Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7QWuq59JoEVo7Ku7Whs67MccdF8.roa
File: 7QWuq59JoEVo7Ku7Whs67MccdF8.roa (raw, json)
Hash identifier: xnhQg1iadigffrhJLi/UVVvWEECll9vMpIyLdIl72ds=
Subject key identifier: ED:05:AE:AB:9F:49:A0:45:68:EC:AB:BB:5A:1B:3A:EC:C7:1C:74:5F
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019006B6B10C31B9DA49768514908C1F099B
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7QWuq59JoEVo7Ku7Whs67MccdF8.roa
Signing time: Tue 11 Jun 2024 09:52:34 +0000
ROA not before: Tue 11 Jun 2024 09:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57899
IP address blocks: 91.236.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:b6:b1:0c:31:b9:da:49:76:85:14:90:8c:1f:09:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jun 11 09:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed05aeab9f49a04568ecabbb5a1b3aecc71c745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:5c:c9:ae:8b:71:7e:9b:a8:88:7a:4a:ab:
76:07:09:c5:ae:6f:ac:5c:b3:1b:bc:0e:9b:49:ad:
0e:7b:e7:d3:0d:64:36:e7:c4:d4:f7:7f:f7:0e:37:
57:8e:aa:cc:ee:5c:8b:90:b1:2c:99:09:59:2f:7c:
41:0b:16:db:26:73:e7:86:49:0c:ae:9d:9a:fb:ce:
e5:5b:db:84:7e:f0:d1:75:20:b7:2e:83:0b:43:99:
e1:25:78:e6:26:2a:77:93:cb:d1:28:e7:d8:ab:b0:
d8:82:3a:8f:a3:61:21:61:b2:d3:49:d7:9d:ea:aa:
94:e9:bb:ed:3d:2f:28:a8:0c:29:82:db:14:be:4a:
3c:c3:a4:f0:61:d5:34:02:7a:97:b3:cb:12:91:59:
42:d7:77:fa:0e:f7:89:9d:3e:6d:27:07:2c:c0:41:
cd:d1:b5:06:4b:fe:35:73:30:e4:ef:13:6e:39:eb:
9b:2f:36:98:85:95:72:9a:4a:5b:f0:bf:56:7a:6d:
e6:14:a5:ba:0b:03:30:4f:c3:9c:30:b1:21:5b:e5:
17:69:9a:e1:52:06:ce:30:ff:d9:66:32:e4:a2:b1:
b1:c7:cc:16:2b:0f:a1:90:df:47:71:92:c3:fb:f5:
e9:e0:59:03:13:05:e7:13:1a:d2:4b:ef:92:ad:01:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:AE:AB:9F:49:A0:45:68:EC:AB:BB:5A:1B:3A:EC:C7:1C:74:5F
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/7QWuq59JoEVo7Ku7Whs67MccdF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3a:09:c0:d1:d6:ae:27:24:36:d0:c4:91:b1:16:4f:75:7c:
ee:c3:19:e7:f9:11:d3:71:57:d8:13:68:bd:49:ef:de:33:c9:
62:42:68:00:0e:96:74:26:7a:9e:f4:44:27:15:f8:c9:0d:d6:
4e:63:1b:e3:a1:05:d6:6e:60:97:52:bf:b0:1c:8c:9c:92:db:
2f:b1:9d:0f:7a:33:7c:97:78:cc:0c:9b:45:09:1b:0f:ba:69:
16:d7:ab:73:82:0d:6b:77:56:c0:a1:f8:5f:30:4f:b2:08:c5:
ce:d2:35:73:27:47:e0:c6:e4:f9:c5:9d:2d:dc:5f:57:c6:e0:
74:75:20:15:9a:31:37:19:cf:d2:8f:6c:2b:5d:f5:7b:93:a1:
98:0b:c6:76:c5:df:89:5f:c5:38:22:44:33:64:70:e1:b3:b1:
e6:63:a3:f3:c5:e3:ad:6c:00:f1:4e:ca:ba:c5:d0:07:84:01:
e0:c6:d4:98:85:1e:ad:3b:8c:a5:ba:96:6c:15:b7:49:f3:5e:
df:70:28:4e:52:08:a0:be:f5:08:bf:7e:0d:18:a7:e6:02:b7:
04:a9:17:8e:9a:df:2f:e5:a0:a1:ec:b8:a2:02:55:e8:5a:ee:
aa:96:1e:36:ae:a0:56:2e:29:e7:d2:6b:c0:a4:7f:67:d0:99:
48:4d:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:59 2024 by rpki-client on console-fra.rpki-client.org