Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/p9C5OmXhmyYk3I-pV0SEZsuVP4k.roa
File: p9C5OmXhmyYk3I-pV0SEZsuVP4k.roa (raw, json)
Hash identifier: MfS9+u+DO9ViWOYzt78xK1takkhYVXYS1lbmc0npnmA=
Subject key identifier: A7:D0:B9:3A:65:E1:9B:26:24:DC:8F:A9:57:44:84:66:CB:95:3F:89
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 018CC49376B4E1F9ADAD41ECEEC7B5C4ADC3
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/p9C5OmXhmyYk3I-pV0SEZsuVP4k.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41175
IP address blocks: 91.196.240.0/22 maxlen: 24
91.196.240.0/23 maxlen: 24
91.196.242.0/23 maxlen: 24
217.16.192.0/20 maxlen: 24
31.25.64.0/22 maxlen: 24
31.25.64.0/21 maxlen: 24
31.25.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:76:b4:e1:f9:ad:ad:41:ec:ee:c7:b5:c4:ad:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7d0b93a65e19b2624dc8fa957448466cb953f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:f7:60:77:1d:f9:64:ba:79:a9:ec:55:54:
05:52:e0:ff:67:1d:e0:f7:65:a6:ce:94:bf:ef:12:
c1:44:3f:da:28:bc:c2:4c:9b:8a:63:05:fe:93:1b:
1f:d1:eb:8f:42:c9:18:e4:3d:02:bd:2c:0b:8b:6e:
e7:a1:79:41:52:eb:6b:52:84:0d:c3:da:5b:fe:1d:
cf:e9:32:98:f2:dc:30:af:9d:11:97:29:9b:fa:d8:
06:68:63:e1:83:51:28:a3:86:6f:dd:15:8d:e4:1e:
c5:81:c6:dc:1f:7a:ec:66:2a:93:66:d7:6c:0e:ec:
df:17:9e:e0:41:ad:b2:b1:9e:11:b1:d5:7f:b3:d0:
04:65:fc:68:b5:55:06:94:b5:19:68:b4:be:79:c8:
8f:18:99:97:db:3f:90:db:04:42:61:65:ed:27:73:
b7:99:e6:92:36:01:5d:80:fb:e7:de:ae:85:95:30:
b6:7b:c0:91:f7:b2:3e:73:00:76:bc:20:5f:9e:22:
f4:f0:3f:f5:00:f4:30:fb:73:d3:5f:5d:ef:02:5a:
f6:e7:2f:14:9e:a3:fa:d8:20:7a:0d:1a:b2:70:b8:
f3:d8:6b:69:cc:e1:d6:20:af:2a:57:c2:70:63:33:
dd:b5:0c:d2:3a:32:e5:b7:dc:dc:79:c4:fe:4c:81:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:B9:3A:65:E1:9B:26:24:DC:8F:A9:57:44:84:66:CB:95:3F:89
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/p9C5OmXhmyYk3I-pV0SEZsuVP4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.64.0/21
91.196.240.0/22
217.16.192.0/20
Signature Algorithm: sha256WithRSAEncryption
24:02:8f:21:be:00:c9:c3:db:8b:14:91:a0:c5:cf:78:34:92:
13:a9:56:c9:e1:40:e6:89:31:70:9c:ef:4f:a5:c4:78:f7:33:
91:00:30:3b:2d:77:ec:a5:14:07:79:f5:e2:8d:c3:63:a3:4b:
97:b5:a6:70:1a:46:ed:09:e3:24:15:df:8b:ba:e3:9f:fe:17:
e4:1f:5a:89:5d:e9:71:46:aa:dc:fb:5a:b8:9b:7c:79:fd:98:
52:4a:5e:17:5b:09:03:66:b4:3b:dc:21:44:e7:ee:ca:34:50:
b8:d7:c5:e7:d9:15:6f:dd:69:af:3e:c4:08:eb:1f:63:f0:57:
08:fb:dc:94:f5:3f:8c:08:04:a1:29:c3:f5:ce:94:ed:68:ad:
37:e5:73:a6:2f:89:79:0f:06:6c:b1:1e:bd:d5:89:0b:20:a6:
e1:93:9c:2b:21:05:30:2d:8b:02:0b:10:2e:f8:11:22:b6:eb:
90:14:ea:e0:01:54:e3:5b:23:76:70:ce:dc:68:30:ca:71:c1:
2a:3b:cf:e7:2b:13:07:ba:dc:6d:49:93:f4:58:a4:4b:5a:27:
07:97:4a:93:d4:d4:c5:b4:a9:9d:c4:05:51:60:bb:cc:0b:ce:
c7:60:ac:9a:c5:fe:44:a3:13:5b:21:64:1e:eb:c5:0f:8a:de:
df:40:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:38:07 2024 by rpki-client on console-fra.rpki-client.org