Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/322ydangtDdLlBwfAyREPkGmupA.roa
File: 322ydangtDdLlBwfAyREPkGmupA.roa (raw, json)
Hash identifier: kU1kyNVLLZFeQWQdEZ3XnhFcK6F0qvQ7W7tImnzqNX8=
Subject key identifier: DF:6D:B2:75:A9:E0:B4:37:4B:94:1C:1F:03:24:44:3E:41:A6:BA:90
Certificate issuer: /CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Certificate serial: 018CC2DADEACFD663BA0B38C292EBA5CB224
Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/322ydangtDdLlBwfAyREPkGmupA.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51134
IP address blocks: 91.230.144.0/24 maxlen: 24
91.216.168.0/24 maxlen: 24
185.252.196.0/22 maxlen: 24
2a0c:3240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:de:ac:fd:66:3b:a0:b3:8c:29:2e:ba:5c:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df6db275a9e0b4374b941c1f0324443e41a6ba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:32:74:45:0a:99:2c:f9:5a:27:09:c6:b6:
86:8f:3f:99:a1:fb:41:3b:c5:ab:95:81:0a:c8:b1:
bf:d1:f4:0a:69:c4:c2:97:a7:26:ee:52:d7:df:a1:
67:4c:e5:fa:f6:86:2d:0c:3d:11:b1:38:0a:fd:8a:
33:73:ea:1a:82:33:03:cf:30:c8:8b:ff:e2:62:7f:
c4:ef:2f:bd:9d:79:08:ce:bc:36:8b:9e:73:b3:f9:
46:6c:b4:94:b2:bb:8f:c5:a7:a3:eb:82:30:ef:c2:
56:d8:24:7e:4d:96:ab:bd:80:1a:34:06:bd:78:24:
d2:fb:a2:3c:68:2b:7c:25:05:e5:d7:c8:c5:0e:fe:
23:8e:47:0f:b7:12:63:90:2c:e5:a1:d8:b9:d4:ae:
91:85:16:3a:bf:d2:b9:c2:60:27:60:de:e5:af:1b:
30:e7:a5:2d:78:ea:af:a5:22:3b:f8:11:93:ef:46:
ae:80:4f:05:e2:f4:67:02:a3:06:de:2f:93:c4:30:
ca:89:df:c9:23:ab:d8:f1:7f:75:28:3d:e7:9b:fa:
c0:87:fa:5f:46:6c:da:db:4a:8b:48:f0:7a:d1:48:
53:12:ac:9a:81:df:07:0b:0d:68:df:99:10:5c:2f:
8b:4d:07:51:1b:ee:36:f1:bf:c4:a1:df:73:ee:c1:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6D:B2:75:A9:E0:B4:37:4B:94:1C:1F:03:24:44:3E:41:A6:BA:90
X509v3 Authority Key Identifier:
keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/322ydangtDdLlBwfAyREPkGmupA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.168.0/24
91.230.144.0/24
185.252.196.0/22
IPv6:
2a0c:3240::/29
Signature Algorithm: sha256WithRSAEncryption
8a:fa:9f:f3:3e:c3:95:b3:dd:49:fc:9d:58:fe:01:13:52:21:
ae:ab:19:e3:c3:8f:69:c0:a7:0e:cd:7c:b2:f7:2c:55:22:fc:
29:ea:e4:78:67:3b:e1:11:63:58:e9:34:b6:47:1b:13:b7:93:
c1:1f:8a:a7:51:be:ab:a0:00:ab:dc:b1:87:13:72:bb:ea:3c:
46:f9:16:28:b2:29:e5:b3:46:0a:50:78:7b:4d:19:89:5f:e3:
1b:98:ea:b5:00:aa:26:34:66:2c:52:59:79:86:69:9a:a8:ca:
ed:b2:2c:71:7e:68:0c:c9:88:14:45:d5:a0:74:03:26:7c:39:
0c:85:d8:36:ae:da:5a:47:a2:84:94:87:9e:33:0c:2b:7a:5d:
ca:ce:a2:57:ef:8c:90:2b:ec:74:73:f3:35:c2:a6:64:64:eb:
20:3a:2b:e8:7c:e5:1a:3b:d5:f2:13:81:9f:4c:2c:06:dd:99:
69:76:31:57:67:56:6e:0f:f3:ad:bf:df:20:50:ae:a1:07:1f:
cd:b5:9e:f2:e0:36:d4:e5:b8:18:aa:a3:13:fa:7d:1a:6e:eb:
cf:e2:44:96:89:c7:7b:1c:ef:00:26:eb:45:c8:6a:cb:f1:47:
41:b1:ba:d4:91:aa:1c:c5:14:9a:14:13:c6:43:f8:ac:c5:c2:
10:cf:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:04:59 2024 by rpki-client on console-fra.rpki-client.org