Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/8j338Pqjeiw3cZwEIaEJsvxAqQE.roa
File: 8j338Pqjeiw3cZwEIaEJsvxAqQE.roa (raw, json)
Hash identifier: uY+hdkBMHmTrpW2cGWm55SHvsrbve4cRp9bvYqaCxgU=
Subject key identifier: F2:3D:F7:F0:FA:A3:7A:2C:37:71:9C:04:21:A1:09:B2:FC:40:A9:01
Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial: 0192297CF87CA7F0C534EB28F353ABF05AB7
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/8j338Pqjeiw3cZwEIaEJsvxAqQE.roa
Signing time: Wed 25 Sep 2024 14:01:48 +0000
ROA not before: Wed 25 Sep 2024 14:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 91.209.75.0/24 maxlen: 24
2001:67c:211c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:7c:f8:7c:a7:f0:c5:34:eb:28:f3:53:ab:f0:5a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
Validity
Not Before: Sep 25 14:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f23df7f0faa37a2c37719c0421a109b2fc40a901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:f2:77:7c:cf:c6:b0:f3:fe:21:5e:0e:8e:
3c:b5:b1:1a:2f:dd:0e:9c:a5:df:bf:38:0a:13:7f:
3a:4e:8e:3a:92:3f:03:05:1f:52:4e:6f:5f:24:f0:
c3:1d:3b:ab:9a:68:01:46:83:2e:d1:f7:bc:a0:05:
d5:04:b4:29:24:06:e8:95:58:e9:da:d5:7b:e2:cc:
bd:a6:59:28:64:d5:e5:8e:7e:84:92:ca:0a:d0:15:
0f:51:6f:44:7b:45:03:b1:0e:18:fd:a6:c8:67:0b:
cd:55:4a:2e:39:86:a7:a1:78:f9:37:69:4c:29:17:
f0:5d:e9:89:2f:73:09:cc:0d:36:f1:e8:79:be:ac:
cf:04:d2:89:8e:ca:47:e1:b3:1f:ed:73:2a:d7:aa:
2f:d2:c0:50:e4:9b:cd:09:b9:96:7d:85:7b:a6:bb:
03:23:e9:33:72:20:64:6d:e5:ba:ec:c4:5e:59:aa:
33:54:4e:83:ba:83:14:be:94:e0:2b:c5:21:2f:dc:
69:e4:a7:85:61:fd:50:bc:0d:4f:0e:62:ae:21:ce:
b3:88:e3:ab:89:22:60:de:ca:cd:0a:15:c8:52:e8:
8a:ef:0f:b7:8e:c7:5b:44:aa:ef:74:6d:15:6f:ea:
3a:4d:dd:d1:d2:5b:14:8e:12:0a:6f:1c:63:1d:b2:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3D:F7:F0:FA:A3:7A:2C:37:71:9C:04:21:A1:09:B2:FC:40:A9:01
X509v3 Authority Key Identifier:
keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/8j338Pqjeiw3cZwEIaEJsvxAqQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.75.0/24
IPv6:
2001:67c:211c::/48
Signature Algorithm: sha256WithRSAEncryption
44:97:00:c6:2f:bf:4b:1e:f8:32:5e:7d:9b:29:15:c9:f8:4c:
68:d5:72:24:cc:20:ac:b2:6d:d0:21:e3:eb:dd:ca:a8:64:0e:
81:40:af:b0:5b:6a:f7:75:1d:4f:e6:39:50:c5:cc:eb:a4:bd:
90:6a:2a:8c:46:f1:df:d9:bf:88:fd:55:47:c5:73:63:d7:0c:
cd:58:c1:9a:aa:f8:dc:bf:ea:0a:4a:18:13:19:6c:e9:6d:5e:
31:80:2d:12:82:94:52:e2:2c:4e:61:94:c2:50:e9:f5:34:11:
95:f7:34:e8:ed:6e:28:a0:36:54:ac:4f:31:ef:d9:90:fa:0b:
7a:cc:19:4e:60:84:d1:a0:b2:0f:b3:c9:18:a9:bb:d1:26:37:
e3:00:c8:8a:d3:03:21:b6:a1:0b:b1:e2:a8:09:74:c5:52:97:
4e:2e:1e:00:01:08:e3:93:86:d1:50:c3:15:c6:0b:8d:33:f3:
8a:78:71:26:4e:6e:1c:36:b6:c6:f4:d3:10:6a:b3:12:b1:5d:
c3:b1:b6:d2:6e:a2:a2:25:b8:93:85:56:0e:6f:ad:ed:fd:7a:
0e:a3:ac:f4:bb:e9:a1:b8:21:bd:b6:f2:47:50:17:06:6f:90:
e2:3c:af:44:13:b9:70:1f:f1:e8:c7:9f:58:87:01:d4:8b:6b:
6c:f0:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:18:29 2024 by rpki-client on console-fra.rpki-client.org