Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/V6i4AxoBY_S6RdDmqv2eLvvdSmg.roa
File: V6i4AxoBY_S6RdDmqv2eLvvdSmg.roa (raw, json)
Hash identifier: 0OlRhgeQrVn0ekLT6Ai+x7U8URKNnrkKlL6k1gEam00=
Subject key identifier: 57:A8:B8:03:1A:01:63:F4:BA:45:D0:E6:AA:FD:9E:2E:FB:DD:4A:68
Certificate issuer: /CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Certificate serial: 018CC795551D0F75F8A07CDDFB823F1D6AEA
Authority key identifier: 10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/V6i4AxoBY_S6RdDmqv2eLvvdSmg.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197490
IP address blocks: 91.221.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:55:1d:0f:75:f8:a0:7c:dd:fb:82:3f:1d:6a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57a8b8031a0163f4ba45d0e6aafd9e2efbdd4a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:3d:71:4f:19:2b:5d:d2:92:ef:3a:3e:87:
47:46:66:db:6c:90:34:ec:c2:5f:17:56:26:90:20:
34:06:75:51:96:53:22:d2:98:26:01:77:98:7a:44:
d5:0e:42:65:85:58:8f:c7:c6:ad:55:b2:fa:6a:a4:
04:0a:19:2f:46:3e:81:b0:1b:d7:a2:8a:77:ac:b8:
d9:96:97:02:61:02:2d:d7:57:a7:03:bf:66:8f:0b:
4a:09:01:c8:01:26:97:2b:1e:41:13:e2:74:10:82:
31:5b:82:d5:f6:22:e6:82:85:31:e9:41:b6:c2:a7:
01:1c:4b:c1:7a:59:85:9a:ac:c4:88:cf:7c:ea:06:
21:1c:e9:67:38:ac:04:ca:ca:ea:83:a4:0f:bd:51:
d4:f6:88:ee:c5:52:0b:cc:74:ac:37:3c:d4:15:3b:
e0:7f:9f:8c:6b:99:00:77:e8:aa:6f:a2:ea:d3:f1:
e3:76:39:35:4f:bc:ef:9e:b4:6d:12:b5:e6:c6:58:
dc:fc:87:c5:a5:38:0c:80:5d:92:7d:25:87:d6:98:
6d:38:8b:87:5c:b2:03:91:de:b9:83:31:28:01:ac:
59:99:33:ca:a6:24:2a:cb:29:43:7d:60:3d:e7:b0:
5c:e1:8a:a0:0c:56:86:18:02:38:f9:7a:25:b2:3c:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:B8:03:1A:01:63:F4:BA:45:D0:E6:AA:FD:9E:2E:FB:DD:4A:68
X509v3 Authority Key Identifier:
keyid:10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/V6i4AxoBY_S6RdDmqv2eLvvdSmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:03:84:8a:65:c8:8d:80:14:15:b6:5e:5f:f2:87:bf:70:2c:
cc:fe:e3:3d:de:9e:ad:3d:d9:10:f4:92:9a:93:82:f6:1d:92:
f5:73:4f:a8:af:f4:d8:e9:41:bc:0f:00:34:62:4a:c9:58:fb:
bd:33:57:a4:fb:20:d8:f4:3d:c5:73:93:6b:f9:76:42:46:8f:
f9:0a:c1:5b:5c:96:31:8b:e7:3b:8c:0f:95:e4:ef:89:31:96:
2a:d3:4e:ce:90:c3:03:de:cc:1c:99:07:d2:6a:78:63:af:a4:
5a:50:9d:e5:39:b8:54:9a:13:a8:aa:97:88:25:e7:66:12:5b:
55:fe:29:78:00:e6:7e:a7:d5:ac:19:5a:ec:33:55:09:c9:cb:
5b:30:f7:23:f8:19:97:80:93:8f:29:cc:0a:57:e3:ae:2d:c8:
63:c1:75:48:4e:69:a7:e9:61:51:d1:71:4b:91:8c:7d:0d:17:
3e:1f:59:fa:ac:bd:d4:e7:b3:28:49:52:92:73:27:79:81:f5:
9b:28:f7:74:4e:85:e0:e2:d5:73:68:01:35:1a:20:4b:67:c4:
83:b7:fa:f9:30:f4:4d:6c:fa:0f:73:e0:ed:a1:6b:f7:ca:22:
80:80:ba:a8:55:c1:38:e9:ea:b7:b9:25:80:ea:e1:28:37:31:
82:87:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:51:12 2024 by rpki-client on console-fra.rpki-client.org