Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/U3qrbabnQnaai7hsrMvEaSHGs4U.roa
File: U3qrbabnQnaai7hsrMvEaSHGs4U.roa (raw, json)
Hash identifier: S2PXezMWPZ8wCcagWDjRsomHhk/ittgnci9avBABYgY=
Subject key identifier: 53:7A:AB:6D:A6:E7:42:76:9A:8B:B8:6C:AC:CB:C4:69:21:C6:B3:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 018CC5010377D885C0403409AF86F3C85FED
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/U3qrbabnQnaai7hsrMvEaSHGs4U.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213138
IP address blocks: 91.218.57.0/24 maxlen: 24
2a07:fec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:03:77:d8:85:c0:40:34:09:af:86:f3:c8:5f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=537aab6da6e742769a8bb86caccbc46921c6b385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:18:2a:5a:3b:6d:2d:12:2f:11:a7:1c:7b:
08:d1:a8:bb:ea:db:bf:a1:74:b2:03:a2:d5:c5:65:
ad:8e:75:a5:d9:5f:d1:cc:52:ab:9e:bc:44:9a:ca:
94:56:44:09:62:d8:80:e1:ea:aa:83:5a:a4:75:ef:
8d:d1:17:e8:e0:b5:1c:66:7f:6d:a3:0e:4f:1c:ab:
b1:23:33:81:e3:81:d8:21:13:52:bd:c8:06:5d:aa:
b3:c1:80:73:73:3f:54:96:9b:1d:3b:62:69:0a:d8:
0f:e8:29:a1:ae:85:16:16:74:e9:a1:3c:e8:f7:4b:
a0:ea:b2:81:82:27:0e:c5:1a:9a:a4:21:41:8a:9c:
d8:5a:ca:3a:69:f9:05:5e:1f:e5:7f:ca:90:9e:f9:
ff:53:87:5a:71:ab:82:2f:fe:21:3e:52:2f:1c:cb:
f5:61:49:40:fa:73:4c:10:05:be:6c:63:8a:47:f4:
9c:4b:5f:ec:98:14:0e:d7:cc:c0:2e:8e:8f:0b:72:
53:c4:6c:cd:bc:bb:86:d0:a2:2a:63:fb:0a:07:f8:
d0:34:e2:e3:1e:65:19:53:0a:13:0f:42:65:0f:ad:
00:f3:e9:d6:12:90:46:90:3e:fc:e5:ef:cc:8a:4c:
53:22:15:26:d1:2b:b8:c3:2c:25:9f:c4:a3:c2:70:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:AB:6D:A6:E7:42:76:9A:8B:B8:6C:AC:CB:C4:69:21:C6:B3:85
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/U3qrbabnQnaai7hsrMvEaSHGs4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.57.0/24
IPv6:
2a07:fec0::/29
Signature Algorithm: sha256WithRSAEncryption
81:99:8b:4a:d7:a6:22:b4:bf:64:00:31:fa:5c:8a:d7:48:a4:
c3:7c:91:c0:d3:ba:f3:f7:3c:92:52:e4:97:e8:58:d3:b9:79:
e9:3e:f1:e7:ee:53:12:11:74:56:da:40:b9:3d:2c:a3:e7:74:
d5:f3:c7:d2:e6:e2:55:7f:07:b4:fd:9c:4d:73:14:e0:6a:eb:
d4:11:6b:29:1f:51:e3:2e:3e:6c:ff:6b:cc:fb:53:01:f1:75:
cd:1b:f7:32:ab:39:2b:22:e6:c7:13:0c:38:0e:53:37:e0:6b:
b9:3f:1f:b8:85:54:8a:53:40:f0:93:2d:48:c1:3a:83:95:b4:
d7:c2:e3:fd:f6:53:b6:a2:d3:77:af:05:a9:2b:49:70:03:1b:
90:27:92:11:87:3e:79:c6:9c:bb:32:99:dc:50:3c:37:e4:a2:
7a:3f:a5:45:a8:a4:d8:5e:7f:99:50:e2:dd:b2:86:5e:24:b5:
48:35:93:27:51:9a:0a:b8:9f:6f:84:34:dc:ad:ae:a6:3b:cf:
61:40:4e:35:6e:71:4f:d6:ca:8c:49:fc:85:e6:a4:52:01:69:
96:97:10:ef:8b:73:58:25:6f:77:49:92:3e:64:cb:d0:53:44:
19:22:ad:6f:cc:c5:6e:6a:56:51:b1:3f:12:a9:82:2a:8f:5e:
eb:2c:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:44:17 2024 by rpki-client on console-fra.rpki-client.org