Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/is7aFOli9Wim5VcHFEn4TbrS1_g.roa
File: is7aFOli9Wim5VcHFEn4TbrS1_g.roa (raw, json)
Hash identifier: ui6owyMSkHDH0EUm/X0xHmb8XgPXHDLPHJseePad/NY=
Subject key identifier: 8A:CE:DA:14:E9:62:F5:68:A6:E5:57:07:14:49:F8:4D:BA:D2:D7:F8
Certificate issuer: /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial: 018CC56ECFE0F5DF5CE1F734DAAC82E88CDF
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/is7aFOli9Wim5VcHFEn4TbrS1_g.roa
Signing time: Mon 01 Jan 2024 14:30:22 +0000
ROA not before: Mon 01 Jan 2024 14:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28865
IP address blocks: 91.235.105.0/24 maxlen: 24
91.235.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:cf:e0:f5:df:5c:e1:f7:34:da:ac:82:e8:8c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Validity
Not Before: Jan 1 14:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aceda14e962f568a6e557071449f84dbad2d7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:32:16:32:b3:ab:1f:b0:d1:a7:fd:45:db:
1c:66:a7:6c:07:15:8b:93:94:35:d3:cd:4e:14:77:
0c:d7:d7:c0:02:2b:50:a2:23:04:d4:c9:5b:8c:48:
1c:71:4b:0c:06:38:ec:fc:d2:ac:7e:b2:d0:a0:99:
d0:7f:55:9a:9a:a5:31:80:22:95:55:ef:58:ee:85:
69:25:31:0d:ec:dd:3b:58:23:48:ab:54:20:dd:f6:
23:85:30:e1:47:0b:c6:91:26:9c:bc:a8:75:0a:01:
f5:99:27:7c:a3:7b:12:6f:e6:e6:84:41:b1:74:7a:
30:f1:9a:b5:67:04:87:b0:d9:ad:7e:fa:b6:f9:f3:
02:f7:84:35:ad:24:20:c6:4f:43:c3:4a:64:3b:6c:
01:56:35:56:21:c8:27:cd:78:86:b8:80:fc:da:fd:
05:4b:9e:38:42:4e:81:e5:cc:8d:b0:34:69:42:e2:
07:6c:d4:67:25:55:2c:9a:d9:fc:bd:63:b1:bd:51:
37:e7:6b:4e:5d:c3:28:8c:f6:db:dc:2f:c9:02:b0:
95:41:4d:8e:85:40:ee:fc:8f:07:ab:a5:af:86:34:
7c:51:dc:65:11:a2:ff:90:ce:16:c9:16:df:bf:30:
5c:5d:0d:e6:4a:87:8d:a1:85:fd:c5:24:f2:00:90:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:DA:14:E9:62:F5:68:A6:E5:57:07:14:49:F8:4D:BA:D2:D7:F8
X509v3 Authority Key Identifier:
keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/is7aFOli9Wim5VcHFEn4TbrS1_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.104.0/23
Signature Algorithm: sha256WithRSAEncryption
94:3c:44:3a:57:0c:66:2a:a4:93:42:09:87:58:13:21:f0:70:
e6:e3:f8:40:e9:40:b8:45:29:cf:d9:9f:42:00:ad:1d:62:d9:
83:b0:3a:3c:14:56:31:a5:54:f7:61:30:15:a6:65:56:29:2c:
90:c0:29:6f:cf:da:5a:bc:40:02:c4:50:bb:7a:ff:63:d6:e1:
7e:a5:4c:e5:cb:46:5a:ca:2e:f0:41:fc:65:69:a5:cd:44:7f:
a7:35:63:54:ec:8c:38:18:bf:d3:69:14:06:23:c3:2a:81:8b:
b1:68:3e:fe:d3:aa:de:48:ab:73:8f:54:a3:ee:8d:d3:03:8e:
bb:e0:ed:a6:bb:44:67:9c:2c:72:d3:ae:a3:a8:46:c5:bb:32:
69:34:c6:d8:e1:17:c4:e0:41:fa:3f:02:ba:65:61:a7:d4:24:
68:6c:f3:8b:5e:93:d2:fa:14:84:c1:a3:e4:9a:1b:a8:70:7a:
94:2a:0f:a4:ba:27:b9:45:77:04:f3:81:85:32:1f:84:57:76:
d1:bf:82:72:2d:a8:05:c3:93:c6:1c:3a:b9:0b:b4:4b:88:63:
fe:d7:a7:0d:61:2c:07:10:4c:29:76:12:c9:6d:34:f7:17:84:
07:7a:0d:08:43:3c:03:a4:5e:76:f9:dd:e8:ec:e3:f3:d4:6a:
b4:ee:2a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:50:52 2024 by rpki-client on console-ams.rpki-client.org