Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/pw1KnISeOLhyDZ9d_ATB9De16Rg.roa
File: pw1KnISeOLhyDZ9d_ATB9De16Rg.roa (raw, json)
Hash identifier: oj0TftTY8PMwZEMmF9ynWuri6RCCRsXMpjDe0O9HnRE=
Subject key identifier: A7:0D:4A:9C:84:9E:38:B8:72:0D:9F:5D:FC:04:C1:F4:37:B5:E9:18
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 018CC3B67B071465533C00FC2F037A6D351B
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/pw1KnISeOLhyDZ9d_ATB9De16Rg.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15879
IP address blocks: 195.191.1.0/24 maxlen: 24
91.206.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7b:07:14:65:53:3c:00:fc:2f:03:7a:6d:35:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a70d4a9c849e38b8720d9f5dfc04c1f437b5e918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6a:73:17:eb:4c:8a:cb:a6:d5:1f:a4:2e:db:
09:dc:fd:f1:8b:06:9f:b1:11:8b:df:22:f1:b4:e2:
40:bb:74:30:c5:b3:92:10:a2:02:de:10:50:b2:5d:
60:9e:50:ef:f5:66:68:14:f0:f5:a3:44:ab:8d:63:
34:f4:7f:79:f2:8f:29:85:df:81:e3:aa:2e:25:7f:
34:93:b1:92:3d:21:75:44:40:eb:5d:d6:be:9c:35:
48:21:b6:7b:68:74:4b:aa:e9:76:cc:14:77:27:75:
a5:20:4f:cd:91:92:5c:ab:ef:10:a6:d7:a0:e4:d9:
6c:79:32:c5:52:12:a0:e2:c5:ec:7a:75:91:a4:aa:
bf:d6:9f:01:68:41:9e:e6:ee:1a:99:0f:4b:50:51:
33:8b:08:1f:42:16:87:3a:c6:6e:ed:70:d5:e8:41:
02:34:4b:b2:1c:9a:f5:b3:4a:04:d1:73:9c:5d:d0:
83:e8:6b:09:a1:d4:ab:ff:43:31:94:f4:cf:e3:4d:
f1:65:a9:4a:69:3a:39:fc:1c:ce:17:d8:69:4c:fd:
a7:04:6f:ca:b3:e1:19:f6:c2:86:bc:41:32:e7:63:
b7:d8:62:e4:c7:4b:9f:e1:0b:a0:1d:2f:5e:9d:92:
34:90:73:65:70:f9:36:04:fa:37:de:c1:9a:e7:09:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:4A:9C:84:9E:38:B8:72:0D:9F:5D:FC:04:C1:F4:37:B5:E9:18
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/pw1KnISeOLhyDZ9d_ATB9De16Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.80.0/23
195.191.1.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f1:b7:9c:6b:f4:8d:f6:df:fd:c5:54:e9:1e:b2:4c:a6:21:
52:4c:44:38:b0:5e:f1:b6:ca:df:d9:b9:99:51:f8:a0:2f:42:
62:7c:12:01:8a:98:49:e0:89:f0:d5:32:bb:20:2a:a6:b4:ba:
8f:79:30:b7:10:ec:2e:e3:34:57:f6:81:86:17:eb:a5:22:ce:
d4:82:89:04:e6:a6:35:4c:32:4f:ed:15:0c:aa:78:54:f6:49:
be:cf:f0:4a:00:ca:80:33:9b:67:0d:31:7f:33:78:9d:48:be:
fe:d0:e7:b9:b0:b9:8d:6a:ec:d5:27:f7:f8:b2:2a:b9:4c:2e:
24:2e:3f:00:10:30:20:ba:9c:64:bd:a1:7e:cd:81:33:a8:43:
3c:72:84:92:0c:a6:3d:80:0d:86:f9:84:3b:9d:68:f7:46:06:
39:96:f3:af:ca:6c:90:82:37:1c:9b:64:6e:cf:90:36:f9:82:
91:d9:a5:4c:ac:b4:6b:71:93:fd:06:e7:99:b3:ab:cd:44:49:
a5:46:50:33:08:2e:1a:34:e3:64:9c:04:2c:ba:c3:27:73:69:
f6:a5:a2:0b:5c:03:b9:11:4f:6f:c5:83:b9:fe:58:e6:8f:4d:
67:bd:2e:9b:eb:4a:e0:bd:e5:0d:04:f4:a9:fb:60:f5:11:1f:
29:4c:47:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:41 2024 by rpki-client on console-fra.rpki-client.org