Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/6AupmVKHYCfqx79pCEQDKMOBnYo.roa
File: 6AupmVKHYCfqx79pCEQDKMOBnYo.roa (raw, json)
Hash identifier: ep5vtpTOCLxeao8CVRNks63LKAe9l6LiCL4jsENEQw4=
Subject key identifier: E8:0B:A9:99:52:87:60:27:EA:C7:BF:69:08:44:03:28:C3:81:9D:8A
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 018CC6B89D4B7E136FACC10CC8061A148097
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/6AupmVKHYCfqx79pCEQDKMOBnYo.roa
Signing time: Mon 01 Jan 2024 20:30:36 +0000
ROA not before: Mon 01 Jan 2024 20:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 91.222.64.0/24 maxlen: 24
91.222.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:9d:4b:7e:13:6f:ac:c1:0c:c8:06:1a:14:80:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jan 1 20:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e80ba99952876027eac7bf6908440328c3819d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:fd:b2:5c:1c:cb:50:ba:10:3e:e0:6a:15:
83:9c:72:d5:74:3b:5b:ab:7d:87:32:c1:cb:7f:45:
82:db:1e:c9:b9:e8:67:50:e7:ec:d4:2e:3f:b9:ef:
9e:71:51:59:ae:c5:f5:03:39:35:0a:0b:77:52:52:
42:ea:c5:3a:12:0a:9d:ed:4d:bc:c8:a5:02:fe:5f:
26:58:82:01:e9:77:5e:f1:4b:46:7b:67:b3:47:85:
a1:ee:4f:0d:89:08:b1:3a:2a:cd:02:3b:62:6d:bd:
63:77:02:4a:5c:69:9b:e1:cd:b2:b2:fb:e8:aa:25:
10:83:32:8a:42:62:62:73:20:a4:11:d3:07:34:6d:
ae:b7:af:80:77:19:52:fc:67:4c:2d:4a:c2:4c:c6:
80:41:fd:dc:5b:05:b3:b7:1b:65:76:7a:36:be:e2:
26:58:46:27:32:48:cb:2b:b9:ad:d1:63:27:26:2e:
a8:32:48:27:9b:42:fa:a2:6e:aa:3a:c4:1b:48:0f:
6f:50:c8:13:5a:ce:9b:31:86:7c:1d:80:e3:84:a7:
82:36:6d:74:db:b0:72:bd:17:ed:96:fa:00:37:d7:
42:81:41:28:3d:0a:6f:7d:4e:d8:60:d2:0c:11:ae:
98:a1:67:37:28:10:11:9e:16:52:2b:4b:04:e1:8a:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:A9:99:52:87:60:27:EA:C7:BF:69:08:44:03:28:C3:81:9D:8A
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/6AupmVKHYCfqx79pCEQDKMOBnYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.64.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:40:1e:cf:de:2a:21:72:e2:08:48:95:38:55:c4:c8:76:cc:
04:e1:a5:44:68:ac:54:41:9b:77:6c:29:9b:4b:ef:2e:06:05:
f0:b5:81:f0:58:d9:7a:dc:75:2c:61:29:eb:87:61:7d:d5:47:
91:1b:ca:b6:fc:a4:80:51:ed:39:44:0a:e2:17:04:4f:ed:00:
a4:fa:47:a8:8a:5d:21:e2:7e:cd:25:60:fe:6b:c2:68:69:ab:
b5:ea:7d:6f:25:0f:6f:9a:ad:8a:17:ab:5f:13:be:8b:43:35:
ce:41:11:ac:ba:42:5e:2f:19:9f:f4:01:7d:44:11:dd:7a:60:
81:1d:67:02:0a:b4:11:d4:24:93:ac:c8:ee:df:31:6c:e8:0e:
f7:72:4c:27:72:fb:bd:c0:a3:d7:fd:73:59:58:2a:a1:6a:57:
61:5d:47:4c:0d:6f:f1:d3:8f:90:e6:ba:48:eb:26:22:ae:b6:
25:e0:c1:70:e5:aa:34:dc:39:02:94:2c:20:af:31:6f:bf:1f:
24:83:e8:39:b1:a7:00:6a:70:ef:d6:c2:40:7b:3d:12:f8:f8:
19:f3:95:c5:27:8a:6a:39:71:3f:69:cb:3a:0d:2f:91:a0:56:
36:d0:e4:dd:6f:9c:b8:09:8a:0e:8c:05:07:2a:67:0e:47:51:
62:ee:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:55:58 2024 by rpki-client on console-ams.rpki-client.org