Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/ByrrdG2GIG14EAdUL2tMo5-7tn8.roa
File: ByrrdG2GIG14EAdUL2tMo5-7tn8.roa (raw, json)
Hash identifier: LUlI1S38afn0kq38yINuAjzvFMkZgon59PwsU/8i8hc=
Subject key identifier: 07:2A:EB:74:6D:86:20:6D:78:10:07:54:2F:6B:4C:A3:9F:BB:B6:7F
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 018CC3B7449C2BBCCF2418BFDF6166ADCDCB
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/ByrrdG2GIG14EAdUL2tMo5-7tn8.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 91.236.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:44:9c:2b:bc:cf:24:18:bf:df:61:66:ad:cd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=072aeb746d86206d781007542f6b4ca39fbbb67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:c4:a8:76:bb:77:a3:3c:3a:b1:e9:08:8b:
9e:48:c8:56:1f:54:33:70:e6:76:d3:86:a8:de:8e:
a5:28:dd:b2:8d:60:ad:c0:e8:c4:8e:b3:20:f7:53:
0a:35:81:eb:25:a1:0a:19:b3:4a:5c:5c:8e:32:51:
fc:16:3c:87:aa:e2:f4:7a:bc:6a:b1:f2:e1:e3:20:
b1:8b:89:00:dd:fa:7b:26:2c:a8:3d:00:d5:28:d1:
7d:19:80:ad:a3:b6:42:51:47:fe:a3:75:ac:6c:be:
08:a3:35:0d:75:87:ae:ca:41:89:0f:7c:f3:d6:c3:
9f:43:88:e1:4a:de:61:74:c8:8d:3d:55:d6:11:a6:
a0:da:b8:ae:5a:46:2f:83:22:39:d6:d6:00:14:1d:
e6:3e:ed:d0:65:5e:19:9d:a5:e9:ed:f5:f2:0e:93:
a6:7d:37:b9:ad:96:30:d3:2d:c6:28:85:53:90:b0:
f6:38:cf:0f:d1:e9:49:9d:62:a5:5e:00:9c:90:19:
20:4d:90:31:72:85:be:b8:9d:eb:db:1e:03:a3:27:
75:83:46:7c:f0:cc:9f:b0:35:e9:fb:a6:ab:61:bf:
2d:3a:ee:29:b2:9a:ec:ca:36:71:04:51:4d:6d:a0:
56:85:27:d8:55:9c:06:3d:db:f1:6d:a7:0e:35:6e:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:EB:74:6D:86:20:6D:78:10:07:54:2F:6B:4C:A3:9F:BB:B6:7F
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/ByrrdG2GIG14EAdUL2tMo5-7tn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.118.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:93:31:d0:f9:d1:c5:ee:79:7f:fe:2c:d2:fb:39:3a:8e:36:
f5:5d:ac:51:b0:70:72:e4:31:0f:6b:c5:e4:3e:1f:76:3e:f3:
52:71:59:18:0b:ff:fb:c0:ac:d5:e6:b5:e4:42:26:a3:7a:f6:
a7:82:4a:c9:ec:17:b0:46:af:8f:71:58:ff:45:62:1c:54:7b:
10:58:99:f7:f9:52:00:28:44:74:11:ae:9a:96:8b:98:b7:f7:
ae:a1:3a:8f:5d:5c:c5:0c:c5:7c:aa:db:79:68:54:0f:42:ab:
7a:74:dd:69:d2:34:56:d7:5f:16:4c:4a:b2:93:f2:85:85:26:
6a:1d:96:14:c1:22:74:ae:6f:86:14:72:7c:4c:f1:4e:86:2a:
b4:f0:4d:94:a1:ed:f1:13:e2:32:a7:0a:26:c2:74:66:d7:cd:
2a:ea:68:be:3c:f4:c5:9a:1a:15:f5:be:0f:f5:21:a0:86:c8:
d4:6b:5b:40:43:5c:39:c5:e7:65:69:4d:e2:24:cc:62:26:d6:
ff:ba:92:13:12:74:d2:2e:9e:ec:33:ef:cd:be:36:da:ad:41:
e7:b1:37:ca:83:56:06:75:66:07:2c:47:b9:e1:53:f9:4f:ab:
d5:fc:41:50:a4:9e:e3:cf:43:28:1d:e4:9b:dd:3c:7b:e6:ea:
ea:b6:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:57:17 2024 by rpki-client on console-ams.rpki-client.org