Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/_zz6rMlZfM8FzIOUxg9nQiPDWDk.roa
File: _zz6rMlZfM8FzIOUxg9nQiPDWDk.roa (raw, json)
Hash identifier: 6dUbz0s9EEc+MJ4YRoqvo9r3RgTJth8R5meo7Lo+RHY=
Subject key identifier: FF:3C:FA:AC:C9:59:7C:CF:05:CC:83:94:C6:0F:67:42:23:C3:58:39
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 018F86D20FB5C7D73B9AE829BE19C83CAD70
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/_zz6rMlZfM8FzIOUxg9nQiPDWDk.roa
Signing time: Fri 17 May 2024 13:51:04 +0000
ROA not before: Fri 17 May 2024 13:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51099
IP address blocks: 91.216.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:d2:0f:b5:c7:d7:3b:9a:e8:29:be:19:c8:3c:ad:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: May 17 13:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff3cfaacc9597ccf05cc8394c60f674223c35839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:d3:cb:28:18:23:a0:88:42:ec:1d:33:f1:
5e:07:00:24:ea:d3:69:68:13:08:08:03:23:a8:04:
48:d2:47:e9:cc:58:94:02:1b:64:ce:1c:8e:44:b2:
b9:57:17:8f:d8:1a:6f:81:f7:cf:26:9e:9d:b9:ce:
74:42:cc:c7:86:e4:6d:10:85:4f:c7:8f:52:52:37:
3f:b6:41:03:c1:53:4b:25:d9:e1:f7:83:51:37:3d:
14:68:69:47:5e:c6:0e:cb:d7:c5:50:25:9c:b5:b2:
58:2d:1f:95:ac:9d:49:e2:4f:68:16:d9:23:88:22:
52:8f:10:3f:ba:80:d5:80:90:38:83:52:e0:13:db:
2c:25:e3:b9:b2:4c:cf:fa:e7:92:97:88:b8:1d:7a:
9a:af:f8:6f:d0:30:fb:69:e9:c4:40:8c:58:34:73:
94:64:d7:b7:9e:bf:a4:73:c7:ba:3a:68:74:3b:2e:
6d:21:f0:c6:3d:e1:9b:05:a4:5f:ef:d4:ce:aa:55:
c2:1b:5c:23:25:30:b4:64:f7:78:17:49:c4:7e:57:
6c:0b:4e:65:aa:44:2c:e3:ec:ad:29:f6:cf:30:0c:
a7:fb:e6:bd:3e:7a:dd:4f:2f:f2:b0:4e:02:93:5b:
c1:af:33:9f:3e:d9:b1:47:d0:e8:91:4b:94:74:36:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:FA:AC:C9:59:7C:CF:05:CC:83:94:C6:0F:67:42:23:C3:58:39
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/_zz6rMlZfM8FzIOUxg9nQiPDWDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.151.0/24
Signature Algorithm: sha256WithRSAEncryption
23:15:e5:86:d9:e5:74:65:58:98:68:ef:1f:4b:b6:74:b9:c3:
16:e9:92:f8:48:ec:92:9d:5b:a3:bf:da:9e:e1:d5:ee:64:0a:
c3:7a:10:7a:af:9c:6a:a0:2e:4b:96:d9:a0:39:0c:7d:f0:a2:
93:2a:6a:6c:0c:49:d0:ca:c5:43:ac:4b:0a:96:ac:e3:14:a9:
70:25:58:3f:13:c3:a4:ad:b6:68:d7:f2:f4:96:49:58:f7:46:
1a:d6:3e:66:e2:a7:2d:70:7b:30:0d:2a:af:cf:c6:75:bf:3f:
13:0b:5b:a2:d6:63:3e:b9:3f:0c:12:d9:93:bf:92:57:2e:22:
ca:d1:80:dd:51:62:c0:28:24:a8:39:cf:25:d3:57:8b:b2:5c:
c8:fa:20:f0:f9:e7:97:93:b1:77:9f:57:74:bd:1d:fd:3d:4d:
3d:94:4e:f2:86:18:6e:72:dc:b8:0f:3f:2d:ce:8d:53:8b:68:
26:4a:b0:ec:ee:f3:2b:39:48:42:f4:cf:99:28:a0:56:b3:c6:
41:6f:e9:54:d3:da:bb:63:92:84:fa:a3:66:e1:b8:25:c0:f9:
8e:44:7f:fa:f5:c5:70:24:42:39:89:88:6b:2c:4f:99:b4:31:
3e:43:bd:bc:0b:fa:1c:e6:35:40:f1:3f:e2:b5:10:ba:fb:c7:
05:f0:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:41:22 2024 by rpki-client on console-ams.rpki-client.org