Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/vRzf6y5HVyrvE7bm2JfZkxSuOgc.roa
File: vRzf6y5HVyrvE7bm2JfZkxSuOgc.roa (raw, json)
Hash identifier: kn0lTPZZ//eB5TdpzkXRoVp+0Yt2D3UgbTMl8XSLdd4=
Subject key identifier: BD:1C:DF:EB:2E:47:57:2A:EF:13:B6:E6:D8:97:D9:93:14:AE:3A:07
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 018CC6B89D08FDE4F84458ABF93C06679468
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/vRzf6y5HVyrvE7bm2JfZkxSuOgc.roa
Signing time: Mon 01 Jan 2024 20:30:36 +0000
ROA not before: Mon 01 Jan 2024 20:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8870
IP address blocks: 91.222.67.0/24 maxlen: 24
91.222.66.0/24 maxlen: 24
91.197.130.0/24 maxlen: 24
91.197.128.0/23 maxlen: 23
91.197.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:9d:08:fd:e4:f8:44:58:ab:f9:3c:06:67:94:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jan 1 20:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd1cdfeb2e47572aef13b6e6d897d99314ae3a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:a8:49:d1:fc:b8:19:1a:94:f6:34:2a:8a:
d1:40:0b:32:b1:67:53:7a:18:bf:3d:03:c8:93:5e:
70:9e:e0:ef:14:56:29:0c:52:3d:e6:68:69:1c:3f:
20:68:e1:a5:59:95:4b:f2:b1:35:e1:09:a7:04:c9:
c4:08:03:1b:da:b4:f1:14:ed:8a:93:42:85:fb:f0:
ef:21:fd:b5:26:f2:c7:99:bd:de:9b:e4:85:d9:b8:
85:eb:b7:f8:77:24:e7:a5:aa:8a:40:36:6d:67:92:
43:00:df:9d:ba:59:20:f4:44:28:f2:fe:47:0f:12:
4b:8f:d7:ce:b2:85:9f:ea:62:34:0a:8f:36:65:8f:
6c:34:9a:ca:cf:22:26:38:88:3e:a1:2d:8b:3d:d4:
a5:54:64:48:70:56:9b:7c:25:4a:f4:b5:ef:06:49:
c2:88:f1:47:d6:95:66:04:b8:31:1c:00:85:71:20:
f7:00:e2:2d:c6:04:9f:17:4f:0b:b9:1a:0d:a6:66:
2a:a4:d7:8a:d4:1c:98:c8:b5:61:8f:e8:aa:90:3a:
7e:ad:96:e9:28:5e:96:22:09:e8:15:0f:58:52:e4:
29:8c:53:66:e7:53:fa:ae:9f:a4:ab:77:16:05:ce:
8a:f5:0a:6a:a3:fa:91:b0:eb:5d:c3:c2:67:b1:c6:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1C:DF:EB:2E:47:57:2A:EF:13:B6:E6:D8:97:D9:93:14:AE:3A:07
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/vRzf6y5HVyrvE7bm2JfZkxSuOgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.128.0/22
91.222.66.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:a9:9e:c3:bc:a9:06:30:99:05:fa:1c:1e:a3:bd:cf:a2:c0:
43:64:79:85:78:fb:1c:fa:22:3b:18:6f:36:3b:6e:19:11:e7:
19:b4:06:9b:8b:98:a1:bf:3e:4f:0c:99:35:35:b6:db:6c:40:
17:e0:32:fa:23:05:a3:24:0e:1d:e0:a8:10:d2:7f:ad:30:f4:
9e:25:60:26:85:dd:c2:bd:ba:5e:47:51:77:5a:36:01:07:43:
f4:f4:2b:da:8a:35:4b:fb:5f:05:89:f3:b7:05:36:a3:39:bf:
5a:45:ae:f1:18:ba:9b:71:35:fd:94:3b:4a:c5:b0:5d:66:70:
51:eb:1a:ea:63:7f:93:d9:42:ed:07:2a:22:24:30:88:db:52:
aa:5f:21:80:d5:cb:98:17:b6:4f:1f:41:73:07:ae:d8:64:4c:
e8:96:22:70:c0:b3:53:e2:58:c6:78:e5:68:9e:f2:50:d6:b4:
8e:ec:df:72:82:4b:cb:dd:a1:7f:6e:b6:70:42:c4:3a:25:a6:
4a:ed:b2:43:b1:33:9e:96:10:0c:11:d6:90:ab:2f:6c:dc:e1:
5a:50:b8:b5:2b:fb:34:ef:47:9d:ff:05:59:9a:59:a5:47:c5:
b0:8c:9b:19:fd:22:f3:e5:8d:f9:c9:85:1b:9b:90:39:6d:69:
b6:bb:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:13:10 2024 by rpki-client on console-ams.rpki-client.org