:3a:bc:
2f:57:a1:d8:f9:7c:26:a1:8d:ad:b0:34:9c:d1:df:
82:2f:57:45:9a:d7:37:3d:9b:ae:d8:1b:69:af:ac:
db:85:4c:b3:3a:5d:6d:f2:65:e6:35:40:72:97:76:
f2:0d:e7:58:ff:1f:ce:a4:8a:0a:55:0f:0b:7a:73:
42:f8:31:8c:d4:3d:b8:d8:01:8c:dd:49:43:b8:3d:
36:ed:7c:30:7d:47:11:69:eb:88:7f:ab:b8:b8:cc:
df:1b:30:f6:5c:89:63:6e:eb:17:3f:fa:0a:88:05:
47:ed:98:80:da:be:45:76:9c:22:be:8d:91:52:d8:
1e:90:af:be:74:4d:b4:86:8e:f7:30:96:3b:9b:9c:
46:8d:bc:1a:6d:a2:f5:cf:e0:ad:a8:fe:5e:b9:26:
f1:d0:54:bb:cb:6c:3b:09:08:d2:47:ad:e0:46:77:
55:eb:83:18:ec:db:84:a2:87:24:24:7a:c6:83:d4:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:E3:25:4D:9E:23:79:BB:F0:7F:10:13:DB:07:E6:DF:2F:92:22
X509v3 Authority Key Identifier:
keyid:D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/iI3jJU2eI3m78H8QE9sH5t8vkiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.251.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9f:0e:1f:c8:12:20:57:9e:fc:62:56:a6:ab:2d:70:92:72:
12:66:be:e3:f0:1d:f0:6d:b9:65:84:47:59:af:1c:41:61:ba:
cb:ac:a5:65:cc:87:d7:76:b3:86:c8:30:31:3a:af:62:72:57:
a8:9d:74:1b:32:db:53:f3:e4:9b:8f:64:28:3d:6b:66:64:5f:
3a:15:d2:2f:9a:d7:8d:16:e7:2d:d9:14:c9:eb:3c:6a:22:5d:
e5:b7:f3:dd:a7:36:2a:4a:d5:3a:4e:7f:7e:f4:e7:d1:60:fc:
cd:3c:5e:2b:d1:a0:33:1a:54:04:6e:c9:fb:00:b2:ac:7a:fd:
bc:8d:4d:ac:c5:68:4d:09:71:5b:e8:f5:58:af:16:4b:d7:d5:
90:47:11:1f:12:d0:5b:59:1c:cc:e7:30:60:cc:d3:d9:d7:7a:
30:0b:fd:85:2a:4e:76:70:ab:9c:f2:c9:28:d6:fa:8d:6c:08:
c8:32:ff:74:a0:be:98:3b:9e:ea:f9:13:71:67:f0:18:90:32:
31:30:dc:3b:b0:8f:59:7f:6c:df:6c:05:da:bb:31:a0:d2:90:
c6:7e:7d:5d:94:2f:5e:72:c9:12:14:f5:ff:3d:9c:e5:e7:aa:
41:38:df:d3:46:65:35:94:6d:7d:0c:19:b4:65:9f:72:39:d0:
8c:38:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 15:09:09 2024 by rpki-client on console-ams.rpki-client.org