Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/aKZJP0DEzUXJ-aF7XWCKwEg_KX0.roa
File: aKZJP0DEzUXJ-aF7XWCKwEg_KX0.roa (raw, json)
Hash identifier: 68lkjcJ9z/QFmgoq7nyO2oC0TgK8YEhUgXa9kTboFhI=
Subject key identifier: 68:A6:49:3F:40:C4:CD:45:C9:F9:A1:7B:5D:60:8A:C0:48:3F:29:7D
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 018CC26D4C88F0E745D89178B017C403FBF6
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/aKZJP0DEzUXJ-aF7XWCKwEg_KX0.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50272
IP address blocks: 91.235.60.0/23 maxlen: 23
91.235.60.0/22 maxlen: 22
91.235.62.0/24 maxlen: 24
195.238.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4c:88:f0:e7:45:d8:91:78:b0:17:c4:03:fb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68a6493f40c4cd45c9f9a17b5d608ac0483f297d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:7a:fe:db:81:86:bd:0b:e1:a0:e9:7a:03:
28:39:29:2d:eb:32:4e:5a:28:46:a2:19:8d:c1:93:
71:aa:bc:df:38:63:9b:86:cd:e9:26:ff:fc:b0:65:
43:ca:ba:8a:0a:c1:d7:ea:3a:64:39:08:5c:42:e4:
12:8d:a6:f8:f2:22:a9:20:13:8a:8c:ac:ba:f3:f9:
19:8d:10:36:49:d5:02:0f:4a:a7:4c:a3:f1:db:8f:
d7:46:03:f4:b5:70:d0:2f:6b:c5:b5:8f:0b:e2:eb:
e2:90:d3:b9:bb:34:47:47:1e:33:1b:4a:aa:65:29:
e3:8e:cf:5a:05:b4:8e:f8:18:ac:35:0a:39:4c:1c:
44:ae:dd:49:e4:2e:dc:e4:e4:e0:12:a1:a7:d7:f4:
41:fc:42:76:17:5b:b4:cd:c0:c7:69:79:07:45:fd:
06:0c:f8:96:04:7a:f3:80:b2:aa:49:c5:ef:fc:99:
04:37:6b:1d:fa:25:d7:bf:8b:0a:2d:06:61:93:1d:
c0:97:c8:a1:ac:b5:86:7f:8c:67:18:9c:b3:54:9c:
ee:57:30:e6:83:75:13:27:59:13:b8:d1:5a:cb:76:
aa:d4:73:7e:a7:1b:d6:8a:96:e9:a0:0b:54:e9:a3:
49:06:48:e3:b5:b6:f7:d5:d4:28:8d:de:57:9b:19:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:49:3F:40:C4:CD:45:C9:F9:A1:7B:5D:60:8A:C0:48:3F:29:7D
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/aKZJP0DEzUXJ-aF7XWCKwEg_KX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.60.0/22
195.238.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1c:0d:9f:33:68:72:18:67:ad:9e:0b:14:42:dc:6a:7d:7a:
cf:9f:fb:01:7d:37:dd:5e:3c:1e:1e:70:7d:7c:0c:00:88:da:
2a:47:8d:62:01:fc:a9:d1:1c:9e:f3:c4:c4:59:94:c7:1b:a6:
7a:c8:d3:95:a8:f8:a6:b4:e1:53:3b:ce:6f:d1:86:7c:cd:cd:
57:dd:f2:f2:56:63:78:74:c8:27:c0:ab:a5:0a:e8:0c:f3:b6:
af:e0:c5:69:90:87:6b:11:3f:ad:ee:59:77:74:70:b4:2f:ed:
ea:52:58:e3:e8:5e:4d:fc:4a:10:d0:0b:b6:65:ff:93:61:f9:
9c:c8:f0:d9:fd:08:56:f0:33:f0:ac:ec:e2:03:fb:90:82:b4:
79:e3:fe:0a:31:15:bb:18:4d:c1:eb:3f:be:31:c0:69:4e:a3:
c1:3a:bb:22:cf:e4:a2:95:f7:d8:9b:51:c4:26:af:12:97:23:
59:a3:ef:aa:b6:f7:f0:21:8d:1e:95:fc:07:1e:29:7d:89:18:
fd:43:27:9f:c0:68:36:1a:f9:c9:ae:07:a9:cb:21:1a:36:55:
f5:d1:1f:83:3c:ab:09:f5:e2:bf:17:f0:1e:a6:f8:2b:71:98:
63:6e:09:27:3a:2a:17:d7:0b:ee:fd:e1:7d:57:08:ff:6d:36:
b8:15:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:28:27 2024 by rpki-client on console-ams.rpki-client.org