Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/sMdzy8LAFreZjyO4_DZjNB7rus4.roa
File: sMdzy8LAFreZjyO4_DZjNB7rus4.roa (raw, json)
Hash identifier: jaIWA5qELfpwLwgw+ZqEt2FBDx43bmq5JkiHHnmsPsk=
Subject key identifier: B0:C7:73:CB:C2:C0:16:B7:99:8F:23:B8:FC:36:63:34:1E:EB:BA:CE
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 018CC8713DD3485041852FB79B10EEB63967
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/sMdzy8LAFreZjyO4_DZjNB7rus4.roa
Signing time: Tue 02 Jan 2024 04:31:53 +0000
ROA not before: Tue 02 Jan 2024 04:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35297
IP address blocks: 91.209.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:3d:d3:48:50:41:85:2f:b7:9b:10:ee:b6:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Jan 2 04:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0c773cbc2c016b7998f23b8fc3663341eebbace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:d6:f0:ee:3a:43:9f:14:96:b3:a8:6b:97:
4d:1d:d9:51:37:0c:d8:ea:16:29:fa:1e:8a:f5:0f:
b2:5e:60:65:a3:24:86:36:bf:10:6a:b1:24:c4:f6:
37:1b:de:09:e5:3f:be:c7:dc:02:25:2a:aa:17:98:
19:f7:a7:ca:e3:19:66:99:25:f2:18:f8:c8:62:59:
0e:7c:a0:f1:71:6a:36:45:bc:14:81:d4:42:f5:a0:
2c:9c:80:de:75:19:b2:1b:ac:25:41:94:d1:68:3f:
4c:cb:c9:2d:c5:6c:7e:0c:55:17:d5:cc:d0:2f:d3:
ed:ab:30:d5:bb:60:26:1e:49:1f:a9:7c:6e:ca:e9:
19:b8:14:55:cd:f2:7d:37:4e:ca:a2:44:70:16:54:
96:72:50:99:68:68:e0:44:94:f6:9d:8e:0c:1c:89:
da:70:00:5a:c6:5d:a7:43:0e:00:1e:9f:7f:4c:33:
5d:58:45:69:2d:75:e8:44:71:0e:15:da:cc:d0:e5:
01:c5:41:93:6d:3c:0a:49:44:c5:1e:01:73:e6:76:
58:99:2d:80:35:2c:f3:d9:57:74:95:c8:f9:f9:31:
90:e2:7a:c7:02:85:47:a5:b8:f8:df:74:ad:77:e4:
9b:13:bc:50:4a:6c:bf:2f:3d:7c:86:a6:d3:2b:aa:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:73:CB:C2:C0:16:B7:99:8F:23:B8:FC:36:63:34:1E:EB:BA:CE
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/sMdzy8LAFreZjyO4_DZjNB7rus4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.73.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3c:0a:fa:20:8e:8c:6f:37:76:4c:ac:23:92:2a:72:12:33:
24:13:ab:99:fc:9c:24:3e:74:3d:e1:b2:e6:7d:6c:58:7d:e4:
5f:4c:b2:cb:19:fe:c3:09:89:18:87:1b:71:d5:02:7c:20:01:
69:99:39:fc:21:0c:7d:ac:4d:f9:f9:44:49:d1:81:f9:d9:23:
f6:ff:01:46:26:ff:57:c8:4b:e6:c9:15:1a:a2:fd:75:ae:a7:
52:01:5a:39:58:35:0f:52:fe:b6:0c:e1:40:9d:36:43:6f:66:
86:a5:94:93:3a:bf:4f:95:f3:ed:e9:48:46:f7:06:28:4f:11:
18:a3:18:d5:59:3d:02:0c:09:d0:60:64:0d:64:59:18:d4:20:
48:90:09:8e:45:44:d5:3b:13:77:80:0e:4b:fa:3d:b6:6d:82:
0e:5f:e0:a2:24:bf:e0:ca:12:ec:dd:1d:76:8b:60:23:0d:e2:
24:a1:db:cd:67:79:5f:14:4f:82:9c:ac:21:22:64:2a:e1:99:
02:f4:3c:4d:8a:52:6e:e6:99:3c:3d:21:89:4d:c3:14:a6:48:
cf:0a:11:63:e2:c2:80:06:2d:6c:cd:8d:96:12:39:b4:60:cd:
dd:b6:fd:c9:66:47:90:9e:d7:0b:59:8f:b4:74:57:c2:8f:c8:
db:2e:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:30 2024 by rpki-client on console-ams.rpki-client.org