Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/K73EtgMZb7cYVqzrdis_CP0B4XU.roa
File: K73EtgMZb7cYVqzrdis_CP0B4XU.roa (raw, json)
Hash identifier: bQGLWGyHADZXHajpLrlKsHpQS6DXEM9p9Mj5xv7fsL0=
Subject key identifier: 2B:BD:C4:B6:03:19:6F:B7:18:56:AC:EB:76:2B:3F:08:FD:01:E1:75
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 018CCA2A0238B525F2D5B3A59AF31B787C97
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/K73EtgMZb7cYVqzrdis_CP0B4XU.roa
Signing time: Tue 02 Jan 2024 12:33:19 +0000
ROA not before: Tue 02 Jan 2024 12:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56505
IP address blocks: 91.223.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:02:38:b5:25:f2:d5:b3:a5:9a:f3:1b:78:7c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bbdc4b603196fb71856aceb762b3f08fd01e175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:a8:5d:6c:66:5e:9b:e2:74:d9:11:4d:0e:
91:df:c0:61:05:41:aa:f5:b2:3d:5f:08:f3:a5:11:
87:02:30:41:e9:7b:3d:45:78:ba:6d:cd:ff:ae:99:
80:dc:c8:77:2a:42:44:99:05:bb:1b:a9:57:7f:11:
c0:39:54:14:ad:24:c3:e1:c8:a4:1b:8f:ec:e3:b3:
a1:38:85:b4:2a:0b:b0:08:66:54:ee:ad:f8:c6:3d:
e4:d6:8f:15:19:52:d8:83:c1:a0:98:aa:da:3f:7f:
05:a8:e8:e9:b7:90:0b:85:b1:d7:50:4f:21:e4:10:
1f:3c:3d:28:1a:76:7b:8b:21:65:48:51:d8:ef:69:
48:77:c7:15:2c:e3:40:1f:43:e6:97:f7:a3:71:6e:
76:2f:14:c6:87:c0:70:36:e2:c3:08:29:68:30:69:
79:77:25:e2:4e:73:5f:a8:78:5d:57:fc:a4:aa:d9:
31:26:b9:d3:35:54:1d:de:a9:36:69:7c:c0:15:46:
43:40:91:4e:4f:32:a4:41:6e:2d:72:e7:24:54:cd:
8e:32:e6:12:ec:8d:41:b4:3c:7c:64:f1:d7:03:a8:
75:b5:f7:0a:f7:0e:db:c8:73:ac:4e:9e:81:83:e3:
96:c3:bf:ae:62:e3:fa:a9:5e:3b:80:ed:6b:ce:c2:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:C4:B6:03:19:6F:B7:18:56:AC:EB:76:2B:3F:08:FD:01:E1:75
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/K73EtgMZb7cYVqzrdis_CP0B4XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.198.0/24
Signature Algorithm: sha256WithRSAEncryption
45:42:8b:55:df:10:56:8a:f8:60:ad:25:d5:d7:52:e9:cb:9b:
93:54:0f:ef:38:24:ee:07:21:2f:63:9b:d9:94:c9:cd:47:c1:
62:06:e4:e6:97:29:95:e3:b2:0d:96:ff:33:40:c3:05:d1:71:
21:b2:f6:5f:ce:30:49:98:12:4d:36:e5:b4:43:36:4c:a6:97:
d2:8c:02:6e:e0:a0:fc:36:2b:f0:c9:7c:68:31:cc:24:5f:a1:
43:b7:0d:45:10:eb:95:2c:cc:ce:44:0c:b9:0f:4a:2a:6a:c3:
4d:cb:c3:ca:01:7c:26:8b:9a:e7:df:c6:9d:b5:36:3e:fe:e2:
ea:a4:92:77:96:28:c4:ec:76:f9:d1:a9:bb:61:01:0f:57:d7:
48:1a:e3:fa:3b:5c:22:ca:fa:a2:31:4f:86:87:af:d1:7d:c7:
73:f6:bd:0c:88:9e:04:48:14:fe:7d:c2:76:9d:b6:eb:3c:cf:
7c:1d:11:e8:60:d7:88:9a:91:4d:82:51:85:83:99:00:11:04:
ff:05:04:91:4a:2e:1e:0d:87:18:71:b3:8e:c2:62:43:ff:b9:
00:e0:85:99:94:3f:0b:87:3c:6b:89:71:73:0c:9e:e9:48:86:
21:69:49:12:1c:70:f2:d7:7d:cc:e5:cd:a2:b0:ed:8b:2c:74:
18:94:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:21:47 2024 by rpki-client on console-ams.rpki-client.org