Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/tyH9ljXPhs12VRcgsMD3pjBOjtg.roa
File: tyH9ljXPhs12VRcgsMD3pjBOjtg.roa (raw, json)
Hash identifier: IqW1V6jeAF7ZbPdhAPe6UjKglo1QqJeoZzc5FlwYjqk=
Subject key identifier: B7:21:FD:96:35:CF:86:CD:76:55:17:20:B0:C0:F7:A6:30:4E:8E:D8
Certificate issuer: /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial: 018CC94E41187EF5324D18395DAD639AD3BC
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/tyH9ljXPhs12VRcgsMD3pjBOjtg.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34717
IP address blocks: 91.223.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:41:18:7e:f5:32:4d:18:39:5d:ad:63:9a:d3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b721fd9635cf86cd76551720b0c0f7a6304e8ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:a8:41:8c:02:4c:18:7c:c9:7b:fe:60:5c:
58:67:c3:ee:5c:e0:a5:da:48:7d:bc:2f:c1:e2:3a:
c3:29:75:94:09:5e:6e:10:07:2f:02:42:95:fc:8d:
3a:31:c0:5b:e7:12:1c:f7:c3:99:e4:ab:bb:a9:97:
af:3e:3e:a2:74:a0:ea:0e:ab:ea:77:03:2a:d6:ee:
0b:ee:40:90:e1:c4:04:23:3b:f7:05:df:83:57:4f:
11:0e:be:61:7e:03:03:4c:83:d2:a0:19:d1:20:3f:
7a:57:0c:78:90:1d:c0:58:6a:e3:63:0d:95:c1:64:
3a:f1:ce:8d:d7:30:87:92:fd:10:23:12:92:12:f9:
d5:fa:ac:92:89:93:42:1a:ea:d2:75:6a:85:56:6a:
71:92:69:72:e2:e2:29:40:a3:ad:6d:9b:6e:30:a9:
2b:ae:f3:f1:af:27:50:c1:a4:1d:bc:12:38:07:66:
2a:53:ec:10:00:2c:1a:e4:21:0e:58:26:68:d3:92:
7f:89:e5:4e:e8:4c:c7:ce:af:cb:5a:2c:fe:04:af:
03:80:4b:17:7b:c4:df:2d:29:d8:ca:fe:56:b3:03:
89:a3:f2:e5:bf:dd:28:fa:31:e0:7a:db:3a:f0:64:
67:52:b5:99:d5:ed:0b:58:c8:16:59:de:5a:20:7f:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:FD:96:35:CF:86:CD:76:55:17:20:B0:C0:F7:A6:30:4E:8E:D8
X509v3 Authority Key Identifier:
keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/tyH9ljXPhs12VRcgsMD3pjBOjtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.166.0/24
Signature Algorithm: sha256WithRSAEncryption
84:07:70:44:97:53:28:af:90:a1:5a:3e:81:0e:42:7c:c3:58:
67:c7:02:0c:02:ce:be:56:de:ff:26:cc:6e:c7:07:96:d1:18:
e6:06:6e:da:eb:c7:87:54:d0:36:78:00:df:2f:b4:da:f7:81:
e9:12:37:14:07:aa:a6:b9:ac:a6:88:7b:b2:69:64:56:2b:02:
7b:85:08:8a:d0:63:d7:3e:b1:ca:f6:bc:a9:ca:e5:56:6c:04:
e9:19:07:92:4a:ee:a8:89:d5:75:24:c1:ab:03:ea:c5:80:40:
db:7b:2e:82:f7:53:a9:8f:92:57:b5:9c:21:2a:ab:bd:65:b8:
58:d0:31:52:34:1f:94:d5:d6:5a:a8:64:7d:27:6d:44:e1:ea:
56:a1:b7:9b:2e:c7:77:09:c4:ee:70:e2:4b:8a:6d:b9:20:9d:
f6:af:21:79:6f:8c:ff:d3:3b:6f:6d:0b:9f:da:59:3f:d7:33:
4a:71:21:01:83:3d:9c:d1:3b:90:c7:44:80:4f:7e:6e:23:8b:
90:70:fc:3b:3c:3e:6a:82:e9:30:ed:33:c9:d3:36:46:41:fe:
d2:4e:75:09:39:90:04:f2:f9:5e:96:e7:27:3a:e6:50:1d:6a:
8d:f9:2c:e9:36:0b:b8:00:6d:aa:b5:43:2a:ae:75:5f:32:27:
c7:8e:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:47 2024 by rpki-client on console-fra.rpki-client.org