Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-Ob7yrci4FhE5C0e6357GiLe9RI.roa
File: 1-Ob7yrci4FhE5C0e6357GiLe9RI.roa (raw, json)
Hash identifier: Qg6JaLxXFQdbWlBQJM892fIA9u1zvhw1W592KCyCjYA=
Subject key identifier: F8:E6:FB:CA:B7:22:E0:58:44:E4:2D:1E:EB:7E:7B:1A:22:DE:F5:12
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DABF7CB3AC52B5414CA85FE325C3C1
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-Ob7yrci4FhE5C0e6357GiLe9RI.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41418
IP address blocks: 91.235.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bf:7c:b3:ac:52:b5:41:4c:a8:5f:e3:25:c3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8e6fbcab722e05844e42d1eeb7e7b1a22def512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:98:56:d6:31:fb:89:9e:5c:a6:61:e4:c2:
74:00:f4:d9:13:c2:14:9b:7e:68:41:94:9b:41:52:
d4:cb:81:bd:ca:1c:44:45:34:ab:b8:89:1b:1f:82:
f6:23:50:f7:84:8e:fd:fd:03:14:40:60:de:8c:a4:
3a:13:1d:6f:a9:9c:c6:5a:86:e2:51:65:fa:d4:c0:
dc:98:ed:4e:4a:f0:6e:dd:58:74:3a:dc:2d:a5:af:
ad:0f:e2:ed:11:1a:ca:4c:52:fb:7e:1e:0b:31:c5:
63:a3:2f:9c:1c:dd:d6:86:4d:f6:1d:93:77:4d:ea:
ab:a7:ba:0d:45:6a:b9:84:ca:aa:9e:3a:9f:4f:96:
14:b7:48:bc:c5:67:8b:42:3c:d1:9a:c8:9b:06:62:
9f:92:c5:bd:20:aa:c5:31:6d:27:1d:d0:06:f1:f3:
62:75:dd:46:f7:87:e0:5f:25:fa:a8:7d:ea:d2:22:
43:2c:27:8d:de:51:2c:c4:49:93:bb:1f:9f:e2:1d:
3a:8d:ee:ca:a2:f1:4f:f2:9f:b1:4f:ba:dd:49:d0:
ce:6c:01:54:0c:10:03:08:6a:f3:01:8c:fc:24:f0:
48:aa:1f:e5:22:8f:3e:53:81:15:13:32:4f:a9:6d:
73:73:73:b7:bc:16:f7:d2:34:80:9a:92:9d:ba:42:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:FB:CA:B7:22:E0:58:44:E4:2D:1E:EB:7E:7B:1A:22:DE:F5:12
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-Ob7yrci4FhE5C0e6357GiLe9RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:0d:17:8f:d9:86:b0:ad:49:c5:ff:3c:3e:d3:4b:44:81:f1:
04:ad:87:e8:43:c4:10:b7:bb:f0:d0:fd:af:35:99:e1:85:ec:
52:b6:b9:f8:2c:40:02:92:09:b6:47:76:85:9e:33:fd:78:f1:
a7:3f:58:6f:95:5e:54:75:84:f7:75:72:13:d1:61:78:98:7d:
36:cc:4c:78:4d:07:6d:87:79:ae:55:3f:1d:fc:7e:25:06:c4:
92:12:90:4f:e4:fc:86:db:82:02:44:ba:99:68:c7:eb:cc:b4:
27:ea:5b:0e:78:1e:99:fe:25:d3:4c:b2:89:89:70:30:ea:11:
99:d0:41:5b:5b:05:c8:f6:88:3b:5e:da:79:74:ea:03:8c:3f:
cd:6d:6b:96:ea:eb:bd:bf:67:f4:d8:02:14:4a:23:74:42:3c:
3b:cb:11:c3:e3:43:30:3c:70:6d:c2:72:b7:e4:5d:ba:bb:cf:
ac:b9:f7:09:99:f0:2a:e3:a8:84:ba:f4:75:8c:06:97:7b:7a:
9e:3b:08:42:f9:f7:8e:f9:f5:cb:4d:63:bc:21:91:82:82:fb:
e5:0e:db:22:49:e4:61:3b:8f:e6:e4:96:21:5b:c8:0b:74:43:
e1:4a:6a:db:43:c8:cc:99:81:00:97:5a:5b:40:ab:e3:4b:67:
2b:49:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:34 2024 by rpki-client on console-fra.rpki-client.org