Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/yi68ksjZSxftGGKxmFVOJ8JLGIY.roa
File: yi68ksjZSxftGGKxmFVOJ8JLGIY.roa (raw, json)
Hash identifier: q27SVbtD8dV8gGpU8IQIm3xk773/BNVV61YBP2LzWzU=
Subject key identifier: CA:2E:BC:92:C8:D9:4B:17:ED:18:62:B1:98:55:4E:27:C2:4B:18:86
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 018CC50134DD8CE510153774C06B55D2D74F
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/yi68ksjZSxftGGKxmFVOJ8JLGIY.roa
Signing time: Mon 01 Jan 2024 12:30:39 +0000
ROA not before: Mon 01 Jan 2024 12:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200303
IP address blocks: 91.246.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:34:dd:8c:e5:10:15:37:74:c0:6b:55:d2:d7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jan 1 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca2ebc92c8d94b17ed1862b198554e27c24b1886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:03:f0:cb:28:27:35:7e:8e:42:1a:58:d7:
e6:51:be:10:33:cd:4b:f6:82:90:a7:6b:f7:92:6f:
72:19:9a:f3:12:ff:5d:85:c3:5c:79:e2:53:30:38:
bc:ee:db:ff:c4:b1:95:24:9e:f6:84:a3:ae:3f:08:
8a:aa:fd:e4:a3:eb:fe:9f:e5:e1:01:03:7e:be:0a:
cc:14:3e:80:fa:cc:53:f3:30:00:25:5b:a4:80:f8:
48:35:14:16:03:45:87:9d:a8:06:01:65:4a:45:2d:
41:25:d0:51:1b:25:14:3f:c5:0c:13:7e:f6:d4:0f:
c1:8b:98:ce:ac:e8:29:61:50:8d:1f:d7:95:2c:8b:
05:14:2c:5b:88:80:ff:2f:09:7c:82:8c:81:82:b9:
d7:42:a3:5b:0f:d4:af:77:1a:eb:0d:52:24:99:83:
17:06:3e:9d:97:f9:0a:c1:42:2a:4c:86:a0:1d:20:
27:19:7b:b6:80:7d:25:2b:8b:08:72:9c:7a:b0:d4:
ee:d0:d6:ec:44:e5:c2:8c:04:f0:b5:66:c4:43:35:
b7:d1:65:d5:a4:5c:21:9e:18:55:41:45:39:23:72:
3b:8b:51:d6:56:52:51:68:03:96:bb:b5:f8:2f:54:
fd:a1:a8:da:f1:c9:8e:f8:45:e1:e3:78:57:7a:ad:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2E:BC:92:C8:D9:4B:17:ED:18:62:B1:98:55:4E:27:C2:4B:18:86
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/yi68ksjZSxftGGKxmFVOJ8JLGIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:62:5f:a1:3f:4f:8a:b8:d7:6d:39:a7:49:7e:48:b4:1d:db:
9d:ac:99:c0:d2:5e:f2:3e:a4:b2:79:fe:be:24:11:96:e8:3f:
10:2e:55:09:c4:43:ec:ca:b4:41:f9:ac:79:70:ae:d2:e0:50:
ae:c6:18:dd:0d:ee:63:cc:e7:b9:8c:d3:9c:ff:35:46:c2:07:
76:52:1f:b0:c0:93:9e:bc:53:a0:bb:e7:8b:84:3a:42:b5:a3:
34:16:32:d2:17:0a:0d:3c:34:ac:e0:56:47:bb:eb:30:1c:5c:
be:33:b3:95:6b:08:eb:57:ad:0b:a9:ca:43:60:41:73:51:81:
3a:f7:e7:10:b1:f7:1c:f9:47:c8:9e:34:f8:d0:2a:7d:de:93:
92:24:7a:15:de:6a:40:85:19:ee:8b:fd:ae:1a:45:7c:54:8a:
3a:d3:94:13:09:86:e1:22:bb:f4:53:14:65:70:e6:68:76:20:
b5:5b:23:6c:31:91:ce:33:b8:8f:9c:34:80:dd:e1:df:bd:36:
29:21:c6:7c:a6:5b:6f:11:40:f9:6b:f6:cf:5d:ee:61:cb:82:
64:55:24:04:58:33:05:36:88:4c:55:c4:b4:29:e2:6e:98:95:
5d:c9:44:74:93:ca:b5:46:12:4c:f7:db:76:c7:f7:65:5c:c0:
5a:f8:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:12:52 2024 by rpki-client on console-ams.rpki-client.org