Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/kVAHh7vhGWIVKhfG8XAycKFL2JE.roa
File: kVAHh7vhGWIVKhfG8XAycKFL2JE.roa (raw, json)
Hash identifier: HyGb7+cQeklV2jhIUFgGuUTPLX+S5the2gKxwWmoI1o=
Subject key identifier: 91:50:07:87:BB:E1:19:62:15:2A:17:C6:F1:70:32:70:A1:4B:D8:91
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 018CC801436760F3441DB6381CAC9C9E5728
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/kVAHh7vhGWIVKhfG8XAycKFL2JE.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57538
IP address blocks: 91.232.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:43:67:60:f3:44:1d:b6:38:1c:ac:9c:9e:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91500787bbe11962152a17c6f1703270a14bd891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:38:9e:30:e1:ec:78:cd:be:42:ee:f6:a8:
fd:35:93:2d:f1:59:50:56:5f:66:a9:b8:44:b1:cd:
93:9c:ab:20:06:e4:66:5a:25:9d:d2:a1:3a:8a:49:
9b:d0:7b:c0:a8:0b:14:e6:58:b0:6b:83:ab:3b:fb:
9a:d3:09:fd:97:54:cc:e3:16:55:a7:1a:64:1a:90:
a5:a2:a5:6c:5a:e0:9a:b9:82:1d:85:c4:88:02:d9:
e4:b1:94:41:85:6d:5d:bc:a4:aa:aa:9c:a1:21:2a:
4b:a0:ed:85:cb:77:0f:86:84:a5:79:ff:f0:62:91:
96:42:d3:ea:cb:70:79:1e:bf:2b:0e:a4:30:ca:25:
5d:7c:ce:e2:4a:76:ea:69:90:4e:b6:6b:e6:dc:d0:
6b:07:88:12:43:2a:74:d5:76:44:82:8a:ad:9d:52:
8b:0d:23:6a:05:55:35:ce:da:fc:c7:20:67:34:bd:
d8:bf:5b:34:4a:45:cf:5a:aa:92:87:34:68:24:40:
eb:92:44:a9:24:29:42:f1:f8:c2:3c:92:7c:3c:b5:
b1:48:1a:b7:9d:22:ca:27:89:27:17:8b:df:4e:ab:
e7:f2:36:5c:19:64:78:81:89:e6:16:5e:19:d2:fa:
2a:ae:06:9a:b1:06:2b:09:4b:34:5b:8b:d4:b7:e0:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:50:07:87:BB:E1:19:62:15:2A:17:C6:F1:70:32:70:A1:4B:D8:91
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/kVAHh7vhGWIVKhfG8XAycKFL2JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.209.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cf:7a:a7:3a:be:c1:c2:01:ee:1d:81:02:95:0e:b7:a0:89:
e9:e7:76:f9:e2:c6:7e:4f:64:49:34:08:30:41:d3:0f:4f:c9:
ef:52:e4:01:b5:8c:74:6f:b1:27:b1:a0:d1:b2:d1:be:da:ad:
60:55:0c:31:8c:76:20:1b:79:ca:04:20:c3:b1:54:b1:64:7f:
f8:4e:eb:5f:b1:f0:f7:e0:82:c6:2d:6e:09:ca:54:93:9c:33:
2a:00:65:b4:b7:35:99:27:1e:e5:64:04:ee:c0:95:c0:e9:45:
37:14:e7:b2:b0:3d:b7:ed:13:20:4f:93:01:34:d7:57:90:7b:
f3:83:2e:51:32:9a:f5:f3:f2:53:26:cc:33:93:e7:ae:73:6f:
7f:fb:48:56:85:94:f8:11:6b:9d:6d:94:b8:a4:84:84:9a:01:
14:ec:22:c8:92:1c:29:9a:5f:ba:0f:3a:e6:66:bc:64:73:91:
50:2a:ac:31:1c:6f:3c:16:d2:80:f2:5b:fd:f4:ca:05:89:c8:
d0:a1:28:fc:77:01:9b:04:35:3c:d0:d9:c5:ce:63:54:c9:7b:
a3:37:72:a0:c7:da:9f:fa:94:f6:72:40:bc:88:ca:07:0d:66:
4a:ae:bc:56:ba:6f:9d:9a:51:1c:e9:81:2d:37:79:28:70:7a:
2c:0a:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:51 2024 by rpki-client on console-fra.rpki-client.org