Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/9yJOSwdTjRM0yfwjVYovIRVhkFE.roa
File: 9yJOSwdTjRM0yfwjVYovIRVhkFE.roa (raw, json)
Hash identifier: 4IMCu1NDg0byca4YqghtswttiQu3P+FfD/PpDZCUWiA=
Subject key identifier: F7:22:4E:4B:07:53:8D:13:34:C9:FC:23:55:8A:2F:21:15:61:90:51
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 018CC9BCEC64CD7FD0D815963ED70E4AC01B
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/9yJOSwdTjRM0yfwjVYovIRVhkFE.roa
Signing time: Tue 02 Jan 2024 10:34:10 +0000
ROA not before: Tue 02 Jan 2024 10:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201446
IP address blocks: 91.126.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ec:64:cd:7f:d0:d8:15:96:3e:d7:0e:4a:c0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 2 10:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7224e4b07538d1334c9fc23558a2f2115619051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:2d:e3:4a:34:be:9b:5e:d3:15:49:d0:3a:
dd:18:8a:3c:49:c7:ad:c0:09:8b:72:47:64:e1:45:
0d:5b:3f:3d:ef:22:9e:e2:1a:94:9d:69:62:a6:54:
26:bc:05:d1:47:0d:d9:bc:96:2e:a6:c4:2d:ec:48:
b8:fa:3c:33:e9:ec:bd:ed:54:41:c1:9c:49:38:e3:
99:b3:5e:a2:42:a8:a3:bd:df:90:89:a0:7e:30:c4:
b9:06:e2:3e:08:d8:73:51:27:d8:31:be:21:f5:b0:
bb:ec:76:58:6b:a2:4a:bb:49:47:23:e9:ad:cf:80:
1b:50:1a:ec:41:7c:1d:c6:f3:2f:10:98:b4:e3:b4:
27:96:c3:f3:d5:8e:cd:ef:73:85:75:cf:87:48:85:
a4:54:b5:d5:ed:d8:08:d9:23:6b:1e:3c:32:b3:1e:
b6:33:d6:8e:22:fd:a4:2d:8b:c4:e2:90:c8:46:f3:
e3:7c:79:25:14:0a:3b:f5:9d:98:63:28:e3:d0:ca:
82:fc:3e:a1:b5:d7:79:02:f1:52:f3:e8:d9:31:f1:
5b:2c:78:d7:8a:19:3e:2f:b4:f1:82:75:6a:5a:e3:
e9:58:42:47:45:c8:22:b1:73:c0:c8:a9:21:9f:31:
41:1a:96:03:5e:d8:88:ac:41:aa:76:07:ab:9d:00:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:4E:4B:07:53:8D:13:34:C9:FC:23:55:8A:2F:21:15:61:90:51
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/9yJOSwdTjRM0yfwjVYovIRVhkFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.176.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a1:58:01:3b:ac:89:ab:3c:20:d0:ad:b8:f0:bf:26:43:c7:
f2:48:c9:a6:34:b8:99:9d:0d:c6:66:18:75:72:4e:f9:4b:19:
82:74:9c:e1:51:3b:e3:a2:4a:6e:0d:98:f6:b7:4c:8e:68:bc:
1c:eb:2b:ce:72:be:20:a5:51:c8:b1:4c:7d:31:bf:b8:0e:50:
53:d3:f6:59:77:29:d3:cf:b1:08:0c:c5:7f:cd:6a:16:a7:05:
4f:71:c7:8b:e3:30:31:72:27:fc:9c:25:35:38:1b:3a:a9:44:
32:a2:a1:bb:1a:00:10:74:37:f3:99:90:f2:32:ce:1b:ad:16:
20:ad:17:a3:95:49:06:35:5e:77:11:29:88:c0:ec:0b:48:d3:
da:23:f6:7e:67:94:13:99:cc:57:d3:f8:e7:24:09:b8:e5:f6:
ef:3e:7f:d1:8f:2b:83:d7:8c:65:11:42:fa:bc:49:65:c8:49:
8a:30:31:fa:53:d0:4f:86:84:a5:30:eb:ed:2f:0a:7c:75:15:
11:a5:ee:05:dc:29:77:dd:07:90:0e:c0:78:a3:5a:81:10:41:
51:e3:47:35:cc:d4:15:74:61:c9:db:9b:c2:f8:a0:b2:84:62:
fb:7d:ad:74:16:c9:9b:f5:6c:5b:1d:a6:3e:a9:e2:ee:7f:5e:
65:97:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:08:49 2024 by rpki-client on console-fra.rpki-client.org