Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/3LtnNSIN40QFEgI3THd8Isx9sHs.roa
File: 3LtnNSIN40QFEgI3THd8Isx9sHs.roa (raw, json)
Hash identifier: yuX+V/zrDlJRQJe2WA+tBOxrlDxFm9s7OR6FwRU8JBM=
Subject key identifier: DC:BB:67:35:22:0D:E3:44:05:12:02:37:4C:77:7C:22:CC:7D:B0:7B
Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial: 018CC26D5086D326CEAEBC59CCD4E4453C45
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/3LtnNSIN40QFEgI3THd8Isx9sHs.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 91.209.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:50:86:d3:26:ce:ae:bc:59:cc:d4:e4:45:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcbb6735220de344051202374c777c22cc7db07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:5f:b7:91:6c:2b:74:b2:97:25:ed:d0:b9:
01:08:4c:e1:9c:90:8e:47:88:71:0a:0c:bc:4d:bd:
fa:cc:61:21:0a:8f:89:83:9a:8a:d2:b3:ee:ae:cb:
88:42:52:66:6c:e2:dc:f6:64:77:43:dc:56:8c:dd:
5f:cc:3c:7c:a7:ab:6f:3d:86:33:c6:43:80:a3:27:
59:49:af:4d:7f:bd:97:bd:52:d1:0f:33:a0:6d:1e:
5a:b1:ff:49:33:3e:cc:cd:33:e7:45:42:3d:be:fb:
a7:9c:9f:09:cd:e7:81:68:a1:e4:5e:15:38:3f:dd:
31:57:8c:ff:8c:c5:35:38:8d:f6:e2:8c:85:b7:6d:
d2:8b:b3:3f:5d:67:d4:52:cc:e6:03:b3:ee:3a:14:
fb:5a:ff:96:74:ff:18:af:13:ab:50:5a:a0:f4:24:
86:b4:95:a4:1e:c1:68:09:46:2c:d2:cb:4f:50:a2:
ff:0c:d3:33:9d:ea:d8:d7:99:2d:ad:70:b8:73:49:
e7:cb:8f:fd:01:9c:cf:91:b9:f3:7d:dd:0d:23:b4:
62:fd:80:d2:ab:04:a2:74:2e:5b:1d:0b:a8:38:d7:
14:92:a5:97:97:bb:53:d0:91:1a:9a:1c:c0:cd:bd:
43:21:54:52:cf:d6:cb:d8:f9:59:a6:bb:f1:00:2c:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:67:35:22:0D:E3:44:05:12:02:37:4C:77:7C:22:CC:7D:B0:7B
X509v3 Authority Key Identifier:
keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/3LtnNSIN40QFEgI3THd8Isx9sHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:79:bc:e3:75:e3:c1:22:7c:c8:6b:b2:70:75:a5:49:b2:4e:
75:47:2d:ab:64:02:6c:48:23:fb:cb:75:14:1e:fa:e4:e3:18:
08:8f:ad:38:ef:ab:b1:c0:48:c7:3a:a1:4b:1f:04:be:21:58:
d0:8c:e5:46:bc:cd:fb:37:da:df:63:53:f0:72:2d:60:1f:15:
ac:10:1b:52:37:d8:1e:ca:fd:0d:0c:4d:f3:36:15:78:b7:f8:
ac:90:1e:d0:6d:20:f0:4a:7b:86:03:c9:a9:d6:12:4c:a6:f5:
3e:d5:b1:a6:00:fe:d2:88:4e:41:97:79:f6:9a:ba:c4:28:86:
8c:77:5d:85:78:8c:d2:3c:f2:4e:20:b4:d2:f8:8a:44:25:b5:
c8:05:c9:4c:03:75:6d:af:24:aa:c4:10:70:c5:f2:e1:41:39:
4b:87:47:f1:6c:7c:0f:37:19:8b:01:e1:4a:07:04:91:d3:02:
82:a3:1a:6b:13:eb:69:2f:e2:e6:3c:10:b5:cf:55:38:e0:77:
f8:61:ad:9c:77:45:46:cb:fe:5a:de:75:e4:24:b7:a7:1b:87:
7a:14:1f:55:de:8e:6a:18:d2:c3:6d:5d:91:42:f6:6a:ec:f1:
ae:82:c2:62:f6:c1:a6:0b:b2:af:64:a5:77:b6:70:61:62:29:
a6:60:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:44:01 2024 by rpki-client on console-ams.rpki-client.org