Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/S3V0kI8z0_STnUJBd_NUnisQsyU.roa
File: S3V0kI8z0_STnUJBd_NUnisQsyU.roa (raw, json)
Hash identifier: 2RHJYSsXWjmE9sZ1UKaH18UKAV8G72jj3v1C3E46nrM=
Subject key identifier: 4B:75:74:90:8F:33:D3:F4:93:9D:42:41:77:F3:54:9E:2B:10:B3:25
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01907A52B3718485A2A5CDB2005C23F4B738
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/S3V0kI8z0_STnUJBd_NUnisQsyU.roa
Signing time: Wed 03 Jul 2024 20:39:18 +0000
ROA not before: Wed 03 Jul 2024 20:39:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55410
IP address blocks: 91.108.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7a:52:b3:71:84:85:a2:a5:cd:b2:00:5c:23:f4:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jul 3 20:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b7574908f33d3f4939d424177f3549e2b10b325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:88:1b:f2:99:93:ab:78:af:8b:5b:6b:36:
7b:e1:75:eb:1f:0e:2b:42:28:a1:a8:95:ee:75:4b:
31:a0:9a:5e:9c:5e:20:d0:27:53:ab:dd:c8:83:82:
3d:b8:75:4a:f1:c4:c9:91:ee:bf:48:cd:24:31:12:
92:f2:f7:24:9a:ae:7a:13:2f:bc:10:dd:16:b9:1e:
49:63:f2:40:7c:b5:c9:91:a6:f2:58:9e:fa:c4:28:
1d:9c:ed:7c:84:6e:25:e1:9d:e4:3c:e9:ee:9c:1f:
71:e5:66:79:6f:bf:76:ca:2f:5f:bf:46:22:82:75:
e2:e1:ed:98:f1:f3:73:2f:49:9b:6d:c6:ec:f4:ac:
51:8a:f0:9a:ab:ad:91:a5:82:39:4f:3f:cf:08:2f:
17:df:7a:c2:f1:c2:e5:ec:20:1f:d5:f8:90:cd:81:
a3:4f:a9:8f:f2:ba:7c:d4:89:e1:4e:e7:24:75:30:
f3:10:12:8f:03:2e:92:24:b8:27:e2:8a:7e:75:be:
fa:f6:5a:11:31:93:10:e9:4b:17:73:a4:07:cb:1a:
20:4b:91:3f:bd:b8:54:f6:71:6b:ad:e6:3e:55:5b:
d4:9d:2e:c3:19:a2:99:05:e4:92:4b:8f:d9:31:21:
27:7a:da:47:95:35:91:4d:fa:4d:47:92:8b:bd:89:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:74:90:8F:33:D3:F4:93:9D:42:41:77:F3:54:9E:2B:10:B3:25
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/S3V0kI8z0_STnUJBd_NUnisQsyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.72.0/21
Signature Algorithm: sha256WithRSAEncryption
39:51:ad:d3:13:33:5b:80:f3:a0:2c:02:16:0c:4b:1e:72:f3:
0c:ec:d7:c9:ba:89:c2:0c:58:0c:fe:12:c5:68:e5:08:c0:e5:
e4:57:fb:38:d1:24:bf:34:18:16:a6:fd:4d:d5:be:8d:e8:68:
fe:2b:fe:3c:a2:21:26:af:fd:64:5d:31:13:a1:a1:c0:0e:96:
3a:a7:10:81:a4:37:6f:62:2e:23:99:c1:21:2b:ce:62:79:94:
fd:9d:ae:e3:1f:be:59:e3:90:9e:8b:3d:21:50:af:9c:e9:79:
0c:62:fd:0f:fc:c3:fe:10:c7:55:a8:e8:4c:04:83:38:cc:88:
a1:cb:03:0a:9c:45:e2:33:54:a4:b4:62:54:23:2e:e1:d3:3e:
c0:9f:47:33:cb:c0:44:ce:08:ed:3e:ee:88:92:61:07:34:d5:
ff:0e:aa:b8:a4:3d:53:e0:00:e9:8d:fd:f4:4d:9c:82:74:ca:
84:41:e6:0f:4f:7b:2e:34:da:14:1d:87:a5:0f:47:d0:b0:55:
a2:64:47:d4:cd:1e:7f:01:79:d5:ae:06:16:a5:77:d6:28:d2:
00:66:36:60:8b:c7:21:2c:74:e8:11:6e:4f:35:f9:c2:33:16:
40:8c:ac:cb:53:b1:60:4d:30:40:b7:58:5e:e0:14:ca:a1:0b:
af:00:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:06:51 2024 by rpki-client on console-fra.rpki-client.org