Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/7AihJ3DqJZK-B-DQ0MEhvIRQtNI.roa
File: 7AihJ3DqJZK-B-DQ0MEhvIRQtNI.roa (raw, json)
Hash identifier: dIVUQF/cEsmdc6MzlDri1gpHQH7C7g1SAt1Uwp7qYIc=
Subject key identifier: EC:08:A1:27:70:EA:25:92:BE:07:E0:D0:D0:C1:21:BC:84:50:B4:D2
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 018CC8715A9646C1BCABAAFE3F048C1117AC
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/7AihJ3DqJZK-B-DQ0MEhvIRQtNI.roa
Signing time: Tue 02 Jan 2024 04:32:01 +0000
ROA not before: Tue 02 Jan 2024 04:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 91.212.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:5a:96:46:c1:bc:ab:aa:fe:3f:04:8c:11:17:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Jan 2 04:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec08a12770ea2592be07e0d0d0c121bc8450b4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:b9:e7:db:77:ec:a4:3b:90:8d:6a:a0:5a:
ca:e0:e9:29:14:30:53:53:fb:f4:2a:31:01:fe:e8:
56:12:c8:39:59:91:0b:2d:98:48:cb:52:97:57:09:
84:85:f4:41:3b:84:be:5a:75:66:56:ac:2f:89:67:
63:27:52:bc:8a:70:82:c5:40:64:d7:13:d5:02:68:
ca:60:c2:82:be:4d:44:43:d1:5a:eb:80:57:31:72:
14:49:e8:f8:3e:77:cb:d1:e5:36:18:38:48:49:e0:
32:e4:df:ef:65:9a:9c:1e:da:61:62:6c:dc:07:f3:
02:f4:1f:03:fd:30:62:52:9f:07:b4:ce:0e:48:2a:
4f:be:f7:98:cd:d2:7f:94:78:19:eb:43:37:04:05:
11:4f:e4:87:cd:8e:49:d8:43:5b:5f:e7:93:e4:c9:
a7:46:7f:97:ea:73:f6:08:25:ba:16:93:61:fb:0e:
41:55:fb:53:45:51:e5:02:2e:cf:fe:38:b1:b7:e7:
34:df:fd:28:81:26:59:18:68:00:d8:cd:0f:5b:3e:
99:5a:eb:c9:e6:c9:92:35:ec:7f:80:f5:24:46:c1:
b5:bf:7a:6f:ce:d9:3f:88:51:15:76:35:84:9d:b7:
25:2c:4a:b0:f4:81:ec:be:a8:d9:70:25:dd:72:f6:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:08:A1:27:70:EA:25:92:BE:07:E0:D0:D0:C1:21:BC:84:50:B4:D2
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/7AihJ3DqJZK-B-DQ0MEhvIRQtNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e1:e5:23:b3:36:d3:10:51:0e:01:ad:a5:b2:55:80:65:0b:
c4:b6:a4:73:5d:18:29:c7:80:72:4b:13:c1:b2:29:d8:bf:15:
b3:da:7b:c0:17:62:d6:95:ab:70:e6:9f:ba:04:5b:9c:bb:44:
2e:81:56:57:8c:4e:7f:c9:a3:b3:18:7d:8f:ba:03:8e:ef:cf:
45:8a:d9:43:08:fb:a0:b4:88:46:a9:6b:d2:92:ec:91:01:cb:
12:b1:00:8a:b2:6c:f1:a5:d7:59:12:95:55:66:d5:26:f3:73:
c6:91:6e:e2:11:9b:52:7c:a4:d4:73:55:d7:2e:ed:23:30:6a:
51:15:e4:c4:81:65:bd:77:9c:48:41:dc:63:be:1b:78:49:e3:
ad:45:a2:cd:23:93:5e:1b:28:9d:92:93:de:5a:fb:e0:40:30:
68:4b:56:ab:05:c9:e5:da:48:21:46:43:61:77:d3:19:6d:aa:
f1:26:2f:31:7f:1e:ce:9d:26:67:57:06:74:53:72:88:9e:f4:
9c:7f:1b:eb:2d:d1:4b:77:b9:45:f6:38:10:cb:b6:62:12:74:
eb:d7:bf:5b:c9:e8:05:e5:93:82:0f:5d:18:08:ff:a0:0b:b0:
2d:8d:d2:d8:c4:29:af:5d:af:a8:34:fb:20:39:fa:0b:a0:01:
00:a7:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:49 2024 by rpki-client on console-fra.rpki-client.org