Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/i0gzSmWPuZh-Z40-E7aUBRExmKM.roa
File: i0gzSmWPuZh-Z40-E7aUBRExmKM.roa (raw, json)
Hash identifier: Y1bx0tbrbuUEkRKQqg5HDXbBSo712JGBMgIRgZyQI0U=
Subject key identifier: 8B:48:33:4A:65:8F:B9:98:7E:67:8D:3E:13:B6:94:05:11:31:98:A3
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 018CC94E6785493AFAF3EB26B2DE806C34DA
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/i0gzSmWPuZh-Z40-E7aUBRExmKM.roa
Signing time: Tue 02 Jan 2024 08:33:27 +0000
ROA not before: Tue 02 Jan 2024 08:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31019
IP address blocks: 91.228.151.0/24 maxlen: 24
2a05:9280::/29 maxlen: 29
2001:67c:22dc::/48 maxlen: 48
2a05:9280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:67:85:49:3a:fa:f3:eb:26:b2:de:80:6c:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jan 2 08:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b48334a658fb9987e678d3e13b69405113198a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6f:f8:86:39:c5:49:a2:15:43:1b:2b:33:b1:
5f:ed:80:3e:10:0d:af:dd:93:39:42:e8:18:82:80:
07:7b:5e:d3:32:fc:98:06:c7:06:04:28:ad:27:84:
1e:5f:3f:a2:b6:90:be:10:b0:30:8d:85:e1:60:d0:
74:2b:99:4a:5c:1f:57:1c:2b:8f:3e:ef:39:ed:41:
79:fb:15:5f:79:b2:75:24:d5:b9:44:41:13:37:d2:
cd:39:ca:51:d9:f8:61:bc:a7:8b:98:9f:8d:6c:ff:
ba:a7:46:1f:6b:b7:5a:b8:e2:1a:ce:12:4b:2b:9c:
65:85:25:82:63:1f:a9:74:20:e3:72:e0:df:9f:30:
f5:17:a8:ed:33:f9:6f:4b:0b:35:dc:a4:93:1e:bf:
81:ac:41:dd:5f:4a:c5:39:c0:2f:70:3b:aa:69:1e:
07:46:a5:2c:14:30:9e:2f:14:49:98:40:66:95:cd:
67:59:9e:0d:c7:8b:cd:c1:c7:e5:1e:9f:25:18:95:
8c:95:f0:72:00:ae:06:16:e0:c4:f3:88:a3:13:8e:
df:61:3b:4e:09:21:45:66:94:64:05:ed:2d:35:09:
bb:cc:a0:ec:f8:35:20:97:e2:12:c1:b9:16:dd:67:
7c:c5:b3:bb:1d:0c:a4:9c:32:8a:fe:a2:ec:7a:8e:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:33:4A:65:8F:B9:98:7E:67:8D:3E:13:B6:94:05:11:31:98:A3
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/i0gzSmWPuZh-Z40-E7aUBRExmKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.151.0/24
IPv6:
2001:67c:22dc::/48
2a05:9280::/29
Signature Algorithm: sha256WithRSAEncryption
0f:b8:9b:ec:d2:14:83:fb:97:19:87:d3:3d:fd:d6:26:bc:fc:
c4:ac:a4:ab:da:93:5f:3a:4c:8f:e2:60:56:b9:10:73:b9:06:
18:32:84:0f:dc:39:12:df:09:c7:dd:e7:5d:07:cc:36:8d:5e:
fc:44:16:d1:9c:5e:f3:f5:e9:3f:71:5a:31:0d:30:55:82:4d:
3b:03:99:92:2f:cb:73:e6:99:e2:0e:9c:0d:42:69:a8:45:5d:
9d:3f:0a:3c:8d:61:4d:35:e5:0b:2f:63:52:c9:97:10:e1:d1:
ce:4f:bf:26:a6:9f:f0:b1:a9:41:9b:f1:ea:58:ff:67:47:18:
44:09:5b:2e:34:ec:42:97:83:b4:c6:c9:fe:98:2a:82:78:e7:
21:02:b7:e1:ce:5d:9e:1e:b1:85:78:e7:1d:62:c0:9d:e3:ee:
36:a3:73:77:fb:b6:49:b8:8a:8a:70:2c:22:78:f2:f9:85:ef:
7a:2b:a8:36:1b:3e:4f:9b:81:3d:9c:10:57:9b:a6:a6:2f:d0:
86:b5:03:ed:1f:d4:dd:35:e3:c0:7b:a6:45:e5:10:7f:12:19:
9c:e0:80:16:77:7e:80:a2:47:61:88:52:36:ea:2d:cd:60:75:
48:96:f0:b9:7b:06:2a:68:0f:f5:8f:94:a8:04:b6:7e:38:8d:
3b:48:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:31:10 2024 by rpki-client on console-ams.rpki-client.org