Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/s9aaZUpv-8Ef7ns3_OVlQUamkcE.roa
File: s9aaZUpv-8Ef7ns3_OVlQUamkcE.roa (raw, json)
Hash identifier: LMP+MIWxCWX9/Q1pZgwUl2q10Z0Yk8WC+Qf6zibj1xA=
Subject key identifier: B3:D6:9A:65:4A:6F:FB:C1:1F:EE:7B:37:FC:E5:65:41:46:A6:91:C1
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 018CC5DC62B7A4EF2E54D93B997ED10075F2
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/s9aaZUpv-8Ef7ns3_OVlQUamkcE.roa
Signing time: Mon 01 Jan 2024 16:30:03 +0000
ROA not before: Mon 01 Jan 2024 16:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.234.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:62:b7:a4:ef:2e:54:d9:3b:99:7e:d1:00:75:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3d69a654a6ffbc11fee7b37fce5654146a691c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:84:ac:d1:f4:bc:d4:5d:17:f3:26:52:28:
47:d9:42:8e:6f:76:d6:17:44:df:ae:7a:0a:b0:b9:
3f:d9:9e:9f:bc:35:90:ca:6c:3e:88:f2:d9:92:5d:
48:74:6d:32:86:6b:d6:f6:f9:e7:8b:f4:9e:71:0d:
f9:b3:7e:b6:8b:f7:7f:6e:0e:0c:95:71:f1:95:a0:
ad:f8:d8:92:f1:a6:c1:68:83:eb:c0:5e:9a:77:0b:
da:34:d1:d7:12:6a:50:59:ab:63:9d:fe:46:d6:dc:
b1:79:bb:28:4f:48:c3:83:5f:70:5c:aa:78:b7:1a:
58:d1:f6:8b:71:0c:c7:6d:6e:88:a8:5b:b7:e1:ae:
70:dc:8a:a8:40:3e:9f:f0:a2:0c:68:60:9b:16:8f:
f6:c6:f6:04:48:38:39:01:56:cd:0e:2c:86:b5:e4:
02:db:14:85:05:fb:a7:53:03:36:be:90:6b:56:03:
3f:c9:10:3c:8f:31:3f:50:bc:ea:23:2d:21:c7:0d:
42:95:c5:24:81:20:c0:aa:07:a4:12:58:ae:56:6e:
84:68:b5:18:ec:4f:a9:2e:cb:62:d8:8a:a2:df:58:
7f:9d:7f:77:84:8e:c8:33:06:d1:f0:a1:33:da:e6:
b5:81:d5:da:11:01:07:52:56:e9:9e:00:56:32:43:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:9A:65:4A:6F:FB:C1:1F:EE:7B:37:FC:E5:65:41:46:A6:91:C1
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/s9aaZUpv-8Ef7ns3_OVlQUamkcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.36.0/24
Signature Algorithm: sha256WithRSAEncryption
05:59:50:eb:40:73:d6:a8:cd:c2:96:10:41:39:fd:29:a3:80:
ce:e9:60:2f:50:f0:e2:82:88:ad:5b:7b:0a:8f:b7:7a:ea:8c:
11:e1:1a:6a:a8:eb:3f:7c:5e:54:5c:25:38:a1:48:be:59:53:
66:4f:0f:16:76:ed:d3:54:7d:b1:b1:8d:5f:3a:dd:77:b0:e5:
45:2c:20:8c:f0:dd:83:96:8b:1d:74:35:e9:50:2f:38:44:76:
f3:c7:db:8f:15:a6:2f:31:78:7e:07:8e:18:84:8d:0c:0a:d1:
0f:75:26:95:bb:e9:9c:4e:58:06:9b:64:60:60:c5:26:2b:a3:
00:d8:a1:97:c4:62:81:06:fc:88:55:48:bc:85:b0:7d:73:9f:
c4:d5:45:89:3c:91:6a:56:67:7c:e6:2e:07:1b:e6:98:3b:26:
2e:d1:77:d6:4e:c7:7c:0e:09:67:81:27:d5:75:87:32:9e:ed:
51:2c:f5:22:cc:9a:41:94:da:a8:42:16:93:40:16:6d:60:dc:
0c:aa:d9:3f:37:75:78:33:f2:44:d3:7c:88:45:0f:41:83:80:
aa:11:95:54:ae:6e:ce:9f:de:d8:d3:ee:d7:32:9e:cd:f5:8f:
f6:48:8b:89:33:80:7c:6e:80:b5:09:ff:8b:eb:c3:57:4a:90:
2a:d7:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:38:22 2024 by rpki-client on console-fra.rpki-client.org