Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/8AMVYkX9N7fa6Jc7DUjo6WZQz6s.roa
File: 8AMVYkX9N7fa6Jc7DUjo6WZQz6s.roa (raw, json)
Hash identifier: sp9NjbcC2Cy9C9tw5TL0He1ikDdbJYTA/Q47GjWbJy0=
Subject key identifier: F0:03:15:62:45:FD:37:B7:DA:E8:97:3B:0D:48:E8:E9:66:50:CF:AB
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 018CC9BC135C8B9CCBD090ACC26B8C42BF82
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/8AMVYkX9N7fa6Jc7DUjo6WZQz6s.roa
Signing time: Tue 02 Jan 2024 10:33:15 +0000
ROA not before: Tue 02 Jan 2024 10:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49778
IP address blocks: 91.219.23.32/27 maxlen: 27
91.219.23.0/24 maxlen: 24
2a13:7e00::/29 maxlen: 29
2a12:70c0::/29 maxlen: 29
2a11:e380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:13:5c:8b:9c:cb:d0:90:ac:c2:6b:8c:42:bf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jan 2 10:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f003156245fd37b7dae8973b0d48e8e96650cfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:de:a9:db:49:61:cf:10:03:34:6d:44:40:
ba:0e:25:22:2b:d0:92:7f:bb:ba:b8:1f:e1:f6:17:
5e:b3:96:a5:fb:07:ed:79:a0:08:9e:e4:39:d2:2b:
4f:64:05:ab:c9:d9:b7:5e:a0:3e:7f:1e:dd:08:2b:
2d:ac:83:0b:1f:d8:68:47:43:6b:af:c2:29:69:ec:
c2:a1:3a:7a:ab:81:17:c4:d8:fa:8c:66:35:bf:1c:
dc:26:34:2f:7d:5f:59:08:a8:69:88:a4:df:a6:81:
ef:35:ea:a8:92:84:d0:bf:97:48:8a:39:3b:3f:f3:
66:03:f6:ed:de:34:4a:56:97:74:89:48:28:a9:62:
e2:92:34:71:00:c5:e6:30:2e:a0:3e:f6:50:81:74:
b5:7f:35:ce:f2:83:88:c7:17:46:99:23:4d:c1:58:
79:31:a1:40:2e:d3:e9:ef:ab:e6:b2:0c:4d:8e:cb:
bc:a6:75:97:d3:3e:31:3e:e3:23:10:62:3b:ac:62:
a6:5b:fa:8c:8d:41:00:0e:1b:27:e1:36:07:d1:d9:
f9:db:46:4b:55:e2:df:33:17:90:3e:8a:47:23:c7:
05:ee:2f:30:b6:21:7f:1b:43:25:43:a1:9c:cb:cd:
e3:0d:75:37:68:23:13:6c:92:7c:1b:47:ca:85:be:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:03:15:62:45:FD:37:B7:DA:E8:97:3B:0D:48:E8:E9:66:50:CF:AB
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/8AMVYkX9N7fa6Jc7DUjo6WZQz6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.23.0/24
IPv6:
2a11:e380::/29
2a12:70c0::/29
2a13:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
24:51:9f:63:fb:52:e7:8d:e6:4b:1c:49:b8:47:16:9a:5b:ee:
5e:f3:14:36:24:b1:13:86:23:60:8b:3c:83:ea:af:6e:e0:e8:
a0:81:02:22:fa:e6:e0:0e:9e:42:f4:71:57:a4:57:cb:8f:11:
11:3c:44:05:f0:c6:57:e1:db:68:7c:0e:d9:7e:53:38:18:0b:
8c:95:bd:61:a3:15:3d:cc:39:16:ba:e7:23:d3:6b:c8:06:c0:
7c:09:e9:bf:2f:2d:ae:50:71:78:1e:ab:0c:56:18:52:69:e1:
bb:ab:cc:49:79:ea:ed:ad:74:24:1d:1c:57:4a:ab:08:17:4b:
1a:05:9b:f4:de:5d:17:de:6f:4a:6d:23:60:a0:cb:4f:91:c5:
e9:a2:7b:da:bd:3c:b1:a1:48:ba:2a:05:e0:ce:f7:c6:72:34:
26:50:1e:85:88:6a:42:a4:79:b6:f4:5f:d6:bd:9b:cc:e0:82:
e3:74:91:b3:2d:03:2a:68:54:58:d3:cb:a7:78:2d:1a:be:7f:
c6:7e:b8:1a:a4:e1:ee:a2:e7:c4:82:68:56:8d:73:94:c6:cb:
69:de:98:e0:a9:3b:d0:33:c9:a8:19:83:0a:5d:9d:d2:db:fc:
9a:2a:79:7f:ef:08:dc:2c:3a:20:d3:06:d7:64:46:83:0f:67:
4f:5d:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:44:17 2024 by rpki-client on console-fra.rpki-client.org