Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/1-_h5sQxxazKwAlVPkr4WDvRBrTM.roa
File: 1-_h5sQxxazKwAlVPkr4WDvRBrTM.roa (raw, json)
Hash identifier: rVjd/nmnEIGPI6iIxMaHNyNZ5RiLaUhw5ylCp8vblA4=
Subject key identifier: FB:F8:79:B1:0C:71:6B:32:B0:02:55:4F:92:BE:16:0E:F4:41:AD:33
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 018CC8DF1C16498604822F7F1EC02993191E
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/1-_h5sQxxazKwAlVPkr4WDvRBrTM.roa
Signing time: Tue 02 Jan 2024 06:31:54 +0000
ROA not before: Tue 02 Jan 2024 06:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 91.216.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1c:16:49:86:04:82:2f:7f:1e:c0:29:93:19:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Jan 2 06:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbf879b10c716b32b002554f92be160ef441ad33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:4c:2b:4a:89:ae:ac:84:50:95:f2:d8:7b:
d4:ac:64:64:60:c0:51:5c:89:83:6a:5c:23:e0:40:
87:05:c5:da:6e:df:be:0c:e1:cb:98:75:54:1d:4a:
6f:06:25:8a:bf:c9:ab:6a:e5:14:9b:0e:dc:e5:52:
d0:4e:79:b2:13:3a:8d:04:b7:24:af:d9:8d:f9:3a:
64:00:a8:d9:f9:ec:82:db:70:6c:e0:70:a2:00:9d:
56:6d:ff:9f:08:bf:ba:64:74:d2:62:da:e4:ec:d1:
f7:01:cc:34:1b:7e:22:d7:2d:81:8b:b4:91:c6:0b:
3f:a1:c7:4d:5f:bc:78:f7:ac:27:2d:39:8c:0a:6b:
a3:24:dd:d4:73:70:59:9c:12:bc:d1:14:17:a5:b4:
84:b4:ae:2a:5a:16:92:d2:e5:69:08:6f:10:ad:6f:
88:4a:0c:cf:d6:2d:aa:48:90:35:ae:57:d0:04:8f:
01:95:09:ab:41:08:25:a4:5d:c8:46:9c:d6:27:21:
39:6c:a3:48:96:00:cf:51:81:a0:ed:66:a9:74:79:
e2:68:ad:07:b8:fa:40:1e:dd:94:06:12:e0:5d:8a:
2f:0b:d3:f4:e9:d1:86:ab:3d:dc:3d:37:8d:d7:f3:
ed:8d:56:28:38:cc:37:62:bf:8a:3f:38:e1:8c:5e:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:79:B1:0C:71:6B:32:B0:02:55:4F:92:BE:16:0E:F4:41:AD:33
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/1-_h5sQxxazKwAlVPkr4WDvRBrTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ae:fe:05:db:21:1c:d5:bd:84:79:a7:96:2d:6e:b3:bc:c9:
e2:2a:ec:ff:6a:93:b7:8c:f7:a1:fd:6e:97:35:09:7f:3d:21:
3f:c2:57:0a:82:89:d8:08:98:9c:11:7e:e0:94:dc:d1:08:88:
41:a9:65:28:e4:a2:2c:72:c5:e0:aa:20:9b:1b:f9:21:a9:4c:
1f:57:bc:75:4e:78:84:67:f7:3a:9e:32:27:9c:f0:37:fe:6a:
46:65:b5:4e:53:9d:e9:ab:b4:4e:7d:8b:c7:7d:22:76:6a:62:
5e:30:d9:b9:5c:df:79:5b:09:ad:d9:49:47:9c:7c:37:8b:95:
24:e3:85:f9:73:78:bb:f6:16:29:fc:a5:d6:a3:2b:f6:7e:c6:
bb:24:03:7f:5b:31:9d:3d:88:c2:df:99:9b:50:38:52:db:12:
79:41:5c:c0:21:4d:ac:c4:26:8e:62:df:2d:f5:ad:a0:e6:50:
f5:39:5f:04:79:3a:6a:8b:23:30:1f:b3:e1:29:f7:8e:ce:f5:
d0:77:f6:6f:fa:71:61:30:bc:f7:4b:16:ce:88:39:43:b0:11:
b6:6a:56:c8:0d:29:ef:a1:d0:b2:2a:80:ca:21:55:e3:7f:b4:
73:fd:3e:b1:10:12:7e:0e:3c:60:0f:da:ff:36:c3:ea:d4:d9:
b9:d3:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:52:20 2024 by rpki-client on console-fra.rpki-client.org