Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/R8IL6SDgrbZCADrDMUTKv2dCqUI.roa
File: R8IL6SDgrbZCADrDMUTKv2dCqUI.roa (raw, json)
Hash identifier: ZJghf1SwqM46ALEidWXgEjtWt1sYxBKP0PI0pejEaSk=
Subject key identifier: 47:C2:0B:E9:20:E0:AD:B6:42:00:3A:C3:31:44:CA:BF:67:42:A9:42
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018D2109DFCBCFDFBC86D3F32F5528B6736C
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/R8IL6SDgrbZCADrDMUTKv2dCqUI.roa
Signing time: Fri 19 Jan 2024 09:25:11 +0000
ROA not before: Fri 19 Jan 2024 09:25:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 91.102.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:09:df:cb:cf:df:bc:86:d3:f3:2f:55:28:b6:73:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 19 09:25:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47c20be920e0adb642003ac33144cabf6742a942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:8d:6c:bc:58:55:8b:7f:86:60:d4:7d:34:
5b:84:68:e7:71:71:5f:80:69:78:fe:3a:6d:79:77:
94:c3:e4:86:c2:47:ee:35:25:02:35:43:9d:ed:38:
a6:5a:4e:e7:b3:a7:0f:03:f4:41:a8:8b:23:53:9b:
00:df:cc:1b:56:a5:53:d2:3d:69:41:76:a4:b4:46:
a1:10:e8:6b:1a:1e:3a:4b:74:11:69:e4:b2:b2:0c:
c6:52:dc:b6:81:aa:05:71:16:1d:85:ff:42:32:54:
df:7a:48:21:d6:03:49:0d:d5:eb:22:8e:5d:e5:58:
6e:b0:84:92:67:93:c7:7d:39:ff:1d:cb:73:f7:df:
b8:a1:8a:ad:61:a8:b7:d4:4f:a9:dc:21:97:1d:21:
d2:30:70:fd:b6:42:87:b5:c2:1b:64:b3:86:3d:b5:
a4:24:ed:ca:c1:58:0b:74:66:f0:1d:3f:4d:63:f1:
91:07:dd:47:d9:6c:98:75:65:ba:b1:b2:13:a9:44:
e0:dd:04:5c:3d:15:ab:1a:54:18:27:05:02:4e:60:
11:e4:65:d2:18:c0:f8:56:76:43:22:65:54:60:a4:
70:6d:2b:3b:2a:31:c4:2b:36:fc:d9:1c:08:33:8b:
b2:a2:72:2f:c6:12:69:cb:76:6e:a6:a0:96:d8:ee:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:0B:E9:20:E0:AD:B6:42:00:3A:C3:31:44:CA:BF:67:42:A9:42
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/R8IL6SDgrbZCADrDMUTKv2dCqUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a5:17:de:81:70:c7:64:e8:af:36:fb:02:d9:b7:17:d2:33:
39:20:93:97:9d:d5:42:26:aa:dc:03:4e:88:cb:ce:c6:ae:5a:
9f:ce:45:da:1b:30:f7:75:0e:d7:67:0c:15:72:76:45:c0:0f:
ef:f8:23:c5:79:b2:93:9d:6c:7b:cd:ed:fc:17:31:38:d8:67:
9e:71:2b:32:01:b1:2d:27:c4:df:21:24:f7:d9:cc:1d:7c:fd:
4a:64:f5:c4:80:63:f1:92:9c:1d:f1:26:15:0a:3b:5c:da:5d:
0d:3c:54:01:c0:79:07:59:4f:fb:30:20:e9:01:18:d3:dc:1a:
68:87:dd:88:d3:b5:f2:21:c5:3b:66:19:e0:ef:22:95:d3:8f:
be:76:26:b4:09:e4:ec:60:50:c0:c6:d8:9e:d7:66:be:06:4b:
ed:d9:f8:c6:05:05:3a:59:c3:0f:58:52:ba:09:cb:4f:d5:0f:
b3:c6:38:94:47:cd:ad:79:1c:1c:db:13:d4:63:30:16:85:21:
08:7c:67:e2:b3:42:6c:af:60:18:b9:d1:05:98:7c:d3:e3:ff:
20:a7:4f:93:30:dd:64:25:89:c0:1b:02:9e:74:df:94:62:0d:
07:c5:c2:28:d1:58:fd:1d:75:59:29:a4:39:b4:79:1f:72:72:
40:fa:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:25:18 2024 by rpki-client on console-ams.rpki-client.org