Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/VWe5r6j4TW1Wze1xh5tLW7ln3y0.roa
File: VWe5r6j4TW1Wze1xh5tLW7ln3y0.roa (raw, json)
Hash identifier: hTGlVwApCpwKTeZvsxw0bI+G3efKkhwwFe0KoGmsDL0=
Subject key identifier: 55:67:B9:AF:A8:F8:4D:6D:56:CD:ED:71:87:9B:4B:5B:B9:67:DF:2D
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 018CC6B778BC4D5E745762D60BCC5E65D0E2
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/VWe5r6j4TW1Wze1xh5tLW7ln3y0.roa
Signing time: Mon 01 Jan 2024 20:29:21 +0000
ROA not before: Mon 01 Jan 2024 20:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43511
IP address blocks: 91.194.249.0/24 maxlen: 24
91.194.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:78:bc:4d:5e:74:57:62:d6:0b:cc:5e:65:d0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Jan 1 20:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5567b9afa8f84d6d56cded71879b4b5bb967df2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:6a:7a:c7:39:42:5e:44:9e:c0:27:c2:e7:
d5:f3:dc:af:68:7d:a2:f9:69:6c:b3:b3:7f:2a:2c:
f3:f5:91:c0:c4:06:4d:b7:d9:5f:f4:89:dd:56:fc:
88:05:25:74:1f:1f:bd:c0:f3:a8:66:b3:85:6f:ae:
bc:4e:ef:81:46:aa:d8:04:d8:25:28:ac:74:1c:ca:
da:2f:72:c6:ac:2e:b8:75:4b:35:46:45:69:c1:20:
d0:0b:dd:65:01:c3:24:04:6b:95:98:e6:3c:48:2a:
46:56:5a:b5:30:70:57:21:44:52:87:6d:f2:bc:b3:
86:18:28:bf:24:53:af:23:33:cc:3d:71:f6:26:f1:
6d:f4:41:ee:0f:e4:05:2a:e7:86:83:87:98:48:c9:
ab:16:34:a4:78:74:5e:36:05:7b:be:ff:3e:ee:1f:
8d:ac:5f:1b:c3:9e:74:83:7f:2b:d8:a4:63:66:d9:
cd:89:b6:1c:c5:c2:d9:b4:9f:e2:3c:d7:ec:1e:d8:
95:2a:26:d3:01:9c:ad:07:af:5c:5c:02:1a:b7:a4:
22:76:0d:93:b4:46:c9:49:78:03:52:f2:dd:4a:8c:
3e:80:46:f6:f5:36:da:eb:d6:46:40:5e:16:91:1e:
de:6f:36:5d:a2:d2:24:be:ca:88:88:03:32:b0:8b:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:67:B9:AF:A8:F8:4D:6D:56:CD:ED:71:87:9B:4B:5B:B9:67:DF:2D
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/VWe5r6j4TW1Wze1xh5tLW7ln3y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.248.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:e0:ba:31:e4:0b:a0:9a:22:0e:32:73:c3:03:f8:5e:0e:91:
54:81:73:3d:23:c7:48:14:e7:92:09:2d:c8:89:e0:5c:cc:5b:
40:fa:0a:29:8e:fe:77:e7:19:f3:32:49:f7:79:d5:fa:93:3a:
29:fb:70:2b:b8:d0:c5:f7:23:ed:ec:f9:09:a4:8a:ac:e5:f6:
11:5f:7a:80:75:0d:d6:45:47:30:85:c6:36:b6:14:43:5f:63:
88:e4:2a:67:4d:67:1e:92:9b:27:d3:bc:c7:ed:37:8c:94:78:
9a:72:b9:f2:16:b1:ac:e3:28:28:94:7a:d5:e0:19:19:7e:54:
10:b9:57:bf:87:3c:80:b2:1f:1a:44:6c:aa:62:c2:a1:bc:97:
cc:d6:40:0d:e9:c4:15:00:4c:c7:a6:38:f5:a9:32:34:f1:98:
1b:04:11:0a:e5:72:bd:6a:22:dd:af:3b:55:20:b9:2d:8c:d3:
bc:e5:4d:0c:6a:2f:69:b6:5a:64:b3:28:68:ea:5d:bf:5e:ad:
df:5e:30:7d:ba:8f:46:61:c0:1c:20:3d:a1:43:4d:ee:a3:7c:
d9:ba:27:3b:3e:8f:1c:58:ec:bd:e2:a2:81:ca:37:b9:2f:e2:
b7:66:e1:24:16:34:5a:25:d8:ff:a5:20:f2:57:9e:4d:b6:ce:
de:c4:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:34:01 2024 by rpki-client on console-ams.rpki-client.org