Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/o1aLnSHs7bijBqEeev9Mpv2nOig.roa
File: o1aLnSHs7bijBqEeev9Mpv2nOig.roa (raw, json)
Hash identifier: m+VmlxQmoXbQxdNIFu+4+5Ze+uV2z5nwdIrTgQT8KnA=
Subject key identifier: A3:56:8B:9D:21:EC:ED:B8:A3:06:A1:1E:7A:FF:4C:A6:FD:A7:3A:28
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 018CC26D030221FFEA12E4ED73FB1B94F19E
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/o1aLnSHs7bijBqEeev9Mpv2nOig.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45043
IP address blocks: 91.215.70.0/24 maxlen: 24
91.215.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:03:02:21:ff:ea:12:e4:ed:73:fb:1b:94:f1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3568b9d21ecedb8a306a11e7aff4ca6fda73a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:00:15:8c:38:88:4e:36:07:b8:7f:43:ef:
2c:50:e7:9d:ab:d2:92:a0:d3:05:b0:f8:58:98:df:
44:19:2b:ed:fd:19:96:e2:f6:40:72:10:b8:c6:56:
f3:da:23:82:ee:f7:91:2e:a9:6f:bf:19:d2:df:37:
90:a8:13:c2:ec:b7:ac:2f:ea:66:58:35:62:cf:82:
99:fe:0d:fa:74:9b:63:2e:0e:9d:e1:f0:71:1c:41:
fd:b1:fa:2e:8d:a4:4a:27:6e:a2:b8:dc:a2:e6:18:
cd:8f:a5:96:4d:34:a7:3b:8f:6b:ea:35:77:00:ac:
b3:2e:ec:d2:05:c8:b0:24:1d:89:60:b8:ba:4c:1c:
0f:89:b1:f5:cd:29:fc:58:09:1d:e6:65:1b:37:4f:
df:6d:aa:c8:e8:d0:13:5c:c3:d7:a1:21:43:fb:9f:
d9:cc:76:fa:11:82:f0:ea:e8:b5:ed:10:94:a1:e2:
f0:f1:27:bb:ed:d2:8e:b6:42:59:3b:20:40:98:12:
41:cb:c4:a1:e9:d6:34:ee:b1:88:b2:c9:b7:ca:06:
66:d5:9d:25:02:ae:b4:b6:8e:ad:57:29:9f:06:e4:
94:fd:c4:c5:18:6e:46:a1:06:1e:22:88:8f:cb:0f:
08:d4:49:fe:1b:70:38:33:3b:76:cb:b5:ab:4a:67:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:8B:9D:21:EC:ED:B8:A3:06:A1:1E:7A:FF:4C:A6:FD:A7:3A:28
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/o1aLnSHs7bijBqEeev9Mpv2nOig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.70.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:32:69:c3:d0:91:0c:5e:7b:57:14:4a:9a:96:af:a2:3b:76:
cc:d9:cb:d0:36:e3:1b:1c:59:e7:73:fb:c3:0c:09:e5:d8:06:
b8:e8:10:c7:a7:57:73:94:c3:be:d6:fe:b7:41:65:19:22:92:
b7:0d:44:27:0a:6e:db:2e:d4:05:4f:77:87:b8:02:b6:24:e9:
f1:6b:bb:65:ca:e4:3f:54:c0:6a:eb:6a:d4:38:4b:10:3d:52:
d4:b6:3c:ff:5d:10:30:50:9f:a0:d6:b7:9a:59:48:7b:4a:d8:
44:db:48:fc:07:10:96:25:4c:6f:c7:ca:07:cb:36:24:c9:b8:
a1:a9:2b:af:a1:e5:d2:f8:07:f4:10:df:ad:43:5d:e5:04:69:
77:14:d8:65:ba:0b:e7:41:c4:38:f3:9e:a7:05:15:aa:e8:22:
d1:3f:ef:c9:2e:63:4e:4f:f6:24:90:d4:87:92:45:77:fe:95:
49:3d:24:a4:03:b1:24:39:85:d5:7b:9d:b5:72:e5:72:97:91:
72:8a:9b:02:a0:f8:23:18:da:a7:b4:00:7a:71:f8:f8:3f:23:
34:81:1f:31:dd:d8:cf:4c:58:5f:c1:95:41:42:ab:42:f0:8d:
c4:ad:1a:8a:87:58:c4:65:66:b3:60:85:cb:c2:eb:30:0b:41:
65:1c:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:19:30 2024 by rpki-client on console-fra.rpki-client.org