Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/sh2OmRLunv11uMDNKYxBAY9BEUk.roa
File: sh2OmRLunv11uMDNKYxBAY9BEUk.roa (raw, json)
Hash identifier: /mSSgf21G9yuQS82EMfFXRfnFTUqXWvJadrgHxk1QFc=
Subject key identifier: B2:1D:8E:99:12:EE:9E:FD:75:B8:C0:CD:29:8C:41:01:8F:41:11:49
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 018CC79332E3F07565C7D461673DE5078FD1
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/sh2OmRLunv11uMDNKYxBAY9BEUk.roa
Signing time: Tue 02 Jan 2024 00:29:21 +0000
ROA not before: Tue 02 Jan 2024 00:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6696
IP address blocks: 91.220.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:32:e3:f0:75:65:c7:d4:61:67:3d:e5:07:8f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b21d8e9912ee9efd75b8c0cd298c41018f411149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:25:37:84:df:33:b1:53:95:b5:9f:0a:75:
69:46:80:27:e9:b7:81:88:89:2a:10:ef:2c:2e:4a:
db:33:39:43:2b:12:c9:ee:6d:5a:6b:d6:4e:34:e3:
3f:83:4b:e6:61:03:ec:95:03:0e:a4:00:f8:ae:b3:
ef:e3:e5:37:fc:0f:68:01:d3:d4:45:ac:75:b5:eb:
c2:58:6f:e3:ad:56:f6:b9:7a:80:8f:32:31:f0:d4:
c7:02:ff:f5:01:b7:d3:0b:e0:f6:81:6e:16:18:77:
a4:54:ee:5c:94:99:00:17:66:d3:d8:80:1a:3c:ad:
70:19:0c:b9:d7:cd:74:f2:67:89:41:00:44:7d:2d:
4f:6e:01:3f:32:e0:15:1a:a9:60:cd:59:1b:9a:b0:
86:aa:bd:a6:22:1a:f1:03:60:64:ad:af:84:60:6e:
fa:41:50:4a:c7:7c:07:81:24:ac:a5:4f:87:0a:da:
30:cb:2f:28:99:a1:c9:bf:db:65:92:81:b1:b2:79:
19:dc:e5:f9:0a:74:6e:5f:91:6c:3e:e2:3a:01:11:
c5:b8:9c:21:5c:5b:cd:58:47:f9:00:11:8a:c5:87:
69:70:13:eb:51:c5:48:5b:6b:d6:5a:84:4e:6d:df:
42:3a:34:fe:80:82:be:6d:39:34:d1:c2:ce:62:3d:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1D:8E:99:12:EE:9E:FD:75:B8:C0:CD:29:8C:41:01:8F:41:11:49
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/sh2OmRLunv11uMDNKYxBAY9BEUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.102.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2f:a2:62:9d:08:5a:ae:1e:da:5f:9f:8c:bd:6d:2e:d8:35:
3e:78:43:02:c6:e5:47:81:38:e0:8a:e4:10:f6:61:81:32:4c:
8d:e7:60:b0:ef:c7:16:10:25:30:60:fa:29:2d:73:c5:28:87:
10:0b:91:63:ed:9b:b0:86:5d:27:8c:06:fe:73:05:c1:04:2c:
e6:15:29:a4:a1:4a:85:31:f6:94:c3:1f:42:52:a4:b8:68:a4:
a2:ec:08:d5:76:40:6c:dc:d8:4e:ac:f3:dd:15:12:73:73:f3:
14:d6:4c:13:eb:70:09:3c:2e:70:9d:a3:4d:cb:d5:2d:74:01:
2e:26:77:ef:5f:dc:3a:06:63:a5:3a:10:b5:2a:5f:fd:32:ec:
59:b9:14:76:b6:fe:df:6b:69:75:70:37:be:69:b6:e0:e6:1e:
6c:22:88:79:2c:d3:8c:39:6f:2d:a2:2a:4d:b8:12:5f:c7:bb:
14:e7:47:9c:12:e3:ba:9a:95:9b:d8:1e:cd:c3:9e:41:9b:92:
bd:bc:8d:0f:b8:00:52:65:9e:b5:f5:ca:db:8a:8f:0e:40:bc:
f3:7f:96:50:c9:8e:75:5c:97:57:89:28:a9:92:40:73:fc:cf:
7a:c8:60:67:78:2e:ee:02:a1:49:d2:e8:21:9d:8d:6e:8d:cb:
03:54:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:41:02 2024 by rpki-client on console-fra.rpki-client.org