Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/_rFK3Gzr8OHxxLQCEzwt9wq0VEA.roa
File: _rFK3Gzr8OHxxLQCEzwt9wq0VEA.roa (raw, json)
Hash identifier: ffMJzwInpJb7x/5NCry1HcSrbbPNc6o61kJUNx28EEw=
Subject key identifier: FE:B1:4A:DC:6C:EB:F0:E1:F1:C4:B4:02:13:3C:2D:F7:0A:B4:54:40
Certificate issuer: /CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Certificate serial: 018CC349581797957D137B8D358F97D44E42
Authority key identifier: 27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/_rFK3Gzr8OHxxLQCEzwt9wq0VEA.roa
Signing time: Mon 01 Jan 2024 04:30:12 +0000
ROA not before: Mon 01 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57577
IP address blocks: 91.233.57.0/24 maxlen: 24
91.233.58.0/24 maxlen: 24
91.233.56.0/22 maxlen: 22
91.233.56.0/24 maxlen: 24
91.233.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:58:17:97:95:7d:13:7b:8d:35:8f:97:d4:4e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Validity
Not Before: Jan 1 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feb14adc6cebf0e1f1c4b402133c2df70ab45440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:12:32:c5:98:f7:06:21:9e:16:a7:7c:10:
8c:5c:86:66:31:ab:e9:a1:81:0f:76:63:5c:ba:b2:
f0:bc:de:e0:8c:2c:e5:9b:af:17:90:cd:8e:f3:ac:
83:9f:c3:18:74:e1:7b:53:84:10:3c:42:77:08:2a:
a1:70:99:ce:2f:55:9d:cd:a0:03:39:7f:1e:42:f6:
2f:e1:7a:e9:c6:8c:b5:1f:04:ee:cb:19:81:f2:63:
72:fb:9a:f0:48:60:96:25:74:e4:eb:4a:fc:28:60:
ef:73:d1:e7:52:fd:2c:5d:c8:fe:13:07:94:51:cc:
7f:76:fe:19:c5:e1:4a:bc:d5:35:9c:31:3e:1a:59:
03:53:54:d8:73:32:ce:1d:e2:9d:94:6a:bf:ef:6a:
5b:e9:56:1b:69:46:c6:84:49:c5:ef:0d:00:aa:d2:
ad:7b:ec:ec:7e:71:8f:2a:b9:db:30:ec:34:ed:63:
82:9a:7c:d4:e9:44:e6:8d:02:d7:6e:91:f8:f6:b7:
52:4b:26:08:95:4b:76:4b:5c:b0:2b:15:c3:03:c6:
8e:3d:1d:b4:9e:3f:05:52:d0:bd:82:3e:f5:41:2f:
93:84:2e:dc:49:ca:90:0e:83:4b:a0:9a:8a:5f:fa:
97:d2:28:62:fd:78:03:51:22:62:86:4b:ae:a8:6c:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B1:4A:DC:6C:EB:F0:E1:F1:C4:B4:02:13:3C:2D:F7:0A:B4:54:40
X509v3 Authority Key Identifier:
keyid:27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/_rFK3Gzr8OHxxLQCEzwt9wq0VEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
70:a9:13:bb:db:a0:e5:e2:fa:56:56:40:43:1d:52:ed:32:46:
b6:8f:31:d9:13:f5:eb:dc:00:93:03:d6:5b:2e:c3:87:9e:cd:
53:0a:3c:c7:2e:5c:9a:71:ce:3b:8a:66:73:08:57:0b:17:60:
86:41:e7:52:8e:2a:9f:a0:69:47:8c:a7:59:35:a7:90:3f:85:
b2:4f:a5:00:04:72:d9:e3:67:d5:5c:af:2c:66:d4:7f:a0:cd:
c6:75:39:b3:5c:94:62:09:e5:14:ba:14:bd:fa:b4:65:8d:1d:
2f:d9:61:da:ef:3a:c5:c3:a7:a3:cc:44:d4:34:eb:30:96:2a:
c6:79:c8:b0:f8:4e:ba:0a:f8:2a:e3:6e:9f:ee:fb:c9:88:0f:
5c:ce:71:0f:d8:2c:50:07:c1:61:0e:4e:b7:5d:32:47:b5:a0:
76:b7:94:6c:02:20:c1:f9:46:c2:58:a0:19:bf:5f:f8:dd:94:
b9:63:81:f1:35:e8:f3:06:7b:c5:c5:84:c1:8a:13:f7:55:b5:
f1:5c:35:a6:36:cc:a2:30:ab:2b:44:d0:f1:c5:30:37:5f:d1:
da:34:27:e8:a1:0f:e1:f5:2c:11:5e:08:fa:18:38:f7:d6:8f:
ce:db:8d:f3:12:83:3b:ea:d8:f8:91:01:f6:eb:de:77:80:4b:
08:34:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:39:23 2024 by rpki-client on console-fra.rpki-client.org