Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/7oJyei29ghtC9l4lV0i6tvOfO_s.roa
File: 7oJyei29ghtC9l4lV0i6tvOfO_s.roa (raw, json)
Hash identifier: zoHVKg/RMUD/8qv35wuhKtMLtdeeVb8fmcQcfl2gKIM=
Subject key identifier: EE:82:72:7A:2D:BD:82:1B:42:F6:5E:25:57:48:BA:B6:F3:9F:3B:FB
Certificate issuer: /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial: 018CC6B853E4FF66309D1E41A9D58DFF9B3C
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/7oJyei29ghtC9l4lV0i6tvOfO_s.roa
Signing time: Mon 01 Jan 2024 20:30:17 +0000
ROA not before: Mon 01 Jan 2024 20:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12785
IP address blocks: 91.223.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:53:e4:ff:66:30:9d:1e:41:a9:d5:8d:ff:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
Validity
Not Before: Jan 1 20:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee82727a2dbd821b42f65e255748bab6f39f3bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:76:b3:21:0c:3e:2f:f3:13:d9:7a:e3:31:
56:8a:01:68:4a:0f:7b:7d:1e:9c:fb:8b:60:21:4c:
4d:13:36:f8:60:b8:43:00:66:f0:8c:ce:1b:f9:e3:
14:cb:02:d3:66:41:5d:43:d6:2d:3a:7d:4c:a2:c8:
c0:2b:f7:e2:b2:b0:34:0c:f0:66:75:d9:93:97:13:
d0:b4:57:a7:b1:d2:d9:6d:93:ee:84:c4:7b:f5:ad:
99:48:53:41:fc:94:62:62:23:e6:39:2d:11:f2:95:
a3:42:a2:7f:1c:74:a5:08:4b:4b:dc:2a:88:d5:db:
29:00:6c:bb:f4:7b:12:24:6d:02:73:42:da:c7:11:
2b:87:a2:cd:c0:8a:8d:33:76:3f:f5:5c:a8:b2:f9:
e8:62:58:c9:e9:fe:0a:3d:8c:a5:70:0c:cc:33:62:
14:d8:d8:f0:29:66:db:1a:4a:0c:1f:4a:c2:81:cd:
fa:96:b5:18:b1:4b:40:a9:80:d3:4f:48:0e:b5:1d:
a8:50:a5:d5:6a:a5:ac:19:58:7d:60:46:be:37:81:
20:0b:c2:52:78:b0:06:62:79:d2:58:03:70:8b:41:
03:5a:77:22:2a:72:a0:5c:6d:3a:6b:89:2a:73:79:
91:c8:f7:03:78:b8:f3:67:20:34:d4:e6:b9:47:10:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:72:7A:2D:BD:82:1B:42:F6:5E:25:57:48:BA:B6:F3:9F:3B:FB
X509v3 Authority Key Identifier:
keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/7oJyei29ghtC9l4lV0i6tvOfO_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.230.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4e:0e:2e:ee:c7:f9:ef:e9:34:79:66:fc:e2:b5:fb:f5:bb:
42:cb:b9:3c:96:84:88:90:48:19:39:3c:80:00:eb:b8:a3:8a:
06:a7:10:a1:91:8a:b5:b7:4c:18:d4:8f:a2:99:21:81:8f:3e:
8e:2a:56:50:25:ae:08:6c:c2:11:29:fc:f4:66:dd:c3:a1:4b:
7d:52:50:ea:fc:2f:e5:3d:82:f9:76:1c:d1:fa:12:54:1c:ea:
90:77:d4:35:1f:3d:f0:43:c9:f3:c7:88:65:ad:92:0e:9f:2e:
31:e9:72:4f:8f:da:f3:2c:93:2c:3a:c5:95:95:07:fb:5c:d2:
fc:db:b4:2d:82:bd:4b:f8:ed:d7:8f:d0:7e:85:52:9c:2c:90:
8a:75:a8:1a:6b:91:7e:89:99:e5:fa:5a:a6:cc:aa:93:bd:93:
c3:b5:f9:1a:64:26:30:b7:78:95:93:61:48:f6:71:67:a3:8b:
cc:e6:1d:39:d8:92:18:7b:30:9d:59:4f:b8:97:d8:6f:77:8d:
23:0e:09:7e:f1:3b:84:d0:fd:e2:f8:ad:52:84:eb:41:0b:bd:
0f:ed:af:86:80:ec:79:db:d1:0d:e3:a2:f3:9b:8c:12:a9:36:
f7:93:4f:ad:8b:5b:04:83:19:b6:3e:0a:b0:d2:84:40:d2:72:
be:74:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:48 2024 by rpki-client on console-ams.rpki-client.org