Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/K9zRFc4wvltjCTZnrY4MHQd0qS0.roa
File: K9zRFc4wvltjCTZnrY4MHQd0qS0.roa (raw, json)
Hash identifier: BgSF9hDIz3bivCP+o0ejApwEl7cpw9tDWnEfamBxqlw=
Subject key identifier: 2B:DC:D1:15:CE:30:BE:5B:63:09:36:67:AD:8E:0C:1D:07:74:A9:2D
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 0190C56DF033F1B720DBA90F537EE46EA452
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/K9zRFc4wvltjCTZnrY4MHQd0qS0.roa
Signing time: Thu 18 Jul 2024 10:40:34 +0000
ROA not before: Thu 18 Jul 2024 10:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42405
IP address blocks: 91.213.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:6d:f0:33:f1:b7:20:db:a9:0f:53:7e:e4:6e:a4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Jul 18 10:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bdcd115ce30be5b63093667ad8e0c1d0774a92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:1d:d9:ea:1c:ab:5e:0f:0d:58:3e:ac:10:
f6:68:39:4d:72:36:99:48:a7:bb:db:cf:4e:6b:5a:
0d:65:05:bf:d4:28:d2:e3:07:c2:86:ae:de:45:9e:
5f:2b:a9:b1:66:43:9e:1c:04:f7:6c:fa:bc:72:8c:
3c:b3:bc:dc:b8:de:69:20:2e:f8:0f:f4:7c:32:19:
15:41:51:1e:ba:55:d6:86:1f:7a:4c:64:91:15:a8:
bd:59:2b:0a:35:a2:78:1a:9e:32:7e:96:17:27:6d:
12:85:0f:e8:6f:2a:18:fd:69:58:aa:4c:94:b9:72:
a6:19:aa:ed:c9:8a:8e:06:69:e8:fc:f4:82:98:70:
38:74:bd:07:a5:a2:90:c3:f5:db:4b:5e:11:21:2e:
14:49:10:c9:9a:69:5e:c4:0e:33:ea:e2:69:cf:4b:
89:53:9d:e5:1c:45:99:22:1a:16:c5:09:c4:e6:73:
6e:f2:50:07:79:5c:2c:5d:35:20:43:99:93:79:f0:
81:64:4f:30:a1:76:7c:15:0c:5a:98:d8:29:12:4e:
89:d4:56:8f:12:42:17:89:c7:cd:ae:1c:d2:47:24:
ec:28:6a:1e:2b:56:b6:d4:93:37:0a:7c:21:5b:ad:
21:b0:bf:f6:13:6e:4b:1f:fd:e0:fd:3c:3a:e0:5d:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:D1:15:CE:30:BE:5B:63:09:36:67:AD:8E:0C:1D:07:74:A9:2D
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/K9zRFc4wvltjCTZnrY4MHQd0qS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:15:dd:76:5f:65:ed:c7:2f:07:f7:ad:66:15:48:b4:46:b0:
d0:a9:13:77:3c:e8:43:6a:e1:b4:14:5f:71:3b:20:12:bb:6c:
1a:1e:9b:ba:eb:38:ef:1b:45:c2:28:7b:8e:c5:05:a7:4b:b9:
41:70:34:23:ef:9d:bc:c8:a3:88:cb:1d:7b:39:ce:ce:3b:51:
dc:2e:c6:83:ca:ab:0a:7b:40:33:dc:c6:25:8e:53:c2:b7:ec:
ba:0f:f6:c8:b5:53:e5:d0:f0:7d:87:e2:1d:e8:51:db:cc:4e:
2c:80:22:72:5b:85:3e:5a:39:92:d0:49:13:66:24:ec:c4:f6:
f5:65:68:dc:fa:55:fb:16:e2:ff:4e:0d:e3:7a:72:2a:2d:8c:
e5:65:5d:c7:68:5a:7c:98:fc:2f:fa:0f:7e:87:4e:fe:5a:1f:
3a:86:a9:c8:0b:2a:c7:ef:49:9a:3d:75:c6:92:ee:81:e2:15:
4c:39:b8:41:60:14:23:68:d0:56:f0:24:93:67:d3:1c:40:53:
09:08:dd:d6:7d:74:52:0a:24:03:a4:2d:2a:69:ff:60:af:10:
a2:40:70:61:c7:2e:f2:31:9c:78:db:8c:97:db:f2:f5:df:6f:
31:89:f4:76:d6:c0:23:12:98:41:90:b5:aa:25:af:59:a3:f3:
b8:bc:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:55:57 2024 by rpki-client on console-fra.rpki-client.org