Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/KnZ0ZSW47tSLqQd0wPKskRLRShM.roa
File: KnZ0ZSW47tSLqQd0wPKskRLRShM.roa (raw, json)
Hash identifier: D9huI5DR/POTm7eSVZdmpxYYfTgXH8G7ceQzQDvW9hQ=
Subject key identifier: 2A:76:74:65:25:B8:EE:D4:8B:A9:07:74:C0:F2:AC:91:12:D1:4A:13
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 018CC9BCD2436DD7145407FFB47EE418005B
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/KnZ0ZSW47tSLqQd0wPKskRLRShM.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48746
IP address blocks: 91.212.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d2:43:6d:d7:14:54:07:ff:b4:7e:e4:18:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a76746525b8eed48ba90774c0f2ac9112d14a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:6e:d8:0e:fe:bd:e2:80:08:59:60:0a:5f:
35:be:77:cc:12:4a:8d:9f:11:45:45:f3:2e:3f:2c:
9e:50:68:1f:7d:7c:10:ff:89:4e:e2:7d:79:d0:20:
96:f9:e8:7b:1b:42:98:27:c8:60:7f:f3:05:69:28:
7f:b1:0a:ee:df:b1:7a:ec:a1:8b:80:26:63:81:df:
34:28:88:f0:f0:30:ae:37:66:16:38:7f:cd:da:de:
77:1a:53:7a:85:d4:e6:4f:19:85:d5:9d:9d:7d:0a:
30:2a:d2:66:8f:43:e6:3c:65:90:84:da:f2:ba:f2:
a5:d9:13:0c:8a:ed:a1:ac:72:40:fd:0d:53:c3:cd:
fb:78:bd:7b:fd:72:01:89:56:27:57:1c:e6:71:b1:
ea:af:eb:66:ae:70:3a:17:4e:25:5c:27:cd:ed:94:
c4:9c:1c:fd:52:61:0b:5c:67:3a:38:38:59:63:a2:
0b:99:fb:c3:aa:68:da:b9:36:13:37:74:e6:55:5e:
fe:dd:7a:d7:e6:2b:8d:66:38:62:3a:14:07:98:5d:
81:56:cd:5e:a0:07:a3:01:69:e8:24:14:60:df:18:
6b:58:9f:15:63:84:f4:3c:e8:fb:cb:59:7e:60:c1:
1c:f9:da:4a:3e:f6:d7:1a:09:b1:44:ad:97:29:b5:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:76:74:65:25:B8:EE:D4:8B:A9:07:74:C0:F2:AC:91:12:D1:4A:13
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/KnZ0ZSW47tSLqQd0wPKskRLRShM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d8:32:7f:77:44:61:b7:9c:aa:75:aa:b1:46:72:1f:19:86:
df:e1:0e:97:6c:c4:67:e5:2d:8b:60:8a:09:8d:af:31:30:4e:
ae:45:60:09:0a:8e:ee:1a:3f:f8:1b:95:d7:c1:0f:f1:04:0e:
d0:9a:59:28:d5:e0:9c:c0:b9:fc:83:ac:5d:0e:14:2f:53:5b:
d2:0d:cc:18:c0:be:30:bd:4b:b1:b0:09:bb:4f:c6:88:d1:07:
c9:90:6c:c8:92:76:bb:91:6c:5a:4b:83:67:a0:3b:73:85:e2:
63:79:97:7f:d6:d9:c5:92:ac:07:1d:51:60:28:4c:46:26:c4:
d4:46:c0:59:42:65:b6:80:a4:05:9b:f8:0d:f4:db:2f:f9:d4:
33:28:f7:64:f1:e7:db:ff:17:c2:f1:e3:7c:83:66:68:73:b5:
19:87:44:95:f9:29:75:e2:1b:cf:0d:1d:75:10:3c:7f:49:53:
3f:75:c2:24:e6:87:a8:77:0d:5e:56:d0:09:b4:0e:d0:ca:44:
8a:0c:e2:90:ee:44:ca:27:b3:82:0d:93:d2:4e:40:d2:91:10:
aa:21:aa:e4:6c:92:ec:8c:77:d8:3d:bb:f3:dd:b3:36:e6:3e:
ed:aa:f2:57:a6:79:da:64:91:f1:b5:bd:5f:d8:5e:76:dc:7d:
46:88:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:52:33 2024 by rpki-client on console-fra.rpki-client.org