Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/IYG8wvO-1A_NtaxskPdlenW1wZk.roa
File: IYG8wvO-1A_NtaxskPdlenW1wZk.roa (raw, json)
Hash identifier: 8rvKBhvEa4X4HQE+pZ344hM0V3t5/4wO9ILlR5Vy2s8=
Subject key identifier: 21:81:BC:C2:F3:BE:D4:0F:CD:B5:AC:6C:90:F7:65:7A:75:B5:C1:99
Certificate issuer: /CN=01a20abc10c468cb9943bd037ecf8c3e24efa201
Certificate serial: 018DA795150BF7C30721FEF8D6A4B5EEC0AC
Authority key identifier: 01:A2:0A:BC:10:C4:68:CB:99:43:BD:03:7E:CF:8C:3E:24:EF:A2:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/IYG8wvO-1A_NtaxskPdlenW1wZk.roa
Signing time: Wed 14 Feb 2024 12:26:21 +0000
ROA not before: Wed 14 Feb 2024 12:26:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 91.208.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:95:15:0b:f7:c3:07:21:fe:f8:d6:a4:b5:ee:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a20abc10c468cb9943bd037ecf8c3e24efa201
Validity
Not Before: Feb 14 12:26:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2181bcc2f3bed40fcdb5ac6c90f7657a75b5c199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:43:37:ae:01:62:11:42:f1:3f:b1:9c:ef:
7f:98:a6:fb:bc:be:f9:a9:96:14:9d:76:79:ed:d5:
ae:bf:39:b1:34:91:85:1e:a5:d2:95:73:a9:a4:86:
9e:9d:fb:70:f6:88:6a:05:3f:6b:32:c2:48:99:70:
40:89:82:e1:bd:af:f8:69:d1:1e:fd:0f:2f:e0:21:
41:2d:cb:c3:2f:9c:81:63:5b:f5:1b:e2:62:9a:81:
5c:72:40:63:65:a7:f0:06:b5:69:1d:5d:f5:c7:2d:
63:ec:df:4d:63:8c:8d:29:4b:ea:84:1f:4d:39:df:
4f:7e:80:f4:a3:0d:4d:30:d3:db:93:90:29:51:61:
8d:92:de:cb:c0:5f:a3:46:3a:ef:c7:15:6c:b9:69:
b4:82:39:8d:57:b7:e0:b2:a6:96:f2:bd:6b:89:44:
e9:3d:33:d8:b8:36:90:65:b5:ab:76:e7:9b:34:96:
32:3b:01:54:3d:a1:dc:a6:8a:3e:da:04:8b:d6:a0:
bb:ab:74:0b:75:4f:f6:53:65:fc:d3:0e:79:ed:34:
f8:85:fe:aa:a3:18:1a:5f:b6:ed:4a:18:46:eb:bf:
c5:e1:bf:f6:9c:02:cf:7e:f7:3b:45:c9:26:8f:ca:
48:93:b7:96:5a:3b:c3:d0:38:9c:90:b8:71:71:66:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:81:BC:C2:F3:BE:D4:0F:CD:B5:AC:6C:90:F7:65:7A:75:B5:C1:99
X509v3 Authority Key Identifier:
keyid:01:A2:0A:BC:10:C4:68:CB:99:43:BD:03:7E:CF:8C:3E:24:EF:A2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/IYG8wvO-1A_NtaxskPdlenW1wZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.36.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ac:39:41:97:63:1e:e7:79:ea:24:64:c4:c5:15:19:11:d1:
81:1d:f7:8a:49:1d:88:83:64:10:3a:14:22:8b:12:1d:5b:6f:
75:7f:fa:7a:fb:af:81:67:ed:67:87:0e:41:66:50:d5:27:36:
85:33:3c:b4:53:01:55:44:9a:e3:88:e4:47:9d:78:cf:61:4c:
cb:7d:44:38:4f:57:9d:0b:ee:9f:68:f3:cc:76:cf:94:69:75:
c0:59:92:b1:4f:f2:43:14:6c:23:01:d7:a2:f2:3a:9d:4b:d5:
b4:1b:bb:22:36:ad:1c:06:21:81:48:b8:65:7f:68:6c:91:7f:
93:a5:69:9d:d8:27:04:80:47:fe:cf:bb:85:3f:3b:f7:be:e0:
97:90:f1:5f:fd:55:4f:c8:17:13:aa:2e:a9:cc:a4:cd:85:be:
92:dc:35:bb:57:36:43:8b:ca:66:2d:8b:62:85:17:9c:82:83:
cf:c9:d3:c9:4f:f2:99:73:7b:fb:36:90:d6:94:3c:e9:a2:33:
58:4e:32:d8:18:d4:84:b1:9c:e9:d8:c7:ba:cf:e2:b1:bc:dd:
88:07:28:bb:00:f4:b0:c5:16:8c:25:aa:27:25:2b:d0:36:04:
18:f6:4d:9c:78:04:59:c9:ec:ab:f8:58:b0:ce:35:bd:aa:89:
55:ad:9f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:55:16 2024 by rpki-client on console-ams.rpki-client.org