Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/N26t2yBdtOVkn1wAPjcio_YqjVE.roa
File: N26t2yBdtOVkn1wAPjcio_YqjVE.roa (raw, json)
Hash identifier: gyoHxIIjX3vD06kgcwCnCXWD3LUqAv93ndr8a5+7yCE=
Subject key identifier: 37:6E:AD:DB:20:5D:B4:E5:64:9F:5C:00:3E:37:22:A3:F6:2A:8D:51
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 0191C6B87400056BCB2AB6B1BCB9CEC3A71E
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/N26t2yBdtOVkn1wAPjcio_YqjVE.roa
Signing time: Fri 06 Sep 2024 09:44:22 +0000
ROA not before: Fri 06 Sep 2024 09:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48882
IP address blocks: 91.242.208.0/24 maxlen: 24
91.242.209.0/24 maxlen: 24
91.242.210.0/24 maxlen: 24
91.242.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:b8:74:00:05:6b:cb:2a:b6:b1:bc:b9:ce:c3:a7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Sep 6 09:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=376eaddb205db4e5649f5c003e3722a3f62a8d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:32:66:58:ea:23:c6:d6:e3:32:92:fd:1b:
7d:c2:d9:ec:15:db:51:26:d9:2b:55:c4:ef:05:b5:
8b:0c:be:69:99:41:76:cf:31:48:be:b2:5e:a4:3b:
bb:e1:7c:d3:eb:c0:fd:40:30:91:09:f0:78:96:03:
1b:ab:16:48:63:14:ee:20:ce:b7:00:62:43:a7:1c:
d2:82:06:d6:b9:33:d5:c6:ad:b5:9e:98:3b:1a:74:
29:1e:4c:22:3f:bc:86:33:f5:a4:fe:87:bc:c1:ce:
6d:61:3e:45:09:fe:18:e3:fe:b1:7e:a5:ba:ac:46:
3d:57:fe:70:a1:7f:a4:7a:be:a4:04:63:e4:38:97:
6b:50:35:c9:4b:82:7f:7e:73:1b:8b:e6:02:de:b8:
71:11:5b:ec:5d:84:8b:e3:fd:23:05:08:c7:ee:41:
74:a2:dc:79:be:02:fd:54:be:71:e6:c9:37:2b:dc:
cc:4f:22:d1:88:72:1f:3f:c0:fc:3f:33:48:80:4a:
15:7f:bb:c1:0d:ac:44:2f:ec:a0:c6:7c:d7:38:c8:
ed:5c:ec:43:fe:66:17:45:48:aa:f7:47:e0:06:5c:
8c:3f:8a:28:84:cf:ab:4f:5a:2a:7d:ae:34:7e:90:
06:4d:c0:af:60:50:14:91:31:b7:e7:2b:96:81:9f:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:AD:DB:20:5D:B4:E5:64:9F:5C:00:3E:37:22:A3:F6:2A:8D:51
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/N26t2yBdtOVkn1wAPjcio_YqjVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.208.0/22
Signature Algorithm: sha256WithRSAEncryption
99:ae:a4:37:bd:f0:4e:c6:f9:fb:b4:62:72:d4:99:4f:b2:88:
a7:f1:84:d4:17:b0:3b:45:37:53:05:03:c9:46:76:79:01:8f:
b3:79:97:95:a7:3f:1a:7b:ff:ec:af:5e:39:5d:d3:20:42:47:
7f:9d:21:4c:ea:8d:0f:f1:40:75:e5:f0:b3:96:08:ed:77:f3:
47:4f:24:03:35:96:da:64:89:7a:84:fa:88:01:bd:16:d0:d8:
a0:df:fa:b1:23:d9:72:3d:24:9c:5c:da:5b:5f:7c:97:8d:56:
56:ab:3c:c7:9b:89:df:a2:bb:3a:fd:8d:06:66:a3:87:dc:3d:
f7:b3:c7:7d:f2:c4:be:31:7b:d6:9d:a9:e0:d5:9f:e4:da:e1:
8d:6a:05:91:53:f2:5c:b5:01:ff:45:4b:44:df:6c:a8:ce:ab:
a9:8a:f0:28:e6:37:59:02:31:11:e2:cb:b8:bc:f9:e8:08:0f:
2a:1d:3d:30:a8:9f:6e:a1:b5:ca:43:05:d2:a0:92:2a:39:ff:
f2:d7:25:8d:ec:c5:e9:a0:3e:10:e2:c4:90:65:78:5c:c7:41:
e0:eb:56:4e:fb:ac:19:bf:8b:31:c6:b4:e8:a4:2c:63:21:c5:
ab:99:66:64:be:5d:cf:a9:bc:89:5d:b7:e4:8e:9e:cc:81:70:
cb:fb:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:31:25 2024 by rpki-client on console-ams.rpki-client.org