Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/iP1P9rTihrv6xWF1TdBOdk-GiKc.roa
File: iP1P9rTihrv6xWF1TdBOdk-GiKc.roa (raw, json)
Hash identifier: 2R93JfkHDbPufW13a+oYsCnpPZB8wl67PTawm5yA1zY=
Subject key identifier: 88:FD:4F:F6:B4:E2:86:BB:FA:C5:61:75:4D:D0:4E:76:4F:86:88:A7
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 018CC5DCC4B6EDCBBB56052366CF2E4F352A
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/iP1P9rTihrv6xWF1TdBOdk-GiKc.roa
Signing time: Mon 01 Jan 2024 16:30:29 +0000
ROA not before: Mon 01 Jan 2024 16:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41107
IP address blocks: 91.199.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c4:b6:ed:cb:bb:56:05:23:66:cf:2e:4f:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Jan 1 16:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88fd4ff6b4e286bbfac561754dd04e764f8688a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ff:95:b3:9e:e6:81:55:34:03:ca:4c:b9:60:
87:29:00:1e:65:04:ba:9e:8f:a0:51:e6:e3:91:f8:
11:8c:69:0b:93:a4:2d:be:e3:a4:b0:15:35:3e:9c:
91:b3:17:6d:32:a2:4e:57:fd:7a:bf:a9:97:f6:20:
ce:2d:bd:78:8d:7a:83:f8:41:bd:63:d7:44:6b:2a:
7e:83:e0:5a:4f:18:33:d6:ae:27:1c:ff:76:92:be:
f0:e1:2e:8a:ea:7d:94:1f:5d:35:a2:e8:01:11:c2:
5c:10:91:93:a1:01:1f:0c:d7:da:7a:78:e7:e5:cf:
ec:b4:b3:f8:f4:51:0c:94:0c:a5:b9:32:16:c9:91:
6e:6f:6b:b7:a1:82:35:fb:be:63:45:6d:69:3c:c2:
fc:58:ec:84:42:eb:5e:47:11:62:0f:e1:29:40:9c:
c0:e2:36:f6:42:3f:6f:ba:4c:97:d5:d4:1c:17:19:
70:54:e0:f6:e9:ac:93:84:54:b8:4d:b1:46:89:7a:
c0:1b:ea:bc:aa:95:00:05:41:a9:b0:08:b8:2c:08:
d8:9a:24:83:55:8c:b0:6d:b0:03:92:49:28:b8:0c:
06:84:78:21:5b:a4:90:f5:37:ed:73:5c:8f:3b:28:
bb:ab:31:4e:7f:a7:40:8e:af:e8:91:9a:f3:5f:02:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FD:4F:F6:B4:E2:86:BB:FA:C5:61:75:4D:D0:4E:76:4F:86:88:A7
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/iP1P9rTihrv6xWF1TdBOdk-GiKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ea:05:7e:24:30:ec:c1:d1:6a:b7:40:34:bc:09:c7:b5:fa:
ac:06:f5:cb:7d:f1:96:e7:3e:d7:d3:7e:df:ac:52:4c:fe:e1:
c7:83:47:55:20:eb:c7:d7:7a:38:cb:2b:e5:fb:d0:9b:53:ec:
83:d4:41:74:60:f7:eb:9e:49:16:ed:4a:fc:fa:12:20:8a:9b:
3a:07:63:e3:dc:34:8c:f0:46:1c:50:85:02:6f:e0:ca:7b:bc:
51:ea:60:a4:a6:2e:e2:9e:45:10:08:4b:fd:bc:4a:10:8b:a3:
29:ca:37:cd:ba:40:b3:f4:63:3d:12:0f:32:59:f7:eb:35:b0:
7f:9e:e0:5e:3c:84:de:66:22:8d:ab:7c:a3:81:9f:63:fa:d3:
03:05:f2:67:76:54:2b:29:67:33:5b:d7:e0:95:65:36:a3:75:
1a:91:35:e4:e2:06:89:91:3b:f5:ac:f5:c6:d1:31:31:dc:09:
6a:3c:bd:32:20:85:95:b3:e0:88:03:92:0c:c7:24:39:2e:7d:
9a:74:fc:3d:8c:3d:55:37:23:5c:ae:bd:6a:c6:01:b7:8a:55:
cf:1e:16:0f:f6:25:53:3c:6d:5e:3d:5c:41:af:36:77:ba:43:
7a:25:a8:f7:61:e9:9e:84:fe:13:61:24:85:a3:e9:e5:ae:2f:
6f:01:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:11 2024 by rpki-client on console-ams.rpki-client.org